name: Agent Scan
on:
  pull_request:
    paths: ['tools-list.json', '**/tools-list.json', 'mcp.json', '**/mcp.json', '.mcp.json', '**/.mcp.json']
  push:
    branches: [main]
    paths: ['tools-list.json', '**/tools-list.json', 'mcp.json', '**/mcp.json', '.mcp.json', '**/.mcp.json']
permissions:
  contents: read
jobs:
  agent-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
      - id: agent-scan
        uses: BackBond/agent-scan@v0.6.2
        with:
          mode: vet-tools
          tool-schema: tools-list.json
          sarif-path: artifacts/agent-scan.sarif
