VEXLIT Security Scanner

Version updated for https://github.com/vexlit/vexlit to version v0.1.0.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

VEXLIT is a GitHub Action and CLI tool for detecting security vulnerabilities in JavaScript, TypeScript, and Python codebases. It leverages a hybrid Regex and AST-based analysis to identify issues related to the OWASP Top 10 and CWE, while providing SARIF-compatible output for seamless integration with GitHub Code Scanning. VEXLIT automates vulnerability scanning in CI/CD pipelines, supports LLM-based secondary verification, and offers configurable scanning rules to minimize false positives and enhance security workflows.

Release notes

Initial release: 21 security rules, AST-based analysis, SARIF output, GitHub Action