hephaestus-devkit/Maintainer Firewall

Filter noisy issues and pull requests by evidence, reproducibility, scope, and project-specific contribution rules.

Trust Signals

name	description	required	default
github-token	GitHub token used to read repository context and, when not in dry-run mode, write labels/comments.	yes	—
openai-api-key	Optional OpenAI API key. Required only when ai.enabled is true; otherwise deterministic rules still run.	no	—
config-path	Path to the Maintainer Firewall YAML config in the repository.	no	.maintainer-firewall.yml
dry-run	When true, produces reports and outputs without writing labels, comments, or stale-label removals.	no	false
fail-on-findings	When true, fails the workflow if warning or error findings are produced. Defaults to advisory mode.	no	false
emit-annotations	When true, emits each finding as a GitHub Actions notice, warning, or error annotation.	no	false
write-step-summary	When true, writes the report to the GitHub Actions step summary for easy inspection.	no	true
report-json-path	Optional workspace-relative path where a structured JSON report should be written for downstream steps.	no	—
effective-config-json-path	Optional workspace-relative path where the redacted effective configuration should be written for debugging and rollout review.	no	—

name	description
outcome	Review-readiness outcome such as ready, needs_info, needs_tests, needs_maintainer_review, blocked, or skipped.
score	Review-readiness score from 0 to 100.
findings-count	Number of findings produced by enabled checks.
labels	Comma-separated labels suggested or applied by the action.
routing-hints	JSON routing hints derived from CODEOWNERS, when available.
skipped	Whether the subject was skipped by ignore rules.
skip-reason	Reason the subject was skipped, when applicable.
report-json-path	Path to the structured JSON report when report-json-path is configured.
effective-config-json-path	Path to the redacted effective configuration report when effective-config-json-path is configured.
config-warnings-count	Number of configuration diagnostics emitted while loading and validating Maintainer Firewall config.
config-warnings	JSON array of configuration diagnostics emitted while loading and validating Maintainer Firewall config.
runtime-warnings-count	Number of runtime diagnostics emitted while the action performed best-effort GitHub, AI, summary, or report operations.
runtime-warnings	JSON array of runtime diagnostics emitted while the action performed best-effort GitHub, AI, summary, or report operations.