Port unsafe-command-allowlist risk flag from mcp-audit #18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Self-test: runs THIS repo's action (uses: ./) on every PR so changes to the | |
| # action (Dockerfile, entry script, CLI output) are validated before release and | |
| # the tool dogfoods itself, posting a live PR comment. | |
| # | |
| # Downstream consumers should instead pin the published action: | |
| # - uses: apisec-inc/AI-Surface@v1 | |
| # See README.md and docs/CI_INTEGRATION.md for the copy-paste consumer workflow. | |
| name: AI Surface Check | |
| on: | |
| pull_request: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| jobs: | |
| scan: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Run ai-surface | |
| uses: ./ | |
| with: | |
| path: '.' | |
| comment-on-pr: 'true' | |
| fail-on-risk: 'false' | |
| write-inventory: 'false' |