wildmason/GHA Shell Proof
Plan and validate GitHub Actions `run:`-step shell invocations with receipt-backed evidence.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Crate version to install, or `latest`. | no | latest |
| command | Subcommand to run: plan, render, or check-workflow. | no | check-workflow |
| runner-os | Target runner OS: linux, macos, or windows. Required for `plan` and `render`. Optional override for `check-workflow` — leave empty to infer from each job's `runs-on:`. | no | — |
| shell | Shell name (bash, sh, pwsh, powershell, cmd, python) or custom `<command> {0}` template. | no | — |
| working-directory | Step-level working directory. | no | — |
| workspace | Workspace directory. | no | . |
| temp-dir | Runner temp directory used in script-path placeholders. | no | — |
| script-path | Concrete script-file path; otherwise a deterministic placeholder is used. | no | — |
| job-defaults-run-shell | Job-level `defaults.run.shell` value. | no | — |
| job-defaults-run-working-directory | Job-level `defaults.run.working-directory` value. | no | — |
| defaults-run-shell | Workflow-level `defaults.run.shell` value. | no | — |
| defaults-run-working-directory | Workflow-level `defaults.run.working-directory` value. | no | — |
| workflow | Newline-separated workflow paths for `check-workflow`. | no | — |
| script | Source script path for `render`. | no | — |
| output-script | Output rendered-script path for `render`. | no | — |
| format | Receipt format: text, json, or markdown. | no | text |
| output | Optional receipt output path. | no | — |
| strict | Treat warnings as failures. | no | false |
Outputs
no outputs