Crate gha_command_proof 

GitHub Actions workflow command and environment-file verifier.

gha-command-proof parses the command channel that actions write to stdout/stderr, plus the file command protocol exposed through GITHUB_ENV, GITHUB_OUTPUT, GITHUB_STATE, GITHUB_PATH, and GITHUB_STEP_SUMMARY.

Structs

Check

CommandRecord

EnvFileAnalysis

EnvFileRecord

Location

LogAnalysis

NamedText

Text with a stable source label used in receipts.

ParsedCommand

ProofOptions

Options shared by command-stream and environment-file analysis.

Receipt

StepInput

Inputs for a single GitHub Actions step proof.

Summary

ToolReceipt

Enums

CheckStatus

CommandSyntax

EnvFileKind

OutputFormat

Functions

analyze_command_stream

analyze_env_file

escape_data

escape_legacy

escape_property

parse_command_line

prove_env_file

Analyze one environment file.

prove_log

Analyze one command stream.

prove_step

Analyze a whole step boundary: command stream first, then all supplied file commands.

render_receipt

unescape_data

unescape_legacy

unescape_property