Odin Scan - Smart Contract Security
Version updated for https://github.com/Odin-Scan/odin-scan-action to version v1.0.5.
- This action is used across all versions by ? repositories.
Action Type
This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
Odin Scan is a GitHub Action that performs AI-powered smart contract security analysis for CosmWasm, Solana, and EVM projects. It automatically detects the target platform and integrates with GitHub Code Scanning to provide native security alerts. The action supports automatic platform detection, PR comments, inline annotations, comment-triggered scans, configurable thresholds, artifact upload, and SARIF file generation.
What’s Changed
- feat: add comment-triggered PR scans (ac72e5f)
- docs: expand findings-visibility section with threat model and annotation rationale (0404708)
- feat: add findings-visibility input for graduated public disclosure control (f18df59)
- fix: show findings detail in PR comment with fallback to medium (c2e43c8)
- fix: new comment per run, show only critical/high findings, rebuild dist (e237b62)
- feat: use GitHub App installation token for branded PR comments (3abce4e)
- feat: enrich PR comment with emojis, descriptions, and fix report URL (27cc2f2)
- fix: gzip SARIF before base64 encoding for Code Scanning upload (d9eed9f)
- fix: include sourcemap-register.js in dist (bd265af)
- docs: add privacy policy (b78db44)