conceptpending/statespec-diff
Comment the rendered statespec policy diff on PRs that touch .policy.json artifacts — semantic (approval-invalidating) vs presentation (wording-only) changes, classified from digests recomputed from each artifact's spec body (declared digests are cross-checked; mismatches are flagged in the comment).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | Token used to post the sticky PR comment. | — | ${{ github.token }} |
| artifact-glob | Basename glob for policy artifacts. | — | *.policy.json |
| comment | Post/update the sticky PR comment ("true"/"false"). | — | true |
Outputs
| name | description |
|---|---|
| change_kind | Worst change across artifacts (semantic|added|removed|presentation|none). |
| has_changes | Whether any policy artifact changed. |
| digest_verified | "false" if any changed artifact's declared digests did not match its spec body (stale or hand-edited declaration). Gates that require an untampered artifact should check this alongside change_kind. |