GitHub

name: MergeGuide Policy Check

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]

jobs:
  policy-check:
    name: Policy Check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Run MergeGuide
        uses: MergeGuide/mergeguide/action@v1
        with:
          paths: '.'

name: MergeGuide Security Scan

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  security-scan:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write
    steps:
      - uses: actions/checkout@v4

      - name: Run MergeGuide
        id: mergeguide
        uses: MergeGuide/mergeguide/action@v1
        with:
          paths: 'src/'
          sarif-file: 'mergeguide-results.sarif'

      - name: Upload SARIF
        if: always()
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: 'mergeguide-results.sarif'
          category: 'mergeguide'

      - name: Fail if violations found
        if: steps.mergeguide.outputs.passed == 'false'
        run: |
          echo "::error::MergeGuide found policy violations"
          exit 1