Skip to content

Commit a6e8f11

Browse files
committed
comment out codeguard-action integration
1 parent c9c9c03 commit a6e8f11

1 file changed

Lines changed: 12 additions & 2 deletions

File tree

.github/workflows/codeguard.yml

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,21 +19,31 @@ jobs:
1919

2020
- name: Run CodeGuard analysis
2121
id: codeguard
22-
uses: m1el/codeguard-action@main
22+
# WIP: the codeguard-action is still in development, so the repo URL might change.
23+
# We're using the main branch for now, will be tagged correctly when we release a version.
24+
uses: DNyoussef/codeguard-action@main
2325
with:
2426
github_token: ${{ secrets.GITHUB_TOKEN }}
2527
risk_threshold: L3
28+
# Optional: specify a rubric to use for analysis.
29+
# Either use pre-existing rubrics (e.g., "clarity")
30+
# or a custom rubric defined in the repository.
2631
rubric: .codeguard/rubrics/clarity-mine.yaml
2732
post_comment: "true"
2833
generate_bundle: "true"
2934
fail_on_high_risk: "true"
35+
# Optional: enable AI review for high-risk findings.
36+
# This will add an AI-generated review comment to the PR with suggestions for how to address the issue.
3037
ai_review: "true"
38+
# OpenRouter API key for AI review. It's possible to use a local model,
39+
# but for the easiest reproduction, we'll use OpenRouter
3140
openrouter_api_key: ${{ secrets.OPENROUTER_API_KEY }}
3241

42+
# Optional: upload the evidence bundle as an artifact for later inspection
3343
- name: Upload evidence bundle
3444
if: always()
3545
uses: actions/upload-artifact@v4
3646
with:
3747
name: codeguard-evidence-bundle
38-
path: evidence-bundle/
48+
path: .guardspine/bundles/
3949
retention-days: 90

0 commit comments

Comments
 (0)