mizcausevic-dev/Evidence Bundle Fleet Summary
Walk evidence-bundle manifests, surface governance gaps, post summary on PR, fail on high-severity findings.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| bundles-dir | Directory containing evidence-bundle manifest.json files. | yes | — |
| comment-on-pr | Post the Markdown summary as a PR comment. 'auto' (default) posts only on pull_request events; 'true' / 'false' force the behavior. | no | auto |
| fail-on-high | Fail the run when any high-severity finding is present (default 'true'). | no | true |
| oversized-mb | Bundles larger than this many megabytes trigger the oversized-bundle finding (default 100). | no | — |
| github-token | Token used to post the PR comment (defaults to GITHUB_TOKEN). | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| total-bundles | Number of bundles analyzed. |
| high-findings | Count of high-severity findings. |
| signed-bundles | Number of bundles with a signature block. |
| expired-bundles | Number of bundles past their expires_at. |