conalh/GovVerdict
Cross-tool meta-reviewer for the agent-gov suite. Consolidates JSON reports from ScopeTrail, PolicyMesh, CapabilityEcho, TaskBound, and SessionTrail.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| reports | Glob of report JSON files to consolidate. Example "reports/*.json". | yes | — |
| threshold | Drop findings below this severity from the merged output. One of low, medium, high, critical. | no | "" |
| fail-on | Exit with status 1 when any surviving finding meets or exceeds this severity. Use none, low, medium, high, or critical. | no | none |
| exceptions | Path to an exception baseline file (JSONC array or { exceptions [...] }). | no | "" |
| workflow-name | Workflow identifier propagated onto the merged report. Cross-walks to OpenTelemetry gen_ai.workflow.name. | no | "" |
| format | Output format for the consolidated review. One of md, json, term. Defaults to md so it's ready for GITHUB_STEP_SUMMARY. | no | md |
Outputs
| name | description |
|---|---|
| rating | Aggregate severity across the merged report. |
| findings-count | Number of unique findings in the merged report. |
| invalid-reports-count | Number of source report files rejected by validation. |
| merged-report-path | Path to the written merged report (empty when streamed to stdout). |