| bundles | Glob pattern for evidence bundles | no | "" |
| fail_on | Fail threshold: error, warn, info, none | no | error |
| sarif | Upload SARIF to GitHub Security tab | no | true |
| category | SARIF category (auto-generated if omitted) | no | "" |
| baseline_dir | Path to baseline bundles for diff | no | "" |
| baseline_key | Key for baseline cache lookup | no | "" |
| write_baseline | Write baseline after successful run (main branch only) | no | false |
| comment_diff | Post PR comment with diff summary | no | true |
| upload_artifacts | Deprecated. Use reports_dir output instead. | no | false |
| version | Assay CLI version to install | no | latest |
| pack | Compliance pack(s) to apply (comma-separated).
Examples: eu-ai-act-baseline, soc2-baseline, ./custom.yaml
| no | "" |
| store | BYOS store URL for evidence push.
Examples: s3://bucket/prefix, az://container, gs://bucket
Requires OIDC trust relationship configured.
| no | "" |
| store_provider | Cloud provider for OIDC authentication.
Options: aws, gcp, azure, auto (detect from URL)
| no | auto |
| store_role | IAM role/identity for OIDC authentication.
AWS: arn:aws:iam::ACCOUNT:role/ROLE
GCP: projects/PROJECT/locations/global/workloadIdentityPools/POOL/providers/PROVIDER
| no | "" |
| store_region | AWS region (AWS only) | no | us-east-1 |
| azure_client_id | Azure App Registration client ID (required for azure) | no | "" |
| azure_tenant_id | Azure AD tenant ID (required for azure) | no | "" |
| azure_subscription_id | Azure subscription ID (required for azure) | no | "" |
| attest | Generate SLSA-aligned artifact attestation for evidence bundles.
Requires permissions: attestations: write, id-token: write
Only runs on push to default branch.
| no | false |
| badge_gist | Gist ID for dynamic coverage badge.
Only runs on push to default branch.
| no | "" |
| badge_token | GitHub PAT for badge gist update.
Requires gist scope. Pass via secrets.GIST_TOKEN.
Only used when badge_gist is set.
| no | "" |
| sandbox-command | Optional. A command to run under `assay sandbox` (Landlock) so the action
records the coding agent's observed effects as an evidence bundle and
verifies/lints it. Requires a Linux runner. Empty disables the step.
| no | "" |
| attest-key | Optional. Ed25519 private key (PKCS#8 PEM) used to sign the evidence
bundle's manifest as an in-toto/DSSE attestation via `assay evidence
attest`. Pass via a secret. Empty disables the step.
| no | "" |