Diff-Aware Results
Only net-new and changed issues surface. Backlog stays quiet so reviewers focus on real regressions.
Progressive Policy Gates
Escalate from info → warn → block with a documented rollout path that avoids noisy reversions.
Deterministic Automation
Uniform JSON arrays (single combined list) + stable markdown sections enable reproducible pipelines & reporting.
Unified Policy Model
One rule syntax across vulnerability, license, package & validation domains; change category order: new, changed, removed, existing.
Low Friction Adoption
Drop-in GitHub Action or Docker run. Start in read-only (info) then tighten without rewrites.
Transparent Operation
Explicit security & trust model: no unsolicited network egress; predictable caching; clear exit codes.
Sample JSON Output (combined)
[
{"id":"CVE-2024-0001","change":"new","action":"block"},
{"id":"MIT-License-Policy","change":"changed","action":"warn"}
]Rendered Markdown (excerpt)
| id | change | action |
|-----------------|---------|--------|
| CVE-2024-0001 | new | block |
| MIT-License-Policy | changed | warn |Single homogeneous JSON array always; markdown grouped separately for human review.
Learn about combining