Odin Scan - Smart Contract Security

Version updated for https://github.com/Odin-Scan/odin-scan-action to version v1.0.5.

  • This action is used across all versions by ? repositories.

Action Type

This is a Node action using Node version 20.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

This GitHub Action is an AI-powered tool for smart contract security analysis on CosmWasm, Solana, and EVM projects. It integrates seamlessly with the workflow to identify vulnerabilities before they reach production. Key features include multi-platform support, automatic platform detection, GitHub Code Scanning integration for native security alerts, PR comments with findings summary, inline annotations, comment-triggered scans, configurable severity thresholds, artifact upload of full reports, and SARIF file generation.

What’s Changed

  • feat: add comment-triggered PR scans (ac72e5f)
  • docs: expand findings-visibility section with threat model and annotation rationale (0404708)
  • feat: add findings-visibility input for graduated public disclosure control (f18df59)
  • fix: show findings detail in PR comment with fallback to medium (c2e43c8)
  • fix: new comment per run, show only critical/high findings, rebuild dist (e237b62)
  • feat: use GitHub App installation token for branded PR comments (3abce4e)
  • feat: enrich PR comment with emojis, descriptions, and fix report URL (27cc2f2)
  • fix: gzip SARIF before base64 encoding for Code Scanning upload (d9eed9f)
  • fix: include sourcemap-register.js in dist (bd265af)
  • docs: add privacy policy (b78db44)