vorsken
GitHub Action that enforces security policy on AI‑generated code at merge time
Free - Free and open-source (MIT). Requires an AI API key (e.g., Anthropic/Claude) which may be subject to separate usage charges.
About vorsken
vorsken is an open‑source GitHub Action (MIT) that enforces security policy on AI‑generated code during pull requests. It scans changed files with Semgrep (OWASP API Security rules), uses Claude (Anthropic) to translate findings into plain‑English risk explanations and concrete fixes, and enforces verdicts per PR (BLOCK / FLAG / PASS). Auto‑posts PR comments, blocks merges on BLOCK, and is designed for quick setup (one workflow file and one secret).
Key Features
- Scans changed files on every PR using Semgrep (OWASP rules)
- Uses Claude to generate plain‑English risk explanations and concrete fixes
- Enforces BLOCK / FLAG / PASS verdicts and auto‑posts PR comments
- Blocks merges on BLOCK verdicts to enforce policy at merge time
- Quick setup: one workflow file and one secret
Who is this for?
Developers and engineering teams using AI-assisted code generation and GitHub for CI/CD and code reviews
Comments (0)
No comments yet
Be the first to share your thoughts!
Sign in to join the conversation
Sign InStats
Categories
Pricing
FreeFree and open-source (MIT). Requires an AI API key (e.g., Anthropic/Claude) which may be subject to separate usage charges.
Platforms
Tech Stack
Tags
Related Products
Sora AI
Create stunning videos from text in minutes
Claude Code
AI pair programmer that understands your entire codebase
Perplexity Pro
AI-powered research assistant with real-time citations
Leonardo AI
All-in-one AI art platform with superior control
Gemini 2.0 Flash
Google's fastest multimodal AI with 1M token context