Version updated for https://github.com/Nox-HQ/nox to version v1.31.0. This action is used across all versions by 2 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Nox is an open-source static analysis tool designed to identify and prevent security vulnerabilities in AI applications. It analyzes code offline and does not rely on APIs or external services, ensuring determinism and privacy. Nox can detect issues such as prompt injection, embedding leakage, agent over-privilege, and more, covering OWASP Top 10, MCP Top 10, and other security aspects related to AI applications. It provides a comprehensive inventory of all model invocations, auth environment variables, and endpoints for multi-language projects.

Version updated for https://github.com/Nox-HQ/nox to version v1.29.1. This action is used across all versions by 2 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Nox action is an open-source, offline-first security scanner designed for AI application developers. It detects various vulnerabilities such as prompt injection, embedding leakage, agent over-privilege, and slopsquatting in their code without relying on external APIs or SaaS services. The tool provides comprehensive coverage of OWASP top 10 vulnerabilities and maps them to the OWASP MCP Top 10 for server hardening and tool poisoning.

Version updated for https://github.com/Nox-HQ/nox to version v1.29.0. This action is used across all versions by 2 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Nox is an open-source static analyzer designed for AI application developers. It detects potential vulnerabilities in LLM applications by analyzing both the code and external dependencies without requiring access to your codebase or internet connection. Key capabilities include detecting prompt injection, embedding leakage, agent over-privilege, and unverifiable dependency provenance.

Version updated for https://github.com/Nox-HQ/nox to version v1.27.0. This action is used across all versions by 2 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Nox is an open-source, offline-first static analysis tool designed for AI application developers. It scans their applications to identify potential security risks such as prompt injection, embedding leakage, agent over-privilege, and more. Nox also detects vulnerabilities in code and dependency provenance issues. The main purpose of Nox is to provide a static analyzer that helps developers ensure the safety and integrity of their AI applications without requiring access to external services or sending code to vendors.