Sigil Security Scan

Version updated for https://github.com/NOMARJ/sigil to version v1.1.2.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Sigil is a security-focused tool that scans repositories, packages, and AI agent tooling for malicious patterns before they are executed, preventing potential threats such as credential exfiltration, backdoors, and malicious install hooks. It automates security auditing through a six-phase analysis, scoring risks based on factors like code patterns, obfuscation, and network activity, with a quarantine-first approach to ensure safety. This action addresses gaps in traditional dependency scanners by focusing on detecting intentionally harmful code.

What’s Changed

Sigil v1.1.2

Quick Install

Homebrew (macOS/Linux):

brew tap nomarj/tap
brew install sigil

npm (All platforms):

npm install -g @nomark/sigil

Cargo (Rust):

cargo install sigil

curl installer:

curl -sSL https://sigilsec.ai/install.sh | sh

Manual Installation

macOS (Apple Silicon):

curl -sSL https://github.com/NOMARJ/sigil/releases/download/v1.1.2/sigil-macos-arm64.tar.gz | tar xz
sudo mv sigil /usr/local/bin/

macOS (Intel):

curl -sSL https://github.com/NOMARJ/sigil/releases/download/v1.1.2/sigil-macos-x64.tar.gz | tar xz
sudo mv sigil /usr/local/bin/

Linux (x64):

curl -sSL https://github.com/NOMARJ/sigil/releases/download/v1.1.2/sigil-linux-x64.tar.gz | tar xz
sudo mv sigil /usr/local/bin/

Windows (x64): Download sigil-windows-x64.zip, extract, and add to your PATH.

Verify checksums

sha256sum -c SHA256SUMS.txt

What’s Changed

New Contributors

Full Changelog: https://github.com/NOMARJ/sigil/compare/v1.1.1...v1.1.2