Initial Marketplace release of riskratchet-action — a maintainability ratchet for AI-assisted Python.
This is a thin composite-action wrapper that delegates to KayhanB21/riskratchet@v0.2.8 with input passthrough. Both shapes share action.yml as their source of truth.
Usage
on: [pull_request]
jobs:
riskratchet:
runs-on: ubuntu-latest
permissions:
permissions:
contents: read
pull-requests: write
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: KayhanB21/riskratchet-action@v1
with:
coverage: coverage.json
See the main repository (https://github.com/KayhanB21/riskratchet#github-action) for the full inputs table.
Fixes in this release
- inputs.github-token.default no longer carries the ${{ github.token }} expression literal — composite manifests do not evaluate the github context inside input defaults. Default is now empty; the fallback applies at the passthrough site (callers who omit the input still get github.token automatically).
- Same literal removed from the description: prose, which also gets evaluated.
v1.0.0 and v1.0.1 are left in place as historical record but will fail to load — pin to @v1, @v1.0.2, or later.