pthorpe92/Fossier PR Check
Evaluate pull request contributors for spam probability
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token with PR write access | yes | ${{ github.token }} |
| pr-token | Token used to OPEN the trust-update PR for /fossier vouch|reject|vouch-all. Defaults to github-token. If your org/repo disables "Allow GitHub Actions to create and approve pull requests", the default GITHUB_TOKEN cannot open PRs — set this to a Personal Access Token or GitHub App token with `pull-requests: write`. If left unset and PR creation is blocked, fossier pushes the branch and comments a one-click "compare & create PR" link instead of failing. | no | "" |
| config-path | Path to fossier.toml (default: auto-detect) | no | — |
| db-cache-key | Custom cache key prefix for DB persistence | no | fossier-db |
| fail-on-deny | Fail the check run when outcome is DENY (for use as required status check) | no | false |
| contact-url | URL where contributors can reach maintainers to appeal (e.g. Discord, Matrix, email) | no | "" |
| registry-api-key | API key for the Fossier global registry (report/check known spammers) | no | "" |
| registry-url | Custom registry URL (default: https://registry.fossier.io) | no | "" |
Outputs
| name | description |
|---|---|
| outcome | Decision outcome: allow, review, or deny |
| tier | Contributor trust tier |
| score | Spam score (0-100, only for unknown contributors) |
| details | Full decision details as JSON |