Odin Scan - Smart Contract Security

Version updated for https://github.com/Odin-Scan/odin-scan-action to version v1.0.5.

  • This action is used across all versions by ? repositories.

Action Type

This is a Node action using Node version 20.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

This GitHub Action automates the security analysis of smart contracts using Odin Scan, supporting CosmWasm, Solana, and EVM platforms. It integrates seamlessly with GitHub workflows to catch vulnerabilities early in development cycles, providing detailed reports and inline annotations. Users can trigger scans by commenting on pull requests or programmatically via API keys.

What’s Changed

  • feat: add comment-triggered PR scans (ac72e5f)
  • docs: expand findings-visibility section with threat model and annotation rationale (0404708)
  • feat: add findings-visibility input for graduated public disclosure control (f18df59)
  • fix: show findings detail in PR comment with fallback to medium (c2e43c8)
  • fix: new comment per run, show only critical/high findings, rebuild dist (e237b62)
  • feat: use GitHub App installation token for branded PR comments (3abce4e)
  • feat: enrich PR comment with emojis, descriptions, and fix report URL (27cc2f2)
  • fix: gzip SARIF before base64 encoding for Code Scanning upload (d9eed9f)
  • fix: include sourcemap-register.js in dist (bd265af)
  • docs: add privacy policy (b78db44)