lfreleng-actions/AI Slop Scan

Scan code for AI slop and quality issues with the aislop CLI.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jul 9, 2026
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: lfreleng-actions/aislop-scan-action@c22239a94af095c0f1c15a8ae7f3bd3eda711700 # v0.2.1

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
scan-mode	Scan scope: "changes" audits files changed relative to base; "full" audits the whole working tree.	no	changes
base	Git ref that changes compare against in changes mode (for example origin/main). Empty compares against HEAD.	no	""
working-directory	Path within the workspace to scan.	no	.
aislop-version	Override the bundled pin with an explicit version (for example 0.13.1). An override bypasses the bundled lock file and its integrity data.	no	""
extra-args	Additional raw arguments appended to the aislop call.	no	""
annotate	Emit inline annotations for the top findings: 'true' or 'false'.	no	true
upload-sarif	Upload the SARIF to code scanning from within this action.	no	false
summary-repository	owner/repo label for step-summary links; defaults to the repository running the workflow. Set when the workspace holds a checkout of a different repository. Applies only together with summary-sha: a partial or malformed pair is ignored with a warning.	no	""
summary-sha	Commit SHA (7-40 hex digits) for step-summary links; defaults to the workflow commit. Applies only together with summary-repository: a partial or malformed pair is ignored with a warning.	no	""

Outputs

name	description
sarif-file	Absolute path to the generated SARIF file.
report-file	Absolute path to the generated JSON report.
score	aislop score (0-100); empty when not scoreable.
exit-code	Exit code of the aislop quality gate: '0' when the gate passes, non-zero when it holds findings below the configured threshold.