sumeetghimire/PRoof
Verifies pull requests actually fix what they claim to fix. Runs builds and tests on the runner, checks issue linkage, and detects hallucinated APIs.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GitHub token for API calls (use secrets.GITHUB_TOKEN) | yes | — |
| run_tests | Run the test suite on the runner | no | true |
| check_issue | Check whether the PR fixes the linked GitHub issue | no | true |
| detect_hallucinations | Check for non-existent API calls in the diff | no | true |
| block_merge | Fail the check to block merge when verification fails | no | false |
| check_dependencies | Check new dependencies for typosquatting, age, and download count | no | true |
| check_imports | Validate import/require and named exports exist in installed packages | no | true |
| check_scope | Check if changed files are relevant to the linked issue | no | true |
| security_scan | Scan added diff lines for dangerous code patterns | no | true |
| build_timeout | Seconds before build/install step is killed | no | 120 |
| test_timeout | Seconds before test suite is killed | no | 300 |
| check_sensitive_files | Warn when CI/CD, Docker, secrets, or deployment files are modified | no | true |
| languages | Comma-separated languages to support; default is auto-detect | no | "" |
Outputs
no outputs