| github-token | GitHub token for API access | yes | ${{ github.token }} |
| thresholds | JSON object with custom metric thresholds | no | {} |
| threshold-pr-merge-rate | Minimum PR merge rate (0-1) | no | — |
| threshold-account-age | Minimum account age in days | no | — |
| threshold-positive-reactions | Minimum positive reactions required | no | — |
| threshold-negative-reactions | Maximum negative reactions allowed | no | — |
| threshold-merger-diversity | Minimum number of unique maintainers who merged PRs | no | — |
| threshold-repo-history-merge-rate | Minimum merge rate in this specific repository (0-1) | no | — |
| threshold-repo-history-min-prs | Minimum number of previous PRs in this repository | no | — |
| threshold-profile-completeness | Minimum profile completeness score (0-100) | no | — |
| enable-spam-detection | Enable suspicious activity pattern detection | no | true |
| required-metrics | Comma-separated list of metrics that must pass | no | prMergeRate,accountAge |
| minimum-stars | Minimum stars for a repo to be considered quality | no | 100 |
| analysis-window | Months of history to analyze | no | 12 |
| trusted-users | Comma-separated list of usernames to always pass | no | dependabot[bot],renovate[bot],github-actions[bot],codecov[bot],sonarcloud[bot] |
| trusted-orgs | Comma-separated list of organizations whose members always pass | no | "" |
| on-fail | Action when check fails: comment, label, fail, comment-and-label, none | no | comment |
| label-name | Label to apply when on-fail includes label | no | needs-review |
| dry-run | Log results without taking action | no | false |
| verbose-details | Show detailed evidence for metrics: none, failed (only failed metrics), all (all metrics) | no | none |
| new-account-action | Behavior for accounts younger than threshold: neutral, require-review, block | no | neutral |
| new-account-threshold-days | Days to consider an account as new | no | 30 |