description: Developer-first GitHub Action for security scanning, SARIF reporting, and deployment protection.
🛡️ DevShield Security Scan v1.0.0
Welcome to the first public release of DevShield Security Scan.
DevShield is a developer-first security platform that helps teams detect, prioritize, and prevent vulnerabilities before deployment. This release introduces the official GitHub Action, allowing security scans to be integrated directly into CI/CD pipelines.
🚀 What's Included
Security Scanning
- Recursive repository scanning
- Secret detection
- Security misconfiguration detection
- Severity classification
- Deployment Guardian
- Baseline support
- Ignore file support
Reports
- HTML Reports
- JSON Reports
- SARIF Reports
- Console Output
GitHub Integration
- GitHub Actions
- Pull Request Scanning
- Deployment Blocking
- Repository Security Analysis
DevShield Platform
The GitHub Action is powered by the DevShield platform, which includes:
- Intelligent Security Analysis
- AI Incident Prioritization
- Blast Radius Analysis
- Business Impact Analysis
- Confidence Scoring
- Explainable Security Reasoning
- Security Dashboard
- Audit Trail
- Team Collaboration
📦 Installation
- uses: devshieldhq/devshield-action@v1🌐 Website
📚 Documentation
See the README for:
- Installation
- Configuration
- CLI Usage
- GitHub Action Usage
- Examples
- API Reference
🗺️ Roadmap
Upcoming releases will include:
- VS Code Extension
- GitLab Integration
- Azure DevOps Integration
- Bitbucket Integration
- AI-powered Code Fix Suggestions
- Enterprise Policy Engine
- Compliance Reporting
- Organization Security Management
❤️ Support
If you find DevShield useful:
⭐ Star the repository
🐛 Report issues
💡 Suggest features
🤝 Contribute
Thank you for supporting DevShield.
Let's build more secure software together.