concord-dev/Concord Compliance Gate
Evaluate compliance controls as code and gate the PR, publishing results to GitHub code scanning (SARIF).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Concord release to use (a git tag like v0.3.0, or 'latest'). | — | latest |
| controls | Path to the controls directory. | — | controls |
| config | Path to concord.yaml. | — | concord.yaml |
| framework | Restrict evaluation to a single framework id (optional). | — | "" |
| fixtures | Run in fixtures-only mode (offline; no live collectors). | — | false |
| fail-on-warnings | Fail the gate when a control emits warnings, not just failures. | — | false |
| sarif-file | Where to write the SARIF report. | — | concord.sarif |
| upload-sarif | Upload the SARIF report to GitHub code scanning (needs security-events: write). | — | true |
| working-directory | Directory to run concord in. | — | . |
Outputs
no outputs