opensip-ai/OpenSIP CLI
Run OpenSIP CLI in GitHub Actions without an OpenSIP Cloud account. The action runs the same built-in suite as the canonical `opensip audit` workflow by default and emits PR annotations, optional SARIF, optional sticky PR comments, and stable step outputs.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| suite | Suite name to run when command is not provided. | no | audit |
| command | Alternative OpenSIP CLI command to run instead of a suite, for example "audit --changed", "fit --changed", or "graph --recipe agent-risk". | no | "" |
| changed | Scope the default suite run to changed files. | no | true |
| annotations | Emit GitHub workflow annotations from the review brief. | no | true |
| sarif | Generate a SARIF 2.1.0 file derived from the review brief. | no | false |
| comment | Post or update a sticky pull request summary comment. | no | false |
| fail-on | Failure policy: all-errors, new-errors, new-warnings, or never. | no | new-errors |
| config | Path to opensip-cli.config.yml. | no | "" |
| version | opensip-cli npm version to run with npx. | no | latest |
| working-directory | Directory to run OpenSIP CLI from. | no | . |
Outputs
| name | description |
|---|---|
| verdict | pass, warn, or fail. |
| issues | Total issue count reported by the run. |
| new-issues | Net-new issue count when baseline evidence is available. |
| sarif | Path to the generated SARIF file, when sarif is true. |
| brief | Path to the generated review brief JSON file. |
| degraded | Comma-separated degraded evidence reasons. |