HAIEC Scan Action
VerifiedDeterministic AI security scanning GitHub Action with AST analysis, policy gates, and SARIF export. Zero NPM dependencies.
Frameworks Covered
NIST-AI-RMFISO-42001EU-AI-Act
Services
ci-cd-scanningpolicy-gatessarif-exportast-analysis
About HAIEC Scan Action
HAIEC Scan Action is a GitHub Action that provides deterministic AI security scanning in CI/CD pipelines. It uses AST analysis for Python, Go, and JavaScript/TypeScript, with configurable policy gates and native SARIF export for GitHub Code Scanning integration.
Features
- Multi-language AST analysis (Python, Go, JavaScript/TypeScript)
- Zero NPM dependencies — uses pre-built binaries or API scanning
- Configurable policy gates for CI/CD blocking
- SARIF export for GitHub Code Scanning
- Incremental scanning with diff-based analysis
- Content hashes for cryptographic verification
- Deterministic results (auditor-safe, same input = same output)
Usage
- uses: subodhkc/haiec-github-action@v1
with:
fail-on: critical
format: sarif
Use Cases
- CI/CD compliance gates for AI applications
- Automated security scanning on pull requests
- Audit evidence generation for AI systems
- Policy drift detection in production code
Loading reviews...