dusankuburic/PAD Flow Analysis
Static analysis for Power Automate Desktop flows. Emits SARIF for GitHub code scanning and gates the build on a severity threshold or policy.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| flow-path | Path to a PAD flow file or folder to analyze. | no | . |
| fail-on | Minimum severity that fails the build: error, warning, info, or none (report-only). | no | error |
| rules | Comma-separated rule IDs to enable (empty = all enabled rules). | no | "" |
| format | Output format for the report: sarif, json, junit, csv, text. | no | sarif |
| policy | Optional path to a policy JSON file. When set it is the authoritative gate (overrides fail-on). | no | "" |
| baseline | Optional path to a baseline JSON file (committed alongside the flow). When set the gate fails only on NEW findings since the baseline (the ratchet) — adopt the gate without fixing everything first. Capture/refresh a clean state with `bakicli -update-baseline <path>`. | no | "" |
| sarif-file | Path to write the SARIF report. | no | pad-analysis.sarif |
| upload-sarif | Upload the SARIF report to GitHub code scanning (requires security-events: write). | no | true |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF report. |
| exit-code | The analyzer gate exit code (0 = passed, 1 = threshold/policy violated). |