riskratchet-action

GitHub Marketplace wrapper for KayhanB21/riskratchet — a maintainability ratchet for AI-assisted Python and TypeScript.

This repo exists for Marketplace discoverability. The action logic lives in the root action.yml of the riskratchet repo; this wrapper's action.yml delegates to it with input passthrough so both shapes share one source of truth.

Usage

on: [pull_request]

jobs:
  riskratchet:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
        with:
          # Full history: churn uses `git log --since`, which on the default
          # shallow (depth-1) clone sees only HEAD and silently scores every
          # function's churn as zero — so CI would disagree with your baseline.
          fetch-depth: 0
      - uses: KayhanB21/riskratchet-action@v1
        with:
          coverage: coverage.json

If you already use riskratchet, you can skip this wrapper and reference the root action directly:

- uses: KayhanB21/riskratchet@v0.3.6

Both forms accept the same inputs. See the main README for the full inputs table and CLI documentation.

Since v1.1.0 the wrapper also passes through typescript, ts-coverage, and ts-entry (riskratchet 0.3.6+), so a repo whose [tool.riskratchet] sets typescript = true gates its TypeScript through @v1 too:

      - uses: KayhanB21/riskratchet-action@v1
        with:
          typescript: 'true'
          ts-coverage: coverage/lcov.info

Versioning

This wrapper repo follows its own version line independent of the riskratchet package. The internal uses: ref is bumped manually when a new riskratchet release should be the default for @v1 consumers. Pin to a specific tag (@v1.0.0) if you need stability across wrapper updates.

License

MIT. See LICENSE.