mostafa-m-hussein/Ganglia
Structural PR impact reports powered by Ganglia
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| command | Ganglia subcommand to run (only "analyze" is supported in v1) | no | analyze |
| base | Base commit SHA for the diff | no | ${{ github.event.pull_request.base.sha }} |
| head | Head commit SHA for the diff | no | ${{ github.event.pull_request.head.sha }} |
| format | Primary output format (json or markdown) | no | json |
| gng-version | Version of the gng binary to download (minimum v0.9.95) | no | v0.9.102 |
| max-callers | Maximum number of callers to report per symbol | no | 5 |
| impact-depth | Call-graph depth for impact analysis | no | 2 |
| upload-artifact | Upload JSON and Markdown reports as workflow artifacts | no | true |
| verify-provenance | Verify the downloaded gng binary against its SLSA build provenance attestation. Requires gng-version >= v1.0.0 (earlier versions were published before attestations were wired in). Soft-fails on older versions with a warning. Default false to keep the Action usable against the current 0.9.x line. | no | false |
| comment-pr | Reserved for future use. When true, the Ganglia GitHub App posts a structured PR comment. Set to false in v1 — the App handles comments officially. | no | false |
Outputs
| name | description |
|---|---|
| report-json-path | Path to the JSON impact report |
| report-md-path | Path to the Markdown impact report |
| risk-level | Risk level extracted from the JSON report (low|medium|high) |