Documentation / github-action
IntegrationGitHub Marketplace
GitHub Action: SupraWall Scan
Automate agent security audits in your CI/CD pipeline. Detect hardcoded secrets, unsafe tool exposures, and policy violations in every PR.
Live on GitHub Marketplace
The official SupraWall security scanner for your repositories.
1
Usage
Add the following step to your .github/workflows/security.yml file:
yaml
- name: SupraWall Security Scan
uses: wiserautomation/SupraWall@v1.0.0
with:
api-key: ${{ secrets.SUPRAWALL_API_KEY }}
scan-path: "./"
fail-on-severity: "high"2
CI/CD Guardrails
Secret Detection
Prevents leaking 'ag_live_...' or other provider keys in agent definitions.
Tool Audit
Flags tools with name-patterns known for prompt injection risks.
Policy Validation
Ensures your locally defined AGPS policies meet syntax standards.
EU AI Act Check
Verifies technical documentation completeness for high-risk agents.