| frameworks | Newline-separated (or comma-separated) list of framework IDs to assess.
Supported: GDPR, HIPAA, SOC2, ISO27001, PCI-DSS, NIST-800-53, FedRAMP, org-policy.
| yes | — |
| min-confidence | Composite score threshold (0.0–1.0). Findings below this are suppressed in enforce mode. | — | 0.70 |
| adjudication-mode | off (no LLM calls) | advisory (score shown, nothing suppressed) | enforce (suppress below threshold) | — | off |
| models-config | Path to a model routing YAML file (relative to repo root).
Defines provider, model, base_url, and api_key_env for each role.
Supports cloud APIs and local endpoints (Ollama, vLLM).
If omitted, uses audit-models.yaml at repo root if present,
otherwise falls back to built-in defaults (cloud models).
| — | audit-models.yaml |
| detector-model | Override the detector role's model (sets DETECTOR_MODEL env). | — | "" |
| verifier-model | Override the verifier role's model (sets VERIFIER_MODEL env). | — | "" |
| adversarial-model | Override the challenger role's model (sets CHALLENGER_MODEL env). | — | "" |
| judge-model | Override the consensus role's model (sets CONSENSUS_MODEL env). | — | "" |
| codeql-sarif | Path to directory of CodeQL SARIF files from github/codeql-action/analyze.
If absent or empty, CodeQL findings are skipped (graceful degradation).
| — | "" |
| ast-rules | Path to custom AST rule modules (executed by the built-in AST engine). | — | ast-rules |
| trivy-enabled | Run Trivy filesystem scan for IaC misconfigs (container image scan also via trivy-image) | — | true |
| trivy-image | Docker image tag to scan with Trivy (e.g. myapp:latest). Empty = skip image scan. | — | "" |
| tfsec-enabled | Run tfsec for Terraform security checks | — | true |
| gitleaks-enabled | Run gitleaks to detect hardcoded secrets and credentials | — | true |
| fail-on | Minimum severity that blocks the PR: low | medium | high | critical | — | high |
| base-ref | Git ref to diff against. | — | origin/main |
| scan-mode | diff | full | both | — | both |
| emit-oscal | Emit OSCAL assessment-results JSON | — | true |
| emit-coverage | Emit coverage matrix as Markdown and HTML | — | true |
| seo-title | HTML title for coverage.html. | — | Audit Packs Control Coverage Matrix |
| seo-description | HTML meta description for coverage.html. | — | Compliance control coverage report generated by audit-packs. |
| seo-canonical-url | Canonical URL for coverage.html when published. | — | "" |
| emit-sarif | Emit aggregate SARIF for upload | — | true |
| allow-repo-config | Trust repo-supplied configuration (ast-rules/, scanner plugins, audit-models.yaml base_url/api_key_env). The scanned repository is untrusted by default — only enable for repositories you fully control. | no | false |
| redact-engines | Comma-separated list of scanner engines whose raw output is fully masked before reaching any output sink (PR comments, Slack, Jira, OSCAL). Note: masking is applied post-adjudication; the LLM still sees raw evidence for these engines. | no | "" |
| baseline-file | Repo-relative path to a baseline JSON file created by `audit-packs baseline`. When provided, findings already in the baseline are excluded from the severity gate (shown in a separate 'Baselined' PR comment section). | no | "" |
| baseline-gate-severity | Safety valve: baseline entries at or above this severity still gate the PR even when baselined. One of low | medium | high | critical. Leave empty (default) to excuse all baselined findings regardless of severity. | no | "" |
| github-token | GitHub token used to post the PR summary comment. Defaults to the workflow's automatic token. | no | ${{ github.token }} |
| pr-number | Pull request number to comment on. Defaults to the number of the triggering pull_request event (empty on non-PR events). | no | ${{ github.event.pull_request.number }} |