thingzio/DevTrace PR Check
Evaluate pull request contributor trust and supply-chain risk using DevTrace reputation scoring
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | DevTrace API token (dt_ prefix) | yes | — |
| min-score | Minimum score threshold (0.0-1.0). Enables check run with pass/fail. | no | — |
| repo | Repository for scoring context (owner/repo) | no | ${{ github.repository }} |
| trusted-orgs | Comma-separated trusted organization slugs | no | — |
| api-url | DevTrace API base URL | no | https://devtrace.thingz.io |
| github-token | GitHub token for PR comments and check runs | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| score | Numeric score (0.0-1.0) |
| grade | Letter grade (A+ through F) |
| risk-summary | Risk summary text |