aryasalem09/DevGuard

Run DevGuard repository hygiene and security checks from GitHub Actions.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Mar 7, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: aryasalem09/devguard@3563e17eeaff30986752f67293bb156f2a214267 # v0.1.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
pathRepository path to scan relative to the workspace.no.
formatPrimary report format to generate.nohuman
min-scoreOptional minimum score override passed to devguard check.no""
fail-onOptional fail-on override passed to devguard check.no""
argsExtra raw CLI arguments appended to devguard check.no""
github-step-summaryWrite a compact markdown summary to $GITHUB_STEP_SUMMARY.notrue
sarifGenerate an additional SARIF report.nofalse
sarif-pathPath for the SARIF output when enabled or when format is sarif.nodevguard.sarif
namedescription
report-pathPath to the primary report file generated by the action.
scoreFinal DevGuard score.
passedWhether the run passed DevGuard policy evaluation.