0xcd4/ReleaseGuard n8n PR Gate

Review exported n8n AI workflows in a pull request without executing them or sending them to an AI service.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Aug 21, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: 0xcd4/n8n-ai-agent-security-lab@d5629ed5334f351cd82e994da93506f8eba09904 # v1.3.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
pathA repository-relative n8n workflow JSON file or directory.noworkflows
output-prefixRepository-relative prefix for JSON, Markdown, SARIF, Mermaid, and SVG evidence files.noreports/releaseguard-pr
namePlain-text label for the workflow set under review.non8n workflow pull request
fail-onUse high to fail when a high-severity path is found, or never to report without failing.nohigh
namedescription
decisionpass or review. This is a review aid, not a release approval.
high-findingsNumber of high-severity findings.
report-jsonPath to the redacted JSON report.
report-markdownPath to the Markdown report.
sarifPath to the SARIF report.
exposure-svgPath to the self-contained exposure graph SVG.