name: AgentShield
on:
push:
branches:
pull_request:
branches:
permissions:
contents: read
security-events: write
jobs:
scan:
name: Security scan
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- name: Run AgentShield
uses: aiconnai/agentshield@v0.8.7
with:
path: .
config: .agentshield.toml
fail-on: high
ignore-tests: true
format: sarif
upload-sarif: true