CLI_AND_GITHUB_ACTION.md

CLI And GitHub Action

Purpose

The aerp scanner turns the profile into an executable repository evidence check. It reads a repository without executing project code, installing dependencies, calling providers, or inspecting secret values.

The scanner can automatically evaluate Levels 0-3. Level 4 always remains a human review because external adoption, release activity, public issue health, maintainer depth, and foundation status cannot be proved from local files alone.

Local Scan

From a clone of this repository:

node bin/aerp.mjs scan /path/to/repository

Write JSON and Markdown reports:

node bin/aerp.mjs scan /path/to/repository \
  --format both \
  --output-dir .artifacts/aerp

Use the repository directly without a global install:

npx --yes github:kmishra1204/agentic-enterprise-readiness-profile scan .

CI Gate

Levels 0-3 can be used as a bounded evidence gate:

node bin/aerp.mjs scan . --fail-level 2

Exit codes:

Code	Meaning
0	Scan completed and the requested minimum level passed.
1	CLI input, path, or scan error.
2	Scan completed but the requested minimum level was not reached.

GitHub Action

name: agentic-readiness

on:
  pull_request:
  push:
    branches: [main]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - id: readiness
        uses: kmishra1204/agentic-enterprise-readiness-profile@v0.6.0
        with:
          minimum-level: "1"
      - uses: actions/upload-artifact@v4
        with:
          name: agentic-readiness-report
          path: .artifacts/aerp

Action outputs:

• level
• score
• json-report
• markdown-report

Scope Boundary

The scanner checks the presence of bounded evidence and selected terms. It does not prove that the evidence is correct, that runtime controls work, that secrets are safe, that a repository is secure, or that a project has external adoption.

Use the generated report as a review starting point, not a certification.