Releases: auths-dev/capsec-github-action
Releases · auths-dev/capsec-github-action
v1.0.2
v1.0.0
capsec audit GitHub Action v1.0.0
First release of the official GitHub Action for capsec — static capability auditing for
Rust.
What it does
Runs cargo capsec audit on your Rust workspace and reports ambient authority usage (filesystem, network, environment, process, FFI) in your code.
Features
- SARIF upload to GitHub Code Scanning (findings appear in the Security tab)
- Inline PR comments via reviewdog (free for all repos, no GHAS required)
- Baseline diffing — only fail on new findings introduced in a PR
- Configurable threshold — fail on
low,medium,high, orcritical - Installs from crates.io automatically
Quick start
- uses: bordumb/capsec-github-action@v1
with:
fail-on: highSee README.md for full docs.