simhanson123/signal-lens

Context-first maintainer PR review — CI weakening, security boundaries, duplicate utilities

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
baseBase git ref for comparisonno${{ github.event.pull_request.base.sha }}
headHead git ref for comparisonno${{ github.event.pull_request.head.sha }}
output-formatOutput format: markdown, json, sarif, both, or allnoall
output-fileBase path for review output (extensions added per format)nosignal-lens-report
post-commentPost review as PR comment (requires write permissions in separate job)nofalse
post-inline-commentsPost inline comments on specific lines (findings with file+line evidence)nofalse
apply-labelsApply signal-lens:* labels to the PR based on findings (requires issues: write permission)nofalse
notify-webhookSlack/Discord webhook URL to send finding summaries (notified only on blocker/high findings)no""
fail-on-blockerFail the review step when blocker findings are detectednotrue
github-tokenGitHub token for posting commentsno${{ github.token }}
upload-sarifUpload SARIF results to GitHub Code Scanning (requires security-events: write permission)nofalse
namedescription
report-pathPath to the generated markdown report
sarif-pathPath to SARIF output
finding-countTotal number of findings
has-blockerWhether any blocker findings were detected