agentcatalog/github-action-security-scanner repository overview

⁠GitHub Actions Security Scanner

Scans code changes for security vulnerabilities, secrets, and compliance issues

Comprehensive security scanner for GitHub Actions workflows. Detects SQL injection, XSS, CSRF, hardcoded secrets, insecure dependencies, and OWASP Top 10 vulnerabilities. Provides severity ratings, exploit scenarios, and remediation steps. Integrates with secret scanning, dependency scanning, and SAST tools. Blocks PRs with critical issues and generates security reports.

⁠🔧 Technical Details

• Type: Single Agent
• Models: anthropic/claude-sonnet-4-0
• Tools: No additional tools configured

⁠🚀 Usage

Run this agent using Docker Agent:

docker agent run agentcatalog/github-action-security-scanner

Categories: github-actions, security, code-quality