Odin Scan - Smart Contract Security

Version updated for https://github.com/Odin-Scan/odin-scan-action to version v1.0.5.

  • This action is used across all versions by ? repositories.

Action Type

This is a Node action using Node version 20.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

This GitHub Action uses AI to analyze smart contract vulnerabilities in CosmWasm, Solana, and EVM projects. It integrates with GitHub Code Scanning for native security alerts and posts PR comments and inline annotations on changes. The action supports multi-platform detection and configurable severity thresholds for automatic failure of builds or comment-triggered scans.

What’s Changed

  • feat: add comment-triggered PR scans (ac72e5f)
  • docs: expand findings-visibility section with threat model and annotation rationale (0404708)
  • feat: add findings-visibility input for graduated public disclosure control (f18df59)
  • fix: show findings detail in PR comment with fallback to medium (c2e43c8)
  • fix: new comment per run, show only critical/high findings, rebuild dist (e237b62)
  • feat: use GitHub App installation token for branded PR comments (3abce4e)
  • feat: enrich PR comment with emojis, descriptions, and fix report URL (27cc2f2)
  • fix: gzip SARIF before base64 encoding for Code Scanning upload (d9eed9f)
  • fix: include sourcemap-register.js in dist (bd265af)
  • docs: add privacy policy (b78db44)