vallum 0.8.16

Security boundary between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, sanitizes untrusted terminal output, audits every command.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

name: "Vallum Scan"
description: "Static security scan of MCP configs and agent skill/context files, with SARIF upload to GitHub code scanning."
branding:
  icon: "shield"
  color: "orange"

inputs:
  version:
    description: "Vallum release tag to install (e.g. v0.8.12). Defaults to the ref this action was pinned at."
    required: false
    default: ""
  paths:
    description: "Files or directories to scan."
    required: false
    default: "."
  fail-on:
    description: "Fail the job on findings: high | warning | never."
    required: false
    default: "high"
  upload-sarif:
    description: "Upload the SARIF result to GitHub code scanning."
    required: false
    default: "true"

outputs:
  sarif-file:
    description: "Path of the generated SARIF file."
    value: "${{ steps.scan.outputs.sarif-file }}"
  exit-code:
    description: "Raw vallum scan exit code (0/10/20/125)."
    value: "${{ steps.scan.outputs.exit-code }}"

runs:
  using: "composite"
  steps:
    - name: Install vallum (sha256-verified release asset)
      shell: bash
      # Inputs travel through env, never spliced into the script text — an
      # ${{ }} expression in a run: block is the GitHub script-injection sink.
      env:
        INPUT_VERSION: ${{ inputs.version }}
        ACTION_REF: ${{ github.action_ref }}
      run: |
        set -euo pipefail
        VERSION="$INPUT_VERSION"
        if [ -z "$VERSION" ]; then
          VERSION="$ACTION_REF"
        fi
        case "$(uname -s)-$(uname -m)" in
          Linux-x86_64)  TARGET="x86_64-unknown-linux-musl" ;;
          Linux-aarch64) TARGET="aarch64-unknown-linux-musl" ;;
          Linux-arm64)   TARGET="aarch64-unknown-linux-musl" ;;
          Darwin-x86_64) TARGET="x86_64-apple-darwin" ;;
          Darwin-arm64)  TARGET="aarch64-apple-darwin" ;;
          *)             TARGET="" ;;
        esac
        DEST="${RUNNER_TEMP}/vallum-bin"
        mkdir -p "$DEST"
        if [ -n "$TARGET" ]; then
          BASE="https://github.com/kahramanemir/Vallum/releases/download/${VERSION}"
          ARCHIVE="vallum-${TARGET}.tar.xz"
          curl --proto '=https' --tlsv1.2 -fsSLo "${DEST}/${ARCHIVE}" "${BASE}/${ARCHIVE}"
          curl --proto '=https' --tlsv1.2 -fsSLo "${DEST}/${ARCHIVE}.sha256" "${BASE}/${ARCHIVE}.sha256"
          cd "$DEST"
          # Asset checksum files are "<hex>  <name>"; verify before extracting.
          sha256sum -c "${ARCHIVE}.sha256" 2>/dev/null || shasum -a 256 -c "${ARCHIVE}.sha256"
          tar -xJf "${ARCHIVE}"
          BIN="$(find . -name vallum -type f | head -1)"
          install -m 0755 "$BIN" "${DEST}/vallum"
        else
          echo "::notice::no prebuilt vallum for this runner; falling back to cargo install"
          cargo install vallum --locked --root "$DEST"
          mv "${DEST}/bin/vallum" "${DEST}/vallum"
        fi
        echo "$DEST" >> "$GITHUB_PATH"
        "${DEST}/vallum" --version

    - name: Run vallum scan
      id: scan
      shell: bash
      env:
        INPUT_PATHS: ${{ inputs.paths }}
      run: |
        set -uo pipefail
        SARIF_FILE="${RUNNER_TEMP}/vallum.sarif"
        set +e
        # Unquoted on purpose: several paths in one input are word-split here.
        # The value arrives via env, so it is data — it cannot become script.
        vallum scan --sarif $INPUT_PATHS > "$SARIF_FILE"
        CODE=$?
        set -e
        echo "exit-code=${CODE}" >> "$GITHUB_OUTPUT"
        echo "sarif-file=${SARIF_FILE}" >> "$GITHUB_OUTPUT"
        echo "vallum scan exited ${CODE}"

    - name: Upload SARIF
      if: ${{ inputs.upload-sarif == 'true' }}
      uses: github/codeql-action/upload-sarif@v3
      with:
        sarif_file: ${{ steps.scan.outputs.sarif-file }}

    - name: Apply fail-on policy
      shell: bash
      env:
        SCAN_EXIT_CODE: ${{ steps.scan.outputs.exit-code }}
        INPUT_FAIL_ON: ${{ inputs.fail-on }}
      run: |
        set -euo pipefail
        CODE="$SCAN_EXIT_CODE"
        POLICY="$INPUT_FAIL_ON"
        if [ "$CODE" = "125" ]; then
          echo "::error::vallum scan usage/config error (exit 125)"; exit 1
        fi
        case "$POLICY" in
          never)   exit 0 ;;
          warning) [ "$CODE" = "0" ] || { echo "::error::findings (exit $CODE) with fail-on=warning"; exit 1; } ;;
          high|*)  [ "$CODE" != "20" ] || { echo "::error::high-severity findings (exit 20)"; exit 1; } ;;
        esac