action.yml

name: 'GitGalaxy Scanner'
description: 'Repo intelligence for humans and AI, without compilation: architecture mapping, risk scoring, SBOM/SARIF output, CI/CD.'
branding:
  icon: 'shield'
  color: 'purple'

inputs:
  tool:
    description: >
      The GitGalaxy command to execute. 
      Options: galaxyscope, blast, vault-sentinel, supply-chain-firewall, xray-inspector, pii-leak-hunter, terabyte-log-scanner, api-network-map. (Note: SARIF and SBOM generation are now native to galaxyscope).
    required: true
    default: 'galaxyscope'
  target:
    description: 'The directory or file path to scan.'
    required: true
    default: '.'
  args:
    description: 'Additional CLI arguments to pass to the tool (e.g., --sarif-only, --sbom-only, --fail-on-secrets, --fail-on-malware, --max-systemic-threat 150.0).'
    required: false
    default: ''
  version:
    description: 'The version of GitGalaxy to install from PyPI. Defaults to latest.'
    required: false
    default: 'latest'
  full_precision:
    description: 'Opt-in to install heavy physics engines (networkx, tiktoken, xgboost) for Blast Radius and ML Threat Inference.'
    required: false
    default: 'false'

runs:
  using: "composite"
  steps:
    - name: Set up Python
      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 #
      with:
        python-version: '3.10'

    - name: Install GitGalaxy
      shell: bash
      env:
        GG_VERSION: ${{ inputs.version }}
        GG_FULL_PRECISION: ${{ inputs.full_precision }}
      run: |
        if [ "$GG_VERSION" = "local" ]; then
          echo "Dogfooding local GitGalaxy source..."
          pip install -e ".[yaml]"
        elif [ "$GG_VERSION" = "latest" ]; then
          echo "Installing latest GitGalaxy from PyPI..."
          pip install "gitgalaxy[yaml]"
        else
          echo "Installing GitGalaxy version ${GG_VERSION}..."
          pip install "gitgalaxy[yaml]==${GG_VERSION}"
        fi

        if [ "$GG_FULL_PRECISION" = "true" ]; then
          echo "Unlocking Full Precision Mode..."
          pip install networkx tiktoken xgboost pandas numpy
        else
          echo "Running in ultra-fast Zero-Dependency Mode."
        fi

    - name: Execute GitGalaxy Tool
      shell: bash
      env:
        GG_TOOL: ${{ inputs.tool }}
        GG_TARGET: ${{ inputs.target }}
        GG_ARGS: ${{ inputs.args }}
        GITGALAXY_LICENSE_KEY: "COMMUNITY_FREE_TIER"
      run: |
        echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
        set -- ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
        "$@"