@@ -19,21 +19,31 @@ jobs:
1919
2020 - name : Run CodeGuard analysis
2121 id : codeguard
22- uses : m1el/codeguard-action@main
22+ # WIP: the codeguard-action is still in development, so the repo URL might change.
23+ # We're using the main branch for now, will be tagged correctly when we release a version.
24+ uses : DNyoussef/codeguard-action@main
2325 with :
2426 github_token : ${{ secrets.GITHUB_TOKEN }}
2527 risk_threshold : L3
28+ # Optional: specify a rubric to use for analysis.
29+ # Either use pre-existing rubrics (e.g., "clarity")
30+ # or a custom rubric defined in the repository.
2631 rubric : .codeguard/rubrics/clarity-mine.yaml
2732 post_comment : " true"
2833 generate_bundle : " true"
2934 fail_on_high_risk : " true"
35+ # Optional: enable AI review for high-risk findings.
36+ # This will add an AI-generated review comment to the PR with suggestions for how to address the issue.
3037 ai_review : " true"
38+ # OpenRouter API key for AI review. It's possible to use a local model,
39+ # but for the easiest reproduction, we'll use OpenRouter
3140 openrouter_api_key : ${{ secrets.OPENROUTER_API_KEY }}
3241
42+ # Optional: upload the evidence bundle as an artifact for later inspection
3343 - name : Upload evidence bundle
3444 if : always()
3545 uses : actions/upload-artifact@v4
3646 with :
3747 name : codeguard-evidence-bundle
38- path : evidence-bundle /
48+ path : .guardspine/bundles /
3949 retention-days : 90
0 commit comments