aws-actions/CodeGuru Reviewer

AWS CodeGuru Reviewer Action

View on GitHub

Trust Signals

Scorecard Score
Scorecard 2–4scored Jul 6, 2026
Maintenance Recency
Stalelast commit Sep 1, 2022
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: aws-actions/codeguru-reviewer@e96af14e3ba9bac3cca62a524bd5a8345038c684 # v1.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
nameRepository nameno${{ github.repository }}
source_pathPath to Java source repositoryno.
build_pathPath to build artifact(s) - jar or class files in this directory will be uploaded for reviewno
destination_commitSHA of next commit to be committed to source code repository after an eventno${{ github.event.before || github.event.pull_request.base.sha }}
source_commitSHA of previous commit in the source code repository existed before an eventno${{ github.event.after || github.event.pull_request.head.sha }}
merge_base_commitSHA of a commit thats the merge base for before and after commits in a pull or merge requestno${{ github.event.pull_request.merge_commit_sha }}
source_branchSource branch of the eventno${{ github.head_ref || github.ref}}
destination_branchDestination branch of the eventno${{ github.base_ref || github.ref }}
kms_key_idAWS KMS Key ID to use for encrypting source code/build artifacts. By default, Amazon-owned encryption key is used. Supplying this value overrides it to use Customer-owned encryption keyno
authorAuthor/Actor who triggered an event in the source code repositoryno${{ github.event.actor }}
event_idAn identifier for the event that triggered CodeGuru Reviewer Analysis, e.g. Pull or Merge request idno${{ github.event.number || github.run_number }}
event_nameName of the event that triggered the CI/CD workflow [supported Events: push, pull, merge_request_event, schedule, workflow_dispatch]no${{ github.event_name }}
event_stateState of the event that triggered the CI/CD workflow [example: pull_request: "opened"]no${{ github.event.action }}
client_idUnique identifier referring to a specific client versionnoGithubActions@v1
s3_bucketS3 Bucket which will be used for code reviewsyes
vendor_nameVendor Name(e.g. GITHUB, GITLAB) for CI/CD.noGITHUB
output_formatExpected format for the results (e.g SARIF, SAST, JENKINS)noSARIF

no outputs