GitHub Action

permissions:
  contents: read
jobs:
  ackit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a
      - uses: Cynrath/agent-context-kit@v0.2.2
        with:
          command: scan
          args: "--json"
          fail-threshold: high
          upload-sarif: "false"

Inputs command/args/fail-threshold/upload-sarif, outputs findings-json/sarif-path, SARIF 2.1.0, least-privilege.