guardmarly

Version updated for https://github.com/mattybellx/Guardmarly to version v6.5.0.

  • This action is used across all versions by 1 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Guardmarly is a free SAST tool that automates the detection of authorization bugs such as IDOR, missing access controls, and privilege escalation. It maps HTTP routes to database queries and checks for missing auth guards, tracing data flow from routes to sinks to flag security vulnerabilities. Guardmarly provides detailed reports in text, JSON, and SARIF formats and supports multiple programming languages and CWEs, including 5 languages and 35+ CWE types.

What’s Changed

What is new in v6.5.0

  • VS Code v1.2.0: gutter dots, findings quick-pick, scan spinner, auto CLI detection
  • Webapp: live scan counter
  • CI: auto-publish on push, pipeline reference docs