ActionRank
Check your actions

AI Surface Check

Actively maintained

apisec-inc/AI-Surface · MIT

Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.

★ 80 starsLast commit 15 days agoLatest v1.0.7
B
72
/ 100
Security 75Maintenance 100Popularity 27Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: apisec-inc/AI-Surface@240f24488a7ffffdad56bafccc04df7a5f589bd1 # v1.0.7

Mutable tags like v1.0.7 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: apisec-inc/AI-Surface@240f24488a7ffffdad56bafccc04df7a5f589bd1 # v1.0.7

Score breakdown

Security (35%)75
Popularity (20%)27
Maintenance (30%)100
Reliability (15%)70