fixed-width/pgsafe

Lint changed PostgreSQL migration files for unsafe operations.

Trust Signals

name	description	required	default
version	pgsafe release to download. Default: the ref the action was pinned at; falls back to the latest release.	no	""
files	One or more globs, comma- or newline-separated; a file is linted if it matches any (fnmatch; * spans /). Default lints any .sql at any depth.	no	*.sql
fail-on	Minimum severity that fails the check: error \| warning \| never.	no	warning
config	Path to a .pgsafe.toml. Empty uses pgsafe's own config discovery.	no	""
working-directory	Directory to lint from.	no	.
verify-provenance	Verify the downloaded binary's build provenance with `gh attestation verify` (fails on a missing or invalid attestation). Requires a release built with provenance (pgsafe v0.8.3 or later).	no	true

no outputs