basitalisandhu

basitalisandhu/security-actions

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.

6 good first / help-wanted issues · Python · last activity Oct 4, 2026

0 stars 0 forks 0 watchers Python MIT License
agent-security ai-security code-scanning composite-action cyclonedx devsecops github-actions hacktoberfest indexnow license-compliance llms-txt mcp prompt-injection sarif sbom secret-scanning security-automation spdx supply-chain-security
View on GitHub
6 Open Issues Need Help Last updated: Oct 4, 2026

Open Issues Need Help

View All on GitHub
agent-config-audit: `baseline-file` input to suppress known findings 9 days ago
help wanted hacktoberfest
basitalisandhu/security-actions
0

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.

Python
#agent-security#ai-security#code-scanning#composite-action#cyclonedx#devsecops#github-actions#hacktoberfest#indexnow#license-compliance#llms-txt#mcp#prompt-injection#sarif#sbom#secret-scanning#security-automation#spdx#supply-chain-security
indexnow-ping: read URLs from a changed-files list produced by `git diff` 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/security-actions
0

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.

Python
#agent-security#ai-security#code-scanning#composite-action#cyclonedx#devsecops#github-actions#hacktoberfest#indexnow#license-compliance#llms-txt#mcp#prompt-injection#sarif#sbom#secret-scanning#security-automation#spdx#supply-chain-security
sbom-diff-comment: collapse long tables inside `<details>` 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/security-actions
0

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.

Python
#agent-security#ai-security#code-scanning#composite-action#cyclonedx#devsecops#github-actions#hacktoberfest#indexnow#license-compliance#llms-txt#mcp#prompt-injection#sarif#sbom#secret-scanning#security-automation#spdx#supply-chain-security
llms-txt-check: report sections that are not sorted when `--sorted` is given 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/security-actions
0

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.

Python
#agent-security#ai-security#code-scanning#composite-action#cyclonedx#devsecops#github-actions#hacktoberfest#indexnow#license-compliance#llms-txt#mcp#prompt-injection#sarif#sbom#secret-scanning#security-automation#spdx#supply-chain-security
license-audit: read `pnpm-lock.yaml` and `yarn.lock` 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/security-actions
0

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.

Python
#agent-security#ai-security#code-scanning#composite-action#cyclonedx#devsecops#github-actions#hacktoberfest#indexnow#license-compliance#llms-txt#mcp#prompt-injection#sarif#sbom#secret-scanning#security-automation#spdx#supply-chain-security
prompt-secrets-scan: scan `.env.example`-style files only when asked 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/security-actions
0

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.

Python
#agent-security#ai-security#code-scanning#composite-action#cyclonedx#devsecops#github-actions#hacktoberfest#indexnow#license-compliance#llms-txt#mcp#prompt-injection#sarif#sbom#secret-scanning#security-automation#spdx#supply-chain-security