binclusive/Binclusive accessibility (CI gate)

Run the Binclusive accessibility engine on changed files, gate the PR, emit SARIF, and (with a token) phone findings home to the dashboard.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
baseGit ref to diff against (e.g. the PR base). Empty scans the whole checkout.no""
fail-onblock|warn — the enforcement level that fails the build. Default block.noblock
binclusive-api-keyOPTIONAL. A Binclusive `b8e_` apiKey (the ingestion bearer). Present → the run phones its findings home to the dashboard; absent → fully local, exit 0 (never an error). Mint it in the dashboard and store it as a repo secret. NOT an LLM key. no""
binclusive-project-idOPTIONAL. The Binclusive project id the findings belong to. Required alongside `binclusive-api-key` for phone-home — it selects WHICH project and cannot be derived from the key (one key spans many projects). Absent (with a key set) is a loud error from the CLI. no""
binclusive-api-urlOPTIONAL. Override the Kontrol GraphQL endpoint the findings are sent to (default https://kontrol.binclusive.io/graphql). For staging / self-host only. The ONE endpoint var. no""
binclusive-app-idOPTIONAL. The Binclusive GitHub App id. Present alongside the private key → phone-home writes are attributed to the branded binclusive[bot]; absent → the default workflow bot. Store as a repo secret. no""
binclusive-app-private-keyOPTIONAL. The Binclusive GitHub App private key (PEM). SECRET MATERIAL — store as a repo secret; never log or echo it. Required alongside `binclusive-app-id` to mint the branded token; absent → the default workflow bot. no""
binclusive-app-installation-idOPTIONAL. The App installation id for this repo. Usually unnecessary — when absent it is discovered from the repo, so you only install the App, never look up its id. no""
namedescription
sarif-filePath to the SARIF file; feed to github/codeql-action/upload-sarif (needs security-events: write).