saagpatel/Harness Scorecard
Grade a coding-agent harness configuration A-F against a red-team rubric and emit SARIF.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to the harness directory to scan (e.g. .claude or .codex). | yes | — |
| sarif-file | Path to write the SARIF 2.1.0 report. | no | harness-scorecard.sarif |
| min-grade | Fail the job when the harness grades below this band (A, B, C, D, or F). | no | B |
| baseline | Optional path to a previously saved JSON scorecard (produced by `scan --json`). When set, the action also fails the job if the current grade regresses below it. | no | "" |
| upload-sarif | Upload the SARIF report to GitHub code scanning (requires security-events:write). | no | true |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF report. |
| exit-code | Raw scan exit code (0 = meets bar, 1 = below bar, 2 = no harness found). |
| diff-exit-code | Raw diff exit code when a baseline is set (0 = no regression, 1 = regressed, 2 = invalid input). |