plugin-scanner.yml

name: Plugin Security Scan

# HOL Plugin Scanner CI, as recommended by awesome-ai-plugins' SCANNER_GUIDE.md.
# Keeps the listing's full trust score and surfaces findings in PR checks.

on: [pull_request, push]

permissions:
  contents: read

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - uses: hashgraph-online/ai-plugin-scanner-action@46ad86451b45941cd853a03ee6ccdb55f3dbee28 # v1.2.683
        with:
          plugin_dir: "."
          min_score: 80
          fail_on_severity: high