Documents & code · repo_security_scan
Code security scan
Semgrep, gitleaks, osv-scanner, bandit and GitHub posture: flaws, secrets, vulnerable dependencies.
- Price
- 1 credit / call
- ≈ €0.078 · $0.085
- Requirements
- No connector
- also works with GitHub
- Human approval
- No
- read or internal write
- Reliability
- Verified
- not measured yet
Input
| Field | Type | Description |
|---|---|---|
| path | string | Checkout path (default: the single repository under /home/user/repos). |
| semgrep_config | string | Semgrep ruleset: p/default (default), p/security-audit, p/owasp-top-ten, p/secrets, p/ci, p/docker, p/terraform, or auto. |
| include_git_history | boolean | Also scan git history for secrets (default false). |
| max_findings | number | Findings listed in the report (10-80, default 40). |
Call this tool
Through the HTTP API, or from the MCP server with the run meta-tool.
curl https://api.ezyagents.fr/gateway/v1/run \
-H "Authorization: Bearer ezk_…" -H "Content-Type: application/json" \
-d '{"tool":"repo_security_scan","input":{"path":"…","semgrep_config":"…","include_git_history":true,"max_findings":1}}'$
run({ "tool": "repo_security_scan", "input": {"path":"…","semgrep_config":"…","include_git_history":true,"max_findings":1} })