robbiej24/ReckLock Discover
Offline static analyzer: scans a checkout for AI agents, automations, CI/CD workflows, deploy scripts & sensitive execution paths (no remote code upload). In CI, pair with actions/checkout & upload-artifact; see docs/github-actions.md for the manual workflow, permissions, outputs & risks.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| repo-path | Repository path to scan. | no | . |
| output-dir | Directory for scan outputs: recklock_discover_scan_report.json, recklock_discover_summary_of_findings.md, recklock_discover_details_of_findings.md. Empty uses the job working directory. | no | "" |
| min-confidence | Optional minimum confidence: low, medium, or high. | no | "" |
| include | Optional comma-separated include globs (passed to --include). | no | "" |
| exclude | Optional comma-separated extra excludes (passed to --exclude). | no | "" |
| export-manifests | When true, export draft ReckLock Registry YAML manifests for eligible findings. | no | false |
| add-to-registry | When true, opt in to writing draft ReckLock Registry YAML manifests for eligible findings. CI defaults to false. | no | false |
| manifest-dir | Manifest export directory when export-manifests is true (default is <output-dir>/recklock_manifest_exports). | no | "" |
| format | CLI log format: human (default) or json (full report on stdout). | no | human |
Outputs
no outputs