corvidlabs/spec-sync
Gate verified SDD changes and validate module specs against source code with SpecSync
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- MIT
Pinned Snippet
uses: corvidlabs/spec-sync@7f20c62288e4850c5ea271d148b0c49fba96e188 # v4.8.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| version | SpecSync version to use (e.g. "1.0.0" or "latest") | no | 5.2.0 |
| download-base-url | Optional trusted release mirror URL (primarily for enterprise mirrors and release validation) | no | "" |
| strict | Treat warnings as errors | no | false |
| require-coverage | Minimum file coverage percentage (0-100) | no | 0 |
| root | Project root directory | no | . |
| args | Additional whitespace-separated arguments to pass to specsync check (shell quoting is not supported) | no | "" |
| lifecycle-enforce | Run lifecycle enforcement checks (--all). Fails CI if specs violate lifecycle rules. | no | false |
| comment | Post spec drift results as a PR comment (requires pull_request event and write permissions) | no | false |
| token | GitHub token for posting PR comments (defaults to GITHUB_TOKEN) | no | ${{ github.token }} |
Outputs
no outputs