actions
A GitHub Action that detects potential command execution and data leaks in PR changes
SITE CAPTUREBased on information published on the service's website. Selection and review policy
WHAT IT DOES
What does it do?
Vigil scans PR diffs and determines whether changed files introduce capabilities that could be used maliciously. Its check status can be required by branch protection, and scan jobs can be configured with exclusion patterns and failure criteria. Repository owners install it; PR authors do not need to install anything separately.
KEY FEATURES
Key features
- Checks PR changes for potential command execution, external data transfer, and credential access.
- Sets exclusion patterns and failure criteria for scan jobs.
- Makes the scan status a required check in branch protection.
- Runs scans after repository owners install it, without a separate installation for PR authors.