scal-p-labs/SCAL-P CI
Secure Chain Assurance Layer for Packages - enforce policy, hash dependencies, and audit your JavaScript project in CI
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Version of SCAL-P to use (e.g., v0.1.0, or "latest" for the latest release) | no | v0.3.2-beta.10 |
| pm | Package manager (npm, pnpm, yarn, bun). Auto-detected from lockfile if not set. | no | "" |
| policy | Path to the policy file relative to working-directory | no | .scalp/policy.json |
| output | Path for the CI report output relative to working-directory | no | .scalp/ci-report.json |
| pr-context | PR context (fork or internal) | no | fork |
| allow-scripts | Allow install scripts to run (internal PRs only) | no | false |
| sarif | Path for the SARIF report output relative to working-directory | no | "" |
| working-directory | Working directory relative to the repository root | no | . |
| enforcement | Enforcement mode for violations (block, warn, or log) | no | block |
| checksum | Expected SHA-512 checksum for the lockfile (format: sha512-<base64>) | no | "" |
| debug | Enable debug-level logging | no | false |
Outputs
| name | description |
|---|---|
| status | CI run status (pass or fail) |
| report-path | Path to the generated CI report |
| sarif-path | Path to the generated SARIF report |