runhalo/Halo COPPA Compliance Scanner
Scan code for COPPA compliance violations in children's apps. 26 COPPA rules included free.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (default: current directory) | no | . |
| pack | Rule packs to scan (space-separated). COPPA rules are always included. Additional packs available with a license key. | no | "" |
| severity-threshold | Minimum severity to report: critical, high, medium, low | no | low |
| fail-on | Severity level that blocks merge: critical, high, medium, low, none | no | critical |
| review | Enable AI Review Board for compliance verification (Pro/Business/Enterprise) | no | false |
| diff-only | Only scan files changed in this PR (reduces cost ~90%) | no | true |
| smart-trigger | Skip AI review for PRs that only touch docs/tests/config | no | true |
| framework | Override framework detection (react, nextjs, vue, angular, django, rails) | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab | no | true |
| pr-comment | Post scan summary as PR comment with COPPA 2.0 countdown | no | true |
| pr-annotations | Add inline annotations on violation lines | no | true |
Outputs
| name | description |
|---|---|
| violations | Total number of violations found |
| critical | Number of critical violations |
| high | Number of high violations |
| score | Compliance score (0-100) |
| grade | Compliance grade (A-F) |
| scan-passed | Whether the scan passed the fail-on threshold |
| report-path | Path to the JSON results file |
| tier | Resolved license tier (free, pro, business, enterprise) |