hzspyy/Agent Workbench Audit

Audit repository automation for Codex and Claude Code workflows.

Trust Signals

workflow.ymlSHA-pinned

uses: hzspyy/codex-cluade-code-practice@2d11f06fc339b020800597e2e3e5e5f2ebf13bac # v0.3.0

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
path	Repository path to audit.	no	.
format	Output format: text, json, markdown, or sarif.	no	text
output	Optional report output path.	no	""
strict	Fail on warnings as well as errors.	no	false
config	Optional path to agent-workbench.toml.	no	""
baseline	Optional path to a committed baseline JSON file.	no	""
changed-lines	Only fail findings that touch lines changed from base-ref.	no	false
base-ref	Git ref used when changed-lines is true.	no	origin/main
summary-output	Optional path for a compact audit summary.	no	""
summary-format	Summary output format: markdown or json.	no	markdown

no outputs