Sigil Security Scan

Version updated for https://github.com/NOMARJ/sigil to version v1.3.3.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Sigil is an automated security auditing action that scans AI agent code to detect malicious patterns before they reach working environments. It uses a quarantine-first approach and provides eight analysis phases, including Install Hooks, Code Patterns, Network/Exfil, Credentials, Obfuscation, Provenance, Prompt Injection, Skill Security, and LLM Analysis.

What’s Changed

Sigil v1.3.3

Quick Install

Homebrew (macOS/Linux):

brew tap nomarj/tap
brew install sigil

npm (macOS/Linux):

npm install -g @nomarj/sigil

Cargo (Rust):

cargo install sigil-cli

Installer script:

curl -fsSLO https://www.sigilsec.ai/install.sh
sh install.sh

Manual Installation

macOS (Apple Silicon):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/sigil-macos-arm64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/SHA256SUMS.txt
sha256sum -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-macos-arm64.tar.gz
sudo mv sigil /usr/local/bin/

macOS (Intel):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/sigil-macos-x64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/SHA256SUMS.txt
sha256sum -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-macos-x64.tar.gz
sudo mv sigil /usr/local/bin/

Linux (x64):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/sigil-linux-x64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/SHA256SUMS.txt
sha256sum -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-linux-x64.tar.gz
sudo mv sigil /usr/local/bin/

Linux (ARM64):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/sigil-linux-arm64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.3/SHA256SUMS.txt
sha256sum -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-linux-arm64.tar.gz
sudo mv sigil /usr/local/bin/

Windows (x64): Download sigil-windows-x64.zip, extract, and add to your PATH.

Verify checksums

sha256sum -c SHA256SUMS.txt

What’s Changed

Full Changelog: https://github.com/NOMARJ/sigil/compare/v1.3.2...v1.3.3