Scan pull requests for LLM security vulnerabilities using AI-powered analysis.
name: Promptfoo Code Scan on: pull_request: types: [opened] permissions: id-token: write contents: read pull-requests: write jobs: scan: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 with: fetch-depth: 0 - uses: promptfoo/code-scan-action@v0 with: minimum-severity: medium| Input | Description | Default |
|---|---|---|
minimum-severity | Minimum severity to report: low, medium, high, critical | high |
server-url | Code scan server URL | https://api.promptfoo.dev |
MIT