| artifact-path | Path to the agent output JSON file | yes | — |
| max-issues | Maximum number of issues the agent can create per run | no | 1 |
| max-comments | Maximum number of issue comments the agent can create per run | no | 3 |
| max-pull-requests | Maximum number of pull requests the agent can create per run | no | 1 |
| max-labels | Maximum number of add-labels actions per run | no | 5 |
| title-prefix | Required prefix for issue and PR titles (e.g., "[bot] ") | no | "" |
| allowed-labels | Comma-separated list of allowed labels. Empty means all labels are allowed. | no | "" |
| custom-secret-patterns | Additional regex patterns to scan for sensitive data (one per line) | no | "" |
| protected-files | Glob patterns for protected files (one per line). Uses .gitignore-compatible syntax via picomatch. Merged with built-in defaults unless override is set. Use ! prefix to create exceptions. | no | "" |
| protected-files-action | Action when protected files are modified: "block" (fail the check) or "warn" (annotate but continue) | no | block |
| protected-files-override-defaults | When true, built-in default patterns are NOT applied. Only user-provided patterns are used. | no | false |
| threat-detection | Enable AI-powered threat detection via Copilot CLI. Scans for prompt injection, credential leaks, malicious code, and social engineering. Requires Copilot CLI on the runner. | no | false |
| workflow-id | Workflow identifier for lifecycle features. Enables marker embedding in all created content. When empty, lifecycle features are disabled. Normalized to kebab-case. | no | "" |
| close-older-issues | When true and workflow-id is set, auto-close previous open issues with the same workflow-id marker when creating a new issue. Closes as "not planned" with a linking comment. | no | false |
| close-older-issues-max | Maximum number of older issues to close per run. Safety limit to prevent runaway closures. | no | 10 |
| group-by-day | When true and workflow-id is set, append to an existing same-day issue (UTC) instead of creating a new one. Posts the content as a comment on the existing issue. | no | false |
| dry-run | When true, validates and sanitizes but does not apply actions | no | false |
| fail-on-sanitize | When true, fails the action if any content is redacted instead of applying the sanitized version | no | false |
| token | GitHub token for write operations. Should have issues:write and/or pull-requests:write scope. | no | ${{ github.token }} |