korext/Korext Enforce
Enforce security, compliance, and quality standards on AI generated code. 72 policy packs. Cryptographically signed proof bundles. Data sovereignty with regional processing.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| directory | Directory to scan for policy violations | no | . |
| pack | Policy Pack ID to enforce (e.g. web, owasp-top-10, hipaa-safeguards) | no | web |
| api-token | Korext API token for authenticated mode. Set as a GitHub secret. Optional -- runs in anonymous mode (20 req/hr) without it. | no | "" |
| fail-on-violations | Fail the workflow when critical or high severity violations are found | no | true |
| sarif-upload | Upload SARIF results to GitHub Code Scanning (requires security-events: write permission) | no | true |
| region | Data processing region for sovereignty compliance (us, eu, apac). Leave empty for default (US). | no | "" |
| sign-bundles | Request cryptographically signed proof bundles for each scanned file (requires authentication) | no | true |
Outputs
| name | description |
|---|---|
| violations | Total number of policy violations found |
| sarif-file | Path to the generated SARIF results file |
| bundle-count | Number of proof bundles generated |
| bundles-signed | Number of signed proof bundles |
| bundle-ids | Comma separated list of proof bundle IDs |