sungho-pk42ac/AgentGuard
Team-ready PR diff gate for AI-agent secrets, risky MCP/config changes, and SARIF evidence.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| base-sha | Base commit SHA for the pull request diff. | yes | — |
| head-sha | Head commit SHA for the pull request diff. | yes | — |
| report-path | Markdown report file path to write and publish as a PR comment/artifact. | no | agent-risk-report.md |
| json-path | JSON findings file path to write. | no | agent-risk-findings.json |
| sarif-path | SARIF file path to write for GitHub code scanning upload. | no | agentguard.sarif |
| policy-path | Optional agent-policy.yaml/json path. | no | "" |
| package-version | npm package version or dist-tag to install. | no | latest |
| fail-on | Gate threshold. Use block to fail only the score-based BLOCK verdict, review to fail any non-pass verdict, or never to report only. | no | block |
Outputs
| name | description |
|---|---|
| conclusion | pass, review, or block based on AgentGuard findings. |
| report-path | Path to the markdown AgentGuard report artifact. |
| json-path | Path to the JSON AgentGuard findings artifact. |
| sarif-path | Path to the SARIF AgentGuard artifact. |
| finding-count | Total non-advisory AgentGuard findings count. |
| advisory-count | Advisory AgentGuard findings count excluded from gate scoring. |
| review-count | Non-advisory medium/high/critical findings count for workflow routing; conclusion remains score-based. |
| block-count | Weighted non-advisory finding score used for BLOCK routing. |