tky-27/GuardDiff
Block risky AI-generated diffs before they merge.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| fail-on | Fail when findings are at or above this severity (critical/high/medium/low/info). | no | high |
| post-comment | Post or update a pull request comment with the GuardDiff summary. | no | true |
| sarif | Write SARIF output for GitHub Code Scanning. | no | false |
| annotations | Emit GitHub workflow annotations for active findings. | no | true |
| rules-update-check | Compare installed rule versions with the published registry and emit update notices. | no | true |
| allow-rule-packs | Allow loading executable rule packs from guarddiff.config.yaml. Enable only for trusted branches. | no | false |
| allow-inline-suppressions | Allow inline guarddiff-ignore suppressions in pull request diffs. Keep disabled for untrusted PRs. | no | false |
| rules-registry-url | JSON manifest URL used for rule update checks. | no | https://raw.githubusercontent.com/TKY-27/GuardDiff/main/docs/site/rules/manifest.json |
| sarif-file | Path for the SARIF output file. | no | guarddiff-results.sarif |
| config | Path to the GuardDiff config file. | no | guarddiff.config.yaml |
Outputs
| name | description |
|---|---|
| findings-count | Number of active findings, excluding suppressed findings. |
| critical-count | Number of active critical findings. |
| rule-update-count | Number of available rule updates. |
| passed | Whether the configured policy passed. |