for-all-dev/STPA Safety Findings
Machine-checked STPA safety-analysis findings as a CI gate — check, diff vs base, sticky PR comment, fail on regression.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | Token used to read PR metadata and post the sticky comment. | no | ${{ github.token }} |
| working-directory | Directory containing the Lean project (lakefile.toml). | no | . |
| comment | Post/refresh the sticky PR comment on pull_request events. | no | true |
| fail-on-regression | Fail the action when error findings are introduced relative to the PR base. | no | true |
| install-elan | Install the Lean toolchain manager (elan) if `lake` is not already on PATH. | no | true |
| oracle-jar-url | Optional URL for the MCSysMLv2.jar second-source oracle, fetched into vendor/. | no | "" |
| oracle-sha256 | Expected sha256 checksum of the oracle jar; mismatch discards the jar with a warning. | no | "" |
Outputs
| name | description |
|---|---|
| regressed | "true" if error findings were introduced relative to the PR base, "false" otherwise. |
| introduced | Count of findings introduced relative to the PR base. |
| fixed | Count of findings fixed relative to the PR base. |
| verdicts-path | Path to the head verdicts JSON file. |
| diff-markdown-path | Path to the rendered diff markdown file. |