zmaril/Powderworks Straitjacket

Scan the repo for weird code and text LLMs tend to generate, and fail on findings.

Trust Signals

name	description	required	default
version	Release tag to download (e.g. v0.1.0), or "latest".	no	latest
working-directory	Directory to run the scan from.	no	.
paths	Space-separated paths to scan. Blank uses `.straitjacket.yaml`'s paths, else ".".	no	""
format	Output format — text, json, or sarif.	no	text
sarif	Upload findings to GitHub code scanning as SARIF (annotations on the PR diff and in the Security tab). On by default — the native GitHub experience. Grant `permissions: { security-events: write }` in the workflow to enable the upload; without it the upload is skipped but the scan still runs and gates. The job still fails on findings (set no-fail to opt out). Set "false" to disable SARIF entirely.	no	true
only	Run only these rules (comma-separated ids).	no	""
skip	Skip these rules (comma-separated ids), e.g. "motion,slop-prose".	no	""
max-lines	file-size line budget (0 disables it). Blank keeps the default (1500).	no	""
prose-window	slop-prose density window in characters. Blank keeps the default (400).	no	""
dup-min-tokens	duplication minimum clone size in tokens. Blank keeps the default (50).	no	""
no-ignore	Set "true" to ignore .gitignore / hidden-file conventions.	no	false
no-fail	Set "true" to report findings but always exit 0.	no	false

no outputs