florianwenzel/CodePulse Scan
Run CodePulse static analysis and enforce the quality gate (fails the build on gate ERROR).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory to scan. | — | . |
| args | Extra flags passed to codepulse-scan (e.g. --coverage cover.out --new-code-days 30). | — | "" |
| fail-on | Local gate: fail if any finding is at least this severity (used when no server is configured). | — | CRITICAL |
| server-url | CodePulse server base URL. If set (with project), the analysis is uploaded and the SERVER quality gate is enforced. | — | "" |
| token | Project analysis token (Bearer) for upload. | — | "" |
| keyless | Use GitHub Actions OIDC (needs permissions: id-token: write) instead of a static token; the server must have CI keyless OIDC enabled. | — | false |
| audience | OIDC token audience (must match the server's CODEPULSE_CI_OIDC_AUDIENCE). | — | codepulse |
| project | Project key to upload to. | — | "" |
| branch | Branch name (defaults to the project's main branch). | — | "" |
| base | Base branch for PR analysis (new-vs-base). | — | "" |
| html-report | If set, also write a self-contained HTML report to this path (produced even when the gate fails; pair with actions/upload-artifact). | — | "" |
Outputs
no outputs