@base-attribution-os/github-action 0.1.1 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -0
- package/action.yml +0 -1
- package/dist/index.cjs +2834 -2362
- package/package.json +17 -4
package/README.md
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
# Base Attribution OS GitHub Action
|
|
2
|
+
|
|
3
|
+
Scan pull requests for Base transaction paths that are missing the expected Builder Code attribution.
|
|
4
|
+
|
|
5
|
+
```yaml
|
|
6
|
+
- uses: horn111/base-attribution-os/packages/github-action@v0.4.0
|
|
7
|
+
with:
|
|
8
|
+
builder-code: bc_example
|
|
9
|
+
profile: strict
|
|
10
|
+
```
|
|
11
|
+
|
|
12
|
+
The action can scan dependency-aware changed files, resolve bounded monorepo evidence, apply a baseline, emit SARIF, and expose coverage metrics as outputs. Most users should consume the repository action shown above rather than install this package from npm.
|
|
13
|
+
|
|
14
|
+
[GitHub Action documentation](https://github.com/horn111/base-attribution-os/blob/main/docs/ci-validation.md) · [Issues](https://github.com/horn111/base-attribution-os/issues)
|
package/action.yml
CHANGED
|
@@ -23,7 +23,6 @@ inputs:
|
|
|
23
23
|
profile:
|
|
24
24
|
description: "Scanner profile: local reports findings without failing by default, ci fails obvious missing attribution, strict requires the expected Builder Code in candidate files."
|
|
25
25
|
required: false
|
|
26
|
-
default: "ci"
|
|
27
26
|
fail-on-missing:
|
|
28
27
|
description: "Override the selected profile's default failure behavior."
|
|
29
28
|
required: false
|