agentwise/action.yml at main · brandonwise/agentwise · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
name: 'agentwise'
description: 'Scan MCP server configurations for security vulnerabilities, misconfigurations, and known CVEs'
author: 'Brandon Wise'
branding:
  icon: 'shield'
  color: 'blue'

inputs:
  path:
    description: 'Path to scan (file or directory)'
    required: false
    default: '.'
  format:
    description: 'Output format (terminal, json, sarif, html, markdown)'
    required: false
    default: 'terminal'
  fail-on:
    description: 'Fail if findings at this severity or above (critical, high, medium, low)'
    required: false
    default: ''
  output:
    description: 'Write report to file path'
    required: false
    default: ''
  live:
    description: 'Query OSV for live CVE data'
    required: false
    default: 'false'
  supply-chain:
    description: 'Run supply chain analysis'
    required: false
    default: 'false'
  version:
    description: 'agentwise version to install when install-mode=release'
    required: false
    default: 'latest'
  install-mode:
    description: 'Install from a GitHub release (release) or build the checked-out action source (source)'
    required: false
    default: 'release'

runs:
  using: 'composite'
  steps:
    - name: Install agentwise
      shell: bash
      env:
        INPUT_INSTALL_MODE: ${{ inputs.install-mode }}
        INPUT_VERSION: ${{ inputs.version }}
      run: bash "$GITHUB_ACTION_PATH/scripts/action-install.sh"

    - name: Run agentwise scan
      shell: bash
      env:
        INPUT_PATH: ${{ inputs.path }}
        INPUT_FORMAT: ${{ inputs.format }}
        INPUT_FAIL_ON: ${{ inputs.fail-on }}
        INPUT_OUTPUT: ${{ inputs.output }}
        INPUT_LIVE: ${{ inputs.live }}
        INPUT_SUPPLY_CHAIN: ${{ inputs.supply-chain }}
      run: bash "$GITHUB_ACTION_PATH/scripts/action-scan.sh"