barbaria888/SupplyChain-Guardian-AI-Github_Action

--- action.yml ---
# action.yml — GitHub Marketplace Action Definition
# ==================================================
# Proactive DevSecOps Supply Chain Guardian
#
# Autonomous CVE detection and AI-driven Dockerfile remediation.
# Scans container images, patches vulnerabilities using a local or
# cloud LLM, validates the fix in an ephemeral KinD cluster, and
# opens a human-reviewable Pull Request.
#
# Usage:
#   - uses: barbaria888/SupplyChain-Guardian-AI@v1
#     with:
#       dockerfile: './Dockerfile'
#       provider: 'ollama'
#
# Owner: @AIPatcher + @SecOps + @SRE
# ==================================================

name: 'Supply Chain Guardian AI'
description: >
  Autonomous CVE detection & AI-driven Dockerfile remediation.
  Scans container images with Trivy, patches vulnerabilities using
  local Ollama (CPU-only, zero data egress) or cloud LLMs (Gemini, OpenAI),
  validates the fix in an ephemeral KinD cluster, and opens a PR with proof.

author: 'barbaria888'

branding:
  icon: 'shield'
  color: 'purple'

# ---------------------------------------------------------------------------
# Inputs
# ---------------------------------------------------------------------------
inputs:
  dockerfile:
    description: 'Path to the Dockerfile to scan and patch'
    required: false
    default: 'Dockerfile'

  image-ref:
    description: 'Pre-built image reference to scan (overrides dockerfile build)'
    required: false
    default: ''

  severity:
    description: 'Comma-separated Trivy sev