PR security gate for GitHub Actions and SARIF.
Use GitHub Actions as the final PR security gate for high-risk findings, SARIF evidence, and reviewer signal.
radar scan . --quickPolicy-based failure
Fail PRs on vulnerabilities while keeping lower-severity cleanup visible but non-blocking.
- Pull request security scanner
- CI security scanner
- SARIF upload
- HTML artifact
Use case
Evidence to inspect
Use “PR security gate for GitHub Actions and SARIF.” as the scope for this decision: verify the input, finding detail, workflow handoff, and product boundary before you install or buy.
CriterionEvidence to inspectBoundary
Input scopeSelected files, configuration, scan mode, and enabled rules.Only included paths and configured checks are evaluated.
Finding detailFile, line, rule ID, severity, explanation, and repair direction.Illustrative output is not a result from your repository.
Workflow handoffLocal result, report format, agent context, and optional CI signal.Enable exports or CI only when the workflow needs them.
Decision fitUse the same criteria on a real repository before choosing a plan or tool.No universal winner or guaranteed outcome is claimed.
Use case
Start this workflow locally
Official source
Primary sources
Validate the workflow on your own code.
Apply this page’s evidence to one real repository. For “PR security gate for GitHub Actions and SARIF.”, confirm which finding is produced, whether the proposed next step is reproducible, and where local scanning, reports, agents, or CI should stop or expand.