pheoxy/Themis PR Gate

Strict upstream validation gate for AI-assisted code submissions.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jul 6, 2026
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: pheoxy/themis@a338cab9ca7afc7c450db79ca82e391c86f30655 # v1.0.2

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
repo	Repository path to validate.	—	.
base	Base ref for the PR diff, for example origin/main.	—	""
body-file	File containing the pull request body.	—	""
evidence	Inline test evidence.	—	""
evidence-file	File containing test evidence.	—	""
human-authored	Set to true only when no AI assistance was used.	—	false
run-checks	Run required_checks from .themis.toml.	—	true
workflow	Themis workflow to run. Use validate, guide, maintainer-packet, self-check, or config-check.	—	validate
output	Themis output path.	—	upstream-validation-report.md
format	Themis output format. Use markdown, comment, json, or sarif. config-check supports markdown or json.	—	markdown
annotations	CI annotation mode. Use github for GitHub workflow annotations or none to disable.	—	github
step-summary	Write the gate output to the GitHub Step Summary when possible.	—	true
comment-pr	Post the generated gate output as a pull request comment using gh.	—	false
pr-number	Pull request number for comment-pr. Defaults to github.event.pull_request.number when available.	—	""
draft-pr	Create a draft PR with gh after validation passes.	—	false
title	Draft PR title override.	—	""
base-branch	Draft PR base branch override.	—	""
head-branch	Draft PR head branch override.	—	""
install-nix	Install Nix before running.	—	true

Outputs

name	description
status	Themis workflow status, either pass or blocked.
exit-code	Themis CLI exit code.
report	Path to the generated Themis output.