kubeply/Kply

Run Kply safely in pull request workflows.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 1, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: kubeply/kply@ff0d9d20cb09f2e467e535b66de109c20db1f518 # v0.1.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
versionKply release version to install, or latest.nolatest
config-pathPath to the kply.yaml config file.nokply.yaml
appConfigured app name to plan or check.no
imageCandidate image reference for the sandbox workload.no
modeAction mode to run. Plan mode is supported; check mode is reserved for a later runtime.noplan
output-pathPath where the action will write the JSON output artifact.nokply-report.json
artifact-nameGitHub Actions artifact name for the Kply JSON report.nokply-report
write-summaryWhether to append a Markdown summary to the GitHub Actions step summary.notrue
github-tokenGitHub token used to read Kply release metadata.no
namedescription
kply-pathAbsolute path to the installed kply binary.
kply-versionVersion string reported by the installed kply binary.
config-pathAbsolute path to the resolved kply.yaml config file.
appConfigured app name validated by kply app inspect.
imageCandidate image reference validated by kply session plan, when provided.
modeAction mode that was executed.
output-pathAbsolute path to the JSON report written by the action.
artifact-nameGitHub Actions artifact name used for the uploaded JSON report.
write-summaryWhether the action wrote a Markdown step summary.