Getting Started
Introduction
What is Void Shield and how does it work?
Void Shield is a GitHub App that scans your codebase for security vulnerabilities on every push and pull request.
How it works
- Install the Void Shield GitHub App on your repository
- Void Shield receives
pushandpull_requestevents via webhook - It scans changed files and posts results as GitHub Check Runs with inline annotations
- Critical findings can block merges; informational findings appear as warnings
What it scans
| Check | Description |
|---|---|
hardcoded-secret | API keys, tokens, and passwords committed to code |
env-file-committed | .env files accidentally committed |
internal-ip | Internal IP addresses hardcoded in source |