itdojp/ae-framework Assurance Gate

Validate assurance artifacts, evaluate a deploy-time profile policy, and render a PR review surface.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jul 5, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: itdojp/ae-framework@1e8dda11ed965632d4f73444599202653ccb86e2 # v1.0.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
profileminimal, standard, full, or a custom profile YAML path in the consumer repositorynominimal
artifacts-dirDirectory in the consumer repository containing assurance artifacts and optional evidence.jsonnoartifacts
policyOptional policy YAML path in the consumer repository. Built-in profiles default to policy/release-policy.yml from ae-framework.no""
output-dirDirectory in the consumer repository where gate artifacts are writtennoartifacts/assurance-gate
environmentOptional release-policy environment key, such as staging or productionno""
fail-on-blockFail the action when the policy result is blocknotrue
namedescription
gate-resultPolicy result: pass, block, or report-only
gate-result-pathPath to gate-result.json
assurance-summary-pathPath to assurance-summary.json
policy-decision-pathPath to policy-decision.json
review-surface-pathPath to review-surface.md