binclusive/Binclusive accessibility (CI gate)
Run the Binclusive accessibility engine on changed files, gate the PR, emit SARIF, and (with a token) phone findings home to the dashboard.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| base | Git ref to diff against (e.g. the PR base). Empty scans the whole checkout. | no | "" |
| fail-on | block|warn — the enforcement level that fails the build. Default block. | no | block |
| binclusive-api-key | OPTIONAL. A Binclusive `b8e_` apiKey (the ingestion bearer). Present → the run phones its findings home to the dashboard; absent → fully local, exit 0 (never an error). Mint it in the dashboard and store it as a repo secret. NOT an LLM key. | no | "" |
| binclusive-project-id | OPTIONAL. The Binclusive project id the findings belong to. Required alongside `binclusive-api-key` for phone-home — it selects WHICH project and cannot be derived from the key (one key spans many projects). Absent (with a key set) is a loud error from the CLI. | no | "" |
| binclusive-api-url | OPTIONAL. Override the Kontrol GraphQL endpoint the findings are sent to (default https://kontrol.binclusive.io/graphql). For staging / self-host only. The ONE endpoint var. | no | "" |
| binclusive-app-id | OPTIONAL. The Binclusive GitHub App id. Present alongside the private key → phone-home writes are attributed to the branded binclusive[bot]; absent → the default workflow bot. Store as a repo secret. | no | "" |
| binclusive-app-private-key | OPTIONAL. The Binclusive GitHub App private key (PEM). SECRET MATERIAL — store as a repo secret; never log or echo it. Required alongside `binclusive-app-id` to mint the branded token; absent → the default workflow bot. | no | "" |
| binclusive-app-installation-id | OPTIONAL. The App installation id for this repo. Usually unnecessary — when absent it is discovered from the repo, so you only install the App, never look up its id. | no | "" |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the SARIF file; feed to github/codeql-action/upload-sarif (needs security-events: write). |