ahmed-145/ACR-QA Code Review
AI-powered code review: 10 static analysers + RAG-grounded explanations + ECDSA-signed provenance
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target-dir | Directory to scan (relative to repo root) | no | . |
| fail-on | Severity threshold to fail CI — high | medium | low | none | no | high |
| groq-key | Groq API key for AI explanations (optional — static analysis runs without it) | no | — |
| repo-name | Repository name label for reports (defaults to github.repository) | no | ${{ github.repository }} |
| limit | Maximum number of findings to return (0 = unlimited) | no | 0 |
| output-sarif | Write SARIF v2.1.0 output to this path (leave empty to skip) | no | acrqa-results.sarif |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings detected |
| high-count | Number of HIGH-severity findings |
| medium-count | Number of MEDIUM-severity findings |
| sarif-file | Path to the SARIF v2.1.0 output file |