mizcausevic-dev/K8s Pre-merge Gate
Run deprecated-API + RBAC over-scope + Pod Security Standards + Helm values-coverage scans against a K8s manifests directory (and optional Helm chart). Post a consolidated PR comment; fail when findings exceed the configured severity threshold.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| manifests-dir | Directory containing Kubernetes YAML manifests to scan. | yes | — |
| chart-dir | Optional Helm chart root (with templates/ and values.yaml). When set, runs the values-coverage check too. | no | — |
| fail-on | Severity threshold that fails the run: 'high' (default), 'medium', or 'none' (never fail). | no | high |
| comment-on-pr | Post the consolidated Markdown report as a PR comment. Defaults to 'auto' (post on pull_request events only). | no | auto |
| github-token | Token used to post the PR comment. | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| total-findings | Total number of findings across all four scanners. |
| high | Count of high-severity findings. |
| medium | Count of medium-severity findings. |
| low | Count of low-severity findings. |