narendra486/QualityGate - Universal SARIF Security Quality Gate
Universal SARIF security quality gate for CodeQL, Snyk, Trivy, Semgrep, Checkov, Grype, and more.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 8, 2026
- License
- MIT
Pinned Snippet
uses: narendra486/qualitygate@767a41b1ee74c55fbd13cdcc5f3a356a5173b3ab # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| sarif_file | SARIF path input: single file, multiline file list, directory, or glob. | yes | — |
| severity_threshold | Optional severity threshold. Defaults to high, which blocks high and critical findings. Set medium to also block medium findings. | no | high |
| mode | Enforcement mode: block fails the workflow with exit 1; report posts results without failing. | no | block |
| github_token | GitHub token for PR comments and optional check runs. | no | — |
| pr_comment | Optional. Whether to post PR comments. Defaults to true; set false to disable comments. | no | true |
| fail_on_count | Optional: Fail if total findings exceed this number | no | — |
| ignore_rule_ids | Comma-separated list of rule IDs to ignore | no | — |
| ignore_paths | Comma-separated glob patterns for paths to ignore | no | — |
| deduplicate | Optional. Deduplicate findings before evaluation. Defaults to true; set false to count every occurrence. | no | true |
| enable_annotations | Whether to create GitHub workflow annotations. | no | true |
| enable_step_summary | Whether to write the GitHub Step Summary. | no | true |
| markdown_template | Optional custom markdown template path using {{status}}, {{summary_table}}, {{findings_table}}, and related tokens. | no | — |
| max_findings_display | Maximum findings displayed in PR comments and step summaries. | no | 100 |
| json_export_file | Optional path to write a JSON report artifact. | no | — |
Outputs
| name | description |
|---|---|
| total_findings | Total number of findings |
| critical_count | Number of critical findings |
| high_count | Number of high findings |
| medium_count | Number of medium findings |
| low_count | Number of low findings |
| quality_gate_status | PASS or FAIL |
| blocked | true when the quality gate failed |
| processed_files | Newline-separated list of processed SARIF files |