| access_key | CloudEval access key (repository secret; use secrets.CLOUDEVAL_ACCESS_KEY). | yes | — |
| base_url | Optional API base URL (CLOUDEVAL_BASE_URL / cloudeval --base-url). | no | "" |
| mode | Execution mode — review, ask, gate, agent, reports, or nightly. | no | ask |
| project_id | Project id for project-scoped commands. | no | "" |
| ask_prompt | Prompt for ask (or gate/nightly when using ask). | no | "" |
| agent_task | Task for agent mode (when set, ask/gate/nightly use agent instead of ask where applicable). | no | "" |
| gate_threshold | Numeric threshold for gate mode (optional on ask/agent/nightly to enforce a bound). | no | "" |
| gate_jq | jq expression on CLI JSON stdout yielding one number (tonumber applied). | no | .score |
| gate_operator | How extracted value relates to threshold — ge (>=), gt, le, lte (<=), lt, eq, ne. | no | ge |
| summary_answer_jq | Optional jq expression to pull a short text snippet into the job/PR summary (e.g. .answer). | no | "" |
| quiet | Pass --quiet to cloudeval for cleaner CI logs. | no | true |
| progress | CLI progress — use none to pass --progress none (recommended in CI). | no | none |
| model | Optional cloudeval --model. | no | "" |
| profile | Optional cloudeval --profile. | no | "" |
| reports_type | cloudeval reports run / download --type. | no | all |
| reports_region | cloudeval reports run --region (cost reports). | no | eastus |
| reports_currency | cloudeval reports run --currency. | no | USD |
| reports_wait | Pass --wait to reports run (poll until jobs finish). | no | false |
| reports_poll_interval_ms | Poll interval when reports_wait is true. | no | 2500 |
| reports_download | Run reports download after reports run. | no | true |
| reports_output_dir | Output directory for reports download. | no | cloudeval-reports |
| repo | GitHub repository for review mode. Defaults to github.repository. | no | "" |
| ref | Git branch/ref for review mode. Defaults to github.ref_name. | no | "" |
| commit_sha | Commit SHA for review mode. Defaults to github.sha. | no | "" |
| source_root | Optional IaC source root for GitHub-backed CloudEval projects. | no | "" |
| config_path | Optional path to .cloudeval/config.yaml for review gates. | no | "" |
| ignore_dirty | Pass --ignore-dirty to cloudeval review. | no | false |
| review_wait | Wait for GitHub sync and report refresh before writing review output. | no | true |
| review_wait_timeout_ms | Maximum time cloudeval review waits for GitHub sync. | no | 900000 |
| review_poll_interval_ms | Poll interval for cloudeval review while waiting. | no | 5000 |
| ai_summary | Include an AI-written summary in review.json, review.md, and PR comments. | no | true |
| ai_summary_mode | AI summary mode for review output — ask or agent. | no | ask |
| ai_summary_profile | Agent Profile id when ai_summary_mode is agent. | no | architecture |
| review_output_dir | Output directory for review.json and review.md. | no | cloudeval-review |
| working_directory | Working directory for CLI. | no | . |
| cli_install_url | CloudEval CLI install script URL. | no | https://cli.cloudeval.ai/install.sh |
| skip_cli_install | Skip installer; cloudeval must be on PATH (mirrors, tests). | no | false |
| post_pr_comment | Post or update one PR comment (pull-requests write; limited on fork PRs). | no | false |
| pr_comment_collapsed_details | Wrap the summary body in a collapsible <details> block in the PR comment. | no | false |
| pr_comment_json_excerpt | Append a collapsible JSON excerpt from CLI stdout (truncated) to the PR comment. | no | false |
| pr_comment_max_json_chars | Max characters of JSON excerpt in PR comment. | no | 12000 |
| upload_artifacts | Upload staged output (summary, json, reports) as a workflow artifact. | no | false |
| artifact_name | Artifact name when upload_artifacts is true. | no | cloudeval-output |
| artifact_retention_days | Artifact retention (days); 0 uses repo default. | no | 14 |
| include_run_metadata | Add workflow metadata to markdown summary and PR comment. Review mode preserves CLI workflow/artifact badges when available and appends metadata only for older summaries. | no | true |
| job_summary_title | Heading for the GitHub Actions job summary. | no | CloudEval |