effortlessmetrics/tokmd

Generate deterministic repo receipts, review summaries, gates, and sensor reports with tokmd

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jul 4, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: effortlessmetrics/tokmd@f5f810eb24de214aee19da2f902bd1a829d2d9d0 # v1.14.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
modetokmd mode to run. Omit for the existing module + export flow. Supported values: module, export, gate, cockpit, sensor, baseline, packet.""
versionVersion of tokmd to install. Defaults to the latest release.latest
pathsPaths to scan.
module-rootsModule roots (comma-separated)crates,packages
topNumber of rows to show in summary20
formatExport format (json, jsonl, csv)json
baseBase git ref for mode: cockpit or mode: sensor. Omit to infer from pull request base or origin/HEAD.""
headHead git ref for mode: cockpit or mode: sensorHEAD
artifactWhether to upload generated tokmd files as workflow artifactstrue
commentWhether to post the generated Markdown summary as a pull request commenttrue
review-packetWhether mode: cockpit should emit a review packet directory and prepare a hosted comment copyfalse
presetAnalysis preset for mode: packet (analyze.md / analyze.json).bun-ub
output-dirOutput directory for mode: packet artifacts and manifest.json.sensors/tokmd
syntaxWhether mode: packet should request optional syntax.json evidence.true
context-budgetToken budget for the mode: packet context.md artifact.64000
fail-onFailure policy for mode: packet status: failed, partial, or never.failed
runtimeRuntime used to obtain tokmd: binary (default) or container. The container runtime anonymously pulls the publication GHCR image and runs it against the mounted workspace; it requires a Linux runner with Docker and is only supported for verification-gated tags (see docs/specs/packet-ghcr-runtime.md). Pin version to a verified tag; mutable tags such as latest are rejected for the container runtime.binary
imageContainer image reference (without tag) for runtime: container. Defaults to the publication registry. The tag is derived from the version input. Only verification-gated tags are accepted; see docs/specs/packet-ghcr-runtime.md.ghcr.io/effortlessmetrics/tokmd
namedescription
receiptPath to the generated receipt file
summaryPath to the generated Markdown summary/comment file
gate-verdictPath to the generated gate verdict JSON file
cockpit-reportPath to the generated cockpit report JSON file
review-packetPath to the generated cockpit review packet directory when mode: cockpit and review-packet: true are used
sensor-reportPath to the generated sensor report JSON file
baseline-reportPath to the generated baseline JSON file
packet-statusEvidence packet status from manifest.json for mode: packet (complete, partial, or failed)
packet-manifestPath to the generated evidence packet manifest.json for mode: packet
packet-dirEvidence packet output directory for mode: packet
review-priority-countCount of manifest review_priority entries for mode: packet
warnings-countCount of manifest warnings for mode: packet
errors-countCount of manifest errors for mode: packet
artifact-nameUploaded workflow artifact name when artifact upload is enabled
tokmd-versionVersion reported by the resolved tokmd runtime binary