action.yml

name: 'Verify by Born14'
description: 'Posts a PR change receipt showing what was checked, what was found, and what was not checked. Covers Kubernetes, Dockerfile, GitHub Actions, and one Terraform shape (warning-only).'
author: 'Born14'

branding:
  icon: 'file-text'
  color: 'orange'

inputs:
  token:
    description: 'GitHub token with pull-requests: write and contents: read'
    required: false
    default: ${{ github.token }}
  scan-root:
    description: 'Directory to scan. Default is the repo root.'
    required: false
    default: '.'
  fail-on-findings:
    description: 'When true, the workflow exits non-zero if the receipt has any non-suppressed findings. Suppressions declared in-band with `# verify:ignore <SHAPE-ID> reason:"..."` comments do not trigger failure. Default false; the receipt is informational unless this is set.'
    required: false
    default: 'false'

outputs:
  result:
    description: 'CLEAR or N FINDINGS, mirroring the receipt'
  digest:
    description: 'SHA-256 packet digest of the receipt'

runs:
  using: 'node24'
  main: 'dist/action/index.cjs'