pullminder/Pullminder Action

Validate Pullminder rule registries, run PR risk reviews, or execute CI checks with annotations and artifact upload

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 10, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: pullminder/action@cfd7c611e04690d813c2554c688a411043ed4c37 # v1.0.3

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
versionCLI version to uselatest
modeAction mode: 'registry' for registry validation, 'pr-review' for PR risk scoring, 'ci' for CI annotations with artifact uploadregistry
commandRegistry subcommand to run (only applies to mode: registry)validate
strictEnable strict validation (only applies to mode: registry)true
api-tokenAPI token for Pullminder platform (reserved for future use in mode: pr-review)""
fail-onMinimum severity that causes failure: critical, high, medium, low (only applies to mode: pr-review or ci)""
fail-on-countMaximum number of findings allowed before failing (only applies to mode: pr-review or ci)""
configPath to config file (only applies to mode: pr-review or ci)""
includeGlob patterns to include in CI scan (only applies to mode: ci)""
excludeGlob patterns to exclude from CI scan (only applies to mode: ci)""
upload-artifactUpload raw CLI output as workflow artifact (only applies to mode: ci)true
commentPost results as PR commenttrue
working-directoryWorking directory for CLI invocation. Registry mode: path to registry root. pr-review/ci: path to repository..
coverage-modeCoverage mode: 'artifact' (default, upload as GitHub artifact) or 'webhook' (POST directly to Pullminder)artifact
coverage-webhook-tokenCoverage webhook token for webhook mode (set PULLMINDER_COVERAGE_TOKEN env var instead for security)""
coverage-webhook-urlCustom webhook URL (defaults to Pullminder API)""
coverage-filePath to coverage file to upload in webhook mode""
coverage-test-commandShell command to run before uploading coverage (e.g., 'npm test -- --coverage', 'go test -coverprofile=cover.out ./...'). Runs only in webhook mode.""

no outputs