Korext: AI Code Governance

БесплатноНе проверен

Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

автор: io.github.Korext

GitHub Embed

Описание

Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

README

Enforce compliance policies on AI generated code in your GitHub workflows.

72 policy packs. 532 rules. 13 languages. Violations appear as GitHub Code Scanning annotations on pull requests.

Quick Start

Add this to .github/workflows/korext.yml:

name: Korext Enforcement
on: [push, pull_request]

permissions:
  contents: read
  security-events: write

jobs:
  enforce:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Korext/enforce-action@v3
        with:
          api-token: ${{ secrets.KOREXT_API_TOKEN }}

Korext scans your code on every push and PR using the default web policy pack.

How It Works

Install: The action installs the Korext CLI
Scan: Runs korext enforce against your codebase with the selected policy pack
Report: Generates a SARIF file and uploads it to GitHub Code Scanning
Gate: Fails the workflow if critical or high severity violations are found

Violations appear as annotations directly on the PR diff, powered by GitHub Code Scanning.

Inputs

Input	Description	Required	Default
`directory`	Directory to scan for policy violations	No	`.`
`pack`	Policy Pack ID to enforce	No	`web`
`api-token`	Korext API token for authenticated mode	No	(anonymous)
`fail-on-violations`	Fail workflow on critical/high violations	No	`true`
`sarif-upload`	Upload SARIF to GitHub Code Scanning	No	`true`
`region`	Data processing region (us, eu, apac)	No	(default)
`sign-bundles`	Request signed proof bundles	No	`true`

Outputs

Output	Description
`violations`	Total number of policy violations found
`sarif-file`	Path to the generated SARIF results file
`bundle-count`	Number of proof bundles generated
`bundles-signed`	Number of signed proof bundles
`bundle-ids`	Comma separated list of proof bundle IDs

Examples

Multiple Policy Packs

- uses: Korext/enforce-action@v3
  with:
    pack: web,pci-dss-v1,owasp-v1
    api-token: ${{ secrets.KOREXT_API_TOKEN }}

EU Data Sovereignty

- uses: Korext/enforce-action@v3
  with:
    pack: gdpr-v1
    region: eu
    api-token: ${{ secrets.KOREXT_API_TOKEN }}

Scan Specific Directory

- uses: Korext/enforce-action@v3
  with:
    directory: src/
    pack: hipaa-v1
    api-token: ${{ secrets.KOREXT_API_TOKEN }}

Warn Only (do not fail)

- uses: Korext/enforce-action@v3
  with:
    pack: web
    fail-on-violations: 'false'

Authentication

For full access to all policy packs and signed proof bundles, create an API token in your KOREXT dashboard and add it as a GitHub secret:

Go to app.korext.com > Settings > API Tokens
Create a new token
Add it as KOREXT_API_TOKEN in your repo's Settings > Secrets and variables > Actions

Without a token, the action runs in anonymous mode (20 requests per hour, limited packs).

License

Proprietary. See Terms of Service.

from github.com/Korext/enforce-action

Установить Korext: AI Code Governance в Claude Desktop, Claude Code, Cursor

Рекомендуется · одна команда, все IDE

unyly install korext-ai-code-governance

Ставит в Claude Desktop, Claude Code, Cursor и VS Code — сам разбирается с npx, uvx и сборкой из исходников.

Впервые? Поставь CLI: curl -fsSL https://unyly.org/install | sh

Или настроить вручную

Выполни в терминале:

claude mcp add korext-ai-code-governance -- npx -y korext

FAQ