GitHub – HeadyZhang/agent-audit: Security scanner for AI agents and MCP configurations

name: Agent Security Scan
on: [push, pull_request]

jobs:
  agent-audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run Agent Audit
        uses: HeadyZhang/agent-audit@v1
        with:
          path: '.'
          fail-on: 'high'
          upload-sarif: 'true'

name: Agent Audit PR Review
on: pull_request

jobs:
  audit:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
      security-events: write
    steps:
      - uses: actions/checkout@v4

      - name: Run Agent Audit
        id: audit
        uses: HeadyZhang/agent-audit@v1
        with:
          path: '.'
          format: 'sarif'
          fail-on: 'high'
          upload-sarif: 'true'
        continue-on-error: true

      - name: Comment PR with Results
        if: always()
        uses: actions/github-script@v7
        with:
          script: |
            const outcome="${{ steps.audit.outcome }}";
            const status = outcome === 'success' ? '✅ Passed' : '⚠️ Issues Found';
            const body = `## 🛡️ Agent Audit Results\n\n**Status:** ${status}\n\n📄 Full results available in the **Security** tab.`;
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: body
            });

name: Weekly Agent Security Audit
on:
  schedule:
    - cron: '0 9 * * 1'  # Every Monday 9:00 AM UTC
  workflow_dispatch:     # Allow manual trigger

jobs:
  full-audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Run Full Audit
        uses: HeadyZhang/agent-audit@v1
        with:
          path: '.'
          severity: 'info'        # Report all findings
          fail-on: 'critical'     # Only fail on critical
          upload-sarif: 'true'

# Allowed network hosts
allowed_hosts:
  - "*.internal.company.com"
  - "api.openai.com"

# Ignore rules
ignore:
  - rule_id: AGENT-003
    paths:
      - "auth/**"
    reason: "Auth module legitimately communicates externally"

# Scan settings
scan:
  exclude:
    - "tests/**"
    - "venv/**"
  min_severity: low
  fail_on: high