Documentation / github-action
IntegrationGitHub Marketplace

GitHub Action: SupraWall Scan

Automate agent security audits in your CI/CD pipeline. Detect hardcoded secrets, unsafe tool exposures, and policy violations in every PR.

Live on GitHub Marketplace

The official SupraWall security scanner for your repositories.

View on Marketplace
1

Usage

Add the following step to your .github/workflows/security.yml file:

yaml
- name: SupraWall Security Scan
  uses: wiserautomation/SupraWall@v1.0.0
  with:
    api-key: ${{ secrets.SUPRAWALL_API_KEY }}
    scan-path: "./"
    fail-on-severity: "high"
2

CI/CD Guardrails

Secret Detection

Prevents leaking 'ag_live_...' or other provider keys in agent definitions.

Tool Audit

Flags tools with name-patterns known for prompt injection risks.

Policy Validation

Ensures your locally defined AGPS policies meet syntax standards.

EU AI Act Check

Verifies technical documentation completeness for high-risk agents.