offsec-ai Security Scanner

Version updated for https://github.com/Htunn/offsec-ai to version v2.7.1.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

offsec-ai is an AI/ML-driven security toolkit that combines classic network reconnaissance with modern security testing. It performs full-stack infrastructure security assessments, actively attacks Model Context Protocol (MCP) servers for known CVEs, and integrates with Postman collections for comprehensive API vulnerability scanning and exploitation. The tool is designed to help authorized red teams identify and mitigate vulnerabilities in systems using LLM endpoints.

What’s Changed

  • fix: bound pending task count in batch_check for hybrid identity and security headers (2041948)
  • feat: add Postman Collection v2.x security scanner and attacker (v2.7.0) (e4668e8)
  • ci: publish container to GitHub Container Registry (ghcr.io) (46d755c)
  • fix: remove undefined OwaspScanResult string annotation in test_cli.py (F821) (8e750e3)
  • feat: add A2A protocol security support (v2.6.0) (1b99a1b)
  • fix: define OUTPUT_ARGS before use; -o was silently dropped (v2.5.9) (889e688)
  • chore: replace all example.com targets with simpleportchecker.com (676106d)
  • fix: –format not -f for ai-owasp-scan; use simpleportchecker target (v2.5.8) (504b6e8)
  • fix: skip –timeout for ai-owasp-scan which does not support it (v2.5.7) (67a28cd)
  • chore: use Gemini public endpoint in ai-owasp-scan job (6a13857)