karimov-labs/Dev XP Scanner

Automatically analyze code changes and track developer skills with Dev XP platform

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Apr 22, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: karimov-labs/dev-xp-analyzer@4a3c2fd906741845d86cc920e2b8b1c51481f7cc # v1.0.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
api-tokenDev XP API token for authentication (get it from your Dev XP dashboard)yes
api-endpointDev XP API endpoint URLnohttps://push.devxp.net
event-typeType of event to analyze: "push" for single commits, "pull_request" for PR mergesnoauto
include-file-contentInclude file diff content in analysis (increases accuracy but uses more bandwidth)nofalse
max-filesMaximum number of files to include in analysis per eventno100
mask-identitiesHash usernames and repository names using SHA-256 for privacy (recommended for regulated environments)nofalse
masking-saltOptional salt for username hashing (use a consistent value across your organization for correlation)no""
source-event-idOptional client-provided event identifier used as idempotency key; when provided, duplicate push events with the same source_event_id are skippedno""
namedescription
statusStatus of the analysis submission (success/failed)
workflow-idDev XP workflow ID for tracking
messageResponse message from Dev XP API