MCPShield MCP Config Scan

Version updated for https://github.com/RunTimeAdmin/mcpshield-action to version v1.2.0.

• This action is used across all versions by ? repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

What’s Changed

What’s new

• Hardcoded-secret detection: flags embedded credentials in MCP config commands (AWS / GitHub / Slack / OpenAI / Anthropic / Google keys, private-key blocks, inline DB connection-string passwords), scored +30 as a typed finding. Only the credential type is surfaced, never the value. Parity with the MCPShield 0.4 engine.

- uses: RunTimeAdmin/mcpshield-action@v1
  with:
    fail-on: high

• RunTimeAdmin
• GitHub Actions