abdulgani07/Cascade Code Intelligence

Evidence-based pull-request impact and architecture-governance analysis.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Aug 3, 2026
License: MIT

Pinned Snippet

workflow.ymlSHA-pinned

uses: abdulgani07/cascade@e0638c4462ff7957b70408899b5205879e68c5cb # 3.3.2

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
path	Repository-relative path to analyze.	—	.
base	Base Git ref. Defaults to the pull-request base SHA.	no	—
head	Head Git ref. Defaults to the pull-request head SHA or HEAD.	no	—
config	Repository-relative Cascade configuration file.	—	cascade.config.json
selected-projects	Comma-separated selected project IDs.	no	—
fail-on-severity	info	—	error
fail-on-new-cycles	Fail when Git comparison introduces cycles.	—	false
fail-on-architecture-violations	Fail on new unbaselined	—	true
fail-on-unresolved-internal	Fail on introduced unresolved dependencies.	—	false
max-graph-size	Maximum scanned nodes before policy failure (0 disables).	—	0
timeout-seconds	Analysis timeout from 1 to 3600 seconds.	—	900
output-directory	Repository-relative artifact directory.	—	.cascade-artifacts
cache	Restore and save the action's dependency cache.	—	true

Outputs

name	description
conclusion	pass or fail according to the configured policy.
risk-level	Evidence-based risk level.
risk-score	Evidence-based risk score.
markdown-summary-path	Generated Markdown report path.
json-path	Generated JSON report path.
sarif-path	Generated SARIF report path.
html-path	Generated HTML report path.