First public release of VibeGuard as a reusable GitHub Action.
Highlights
- 30 built-in rules across injection / auth / secrets / crypto / quality
- AI-code heuristics (VG-QUAL-005..010): stub bodies, placeholder emails, mock data, debug flags, "for now" comments, empty validators
- Output formats: human / json / sarif / markdown
- PR diff scan via
diff:input (origin/main...HEAD) - Suppress pragmas:
vibeguard:disable-line/disable-next-line/disable-file - Composite action — no Docker, runs on
ubuntu-latest
Usage
See README for full examples. Minimal:
- uses: actions/checkout@v4
- uses: YUTAKONDO1205/VibeGuard@v0.1.0
with:
path: .
format: sarif
out: vibeguard.sarif
fail-on: high
- uses: github/codeql-action/upload-sarif@v3
if: always()
with:
sarif_file: vibeguard.sarif