action/action.yml at dev · rootform-dev/action · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
name: Rootform
description: Analyze or compare evidence, evaluate selected Policies, and present Rootform reports in GitHub
author: Rootform
inputs:
  version:
    description: "Exact published version; omit to reuse a verified version in this job"
    required: false
    default: ""
  github-token:
    description: "GitHub token for release API requests and enabled PR comments"
    required: false
    default: "${{ github.token }}"
  project:
    description: "Project directory for raw evidence or Policy selection; defaults to workspace"
    required: false
    default: ""
  locked:
    description: "Require and preserve existing rootform.lock"
    required: false
    default: "false"
  offline:
    description: "Prepare selected external content without network access"
    required: false
    default: "false"
  cache:
    description: "Cache verified external sources selected by rootform.lock"
    required: false
    default: "true"
  input:
    description: "Path to plan JSON, state JSON, Form or Comparison Form"
    required: false
    default: ""
  plan-file:
    description: "Matching saved plan for input; pairing must verify"
    required: false
    default: ""
  before:
    description: "Before plan JSON, state JSON or single-input Form"
    required: false
    default: ""
  after:
    description: "After plan JSON, state JSON or single-input Form"
    required: false
    default: ""
  before-plan-file:
    description: "Matching saved plan for before; pairing must verify"
    required: false
    default: ""
  after-plan-file:
    description: "Matching saved plan for after; pairing must verify"
    required: false
    default: ""
  stage:
    description: "Architecture stage: planned, refreshed or recorded"
    required: false
    default: ""
  before-stage:
    description: "Before stage: planned, refreshed or recorded"
    required: false
    default: ""
  after-stage:
    description: "After stage: planned, refreshed or recorded"
    required: false
    default: ""
  side:
    description: "Comparison sides: before, after or both; defaults to both"
    required: false
    default: ""
  policy:
    description: "Policy selectors, one per line, within selected Packs"
    required: false
    default: ""
  policy-pack:
    description: "Policy Pack source directories or compiled files, one per line"
    required: false
    default: ""
  check:
    description: "Check all project-selected Policies without explicit selectors or overlays"
    required: false
    default: "false"
  summary:
    description: "Append CLI Markdown to GitHub Job Summary"
    required: false
    default: "true"
  upload-artifact:
    description: "Upload Form and derived reports as one artifact; never raw inputs"
    required: false
    default: "true"
  artifact-name:
    description: "Artifact name; defaults to a unique name per invocation, including matrix jobs"
    required: false
    default: ""
  retention-days:
    description: "Artifact retention: 1–90 days, capped by repository limit"
    required: false
    default: "7"
  comment:
    description: "Update one same-repository PR comment; requires write permission and job serialization"
    required: false
    default: "false"
outputs:
  version:
    description: "Verified Rootform CLI version"
  form:
    description: "Path to the supplied or generated Form"
  report:
    description: "Path to the complete CLI Markdown report"
  html:
    description: "Path to the self-contained HTML Explorer"
  result:
    description: "Path to Policy result JSON"
  sarif:
    description: "Path to Policy result SARIF"
  exit-code:
    description: "Rootform check exit code, exposed before the gate"
  artifact-id:
    description: "Uploaded artifact ID for cross-job download"
  artifact-url:
    description: "Uploaded artifact URL"
runs:
  using: node24
  main: dist/main/index.js
branding:
  icon: map
  color: blue