baktun-studio/LineBreak Security Gate
Block merges that carry known vulnerabilities or fail the approved acceptance criteria: osv-scanner dependency scan + AI SAST + criteria enforcement (.linebreak/spec/), human-approved sign-offs and overrides on the record, git-native audit artifacts.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- Apache 2.0
Pinned Snippet
uses: baktun-studio/linebreak-gate@7599a0a5b9dd747bc5b46e9b96709be0c19e4671 # v1.3.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| fail-on | Blocking severity floor (critical|high|medium|low). Overrides the repo's .linebreak/gate.yml. Leave empty to use the file / built-in default (critical). | no | "" |
| path | Project root to scan, relative to the workspace. | no | . |
| license-key | LineBreak license key (store in secrets). Optional today — the gate runs without one and prints a notice; required once license enforcement is enabled. | no | "" |
| anthropic-api-key | Anthropic API key enabling the AI SAST pass (store in secrets). Leave empty to run the dependency scan only. | no | "" |
| github-token | Token used to post/update the PR summary comment. | no | ${{ github.token }} |
| comment | Post (and update in place) a single PR summary comment. | no | true |
Outputs
no outputs