wildmason/GHA Container Proof

Classify GitHub Actions job containers and Docker actions with Docker CLI probe receipts — offline by default.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
versionCrate version to install, or latest.nolatest
commandCommand to run. Use check-workflow, plan-job, plan-action, or probe.nocheck-workflow
repoRepository root for check-workflow (defaults to the current directory).no
workspaceWorkspace root for check-workflow.no
workflowNewline-separated workflow paths for check-workflow.no
job-idJob id for plan-job.no
runner-osRunner OS: linux, windows, or macos.nolinux
runs-onNewline-separated runs-on labels for plan-job.no
containerImage for plan-job's job container.no
envNewline-separated KEY=VALUE entries (plan-job, plan-action, probe).no
portNewline-separated port mappings for plan-job.no
volumeNewline-separated volume mappings for plan-job.no
optionsRaw Docker options string for plan-job.no
action-refAction reference for plan-action (e.g. ./actions/build or docker://alpine:3).no
action-pathLocal action directory for plan-action.no
usingruns.using value for plan-action (docker, node20, composite).no
imageImage or Dockerfile descriptor for plan-action or probe.no
entrypointEntrypoint override for plan-action.no
pre-entrypointPre-entrypoint script for plan-action.no
post-entrypointPost-entrypoint script for plan-action.no
argsArgs string for plan-action.no
toolNewline-separated tool names for probe (each run as `<tool> --version`).no
probe-commandNewline-separated raw commands for probe (each run inside the container).no
allow-pullAllow probe to pull images (set to 'true' for opt-in).nofalse
docker-binOverride the Docker CLI binary path (default: discovered on PATH).no
formatReceipt format: text, json, or markdown.notext
outputOptional receipt output path.no
strictTreat warnings as failures.nofalse

no outputs