Overview

The compliance-action@v1 GitHub Action runs a regulatory evaluation against a specified model and framework on every pull request. If the model fails (score below threshold), the workflow fails and the PR is blocked from merging.

Setup

Add your API key as a GitHub secret, then add the workflow file.

yaml

.github/workflows/compliance.yml

1name: Compliance Gate
2
3on:
4  pull_request:
5    paths:
6      - "models/**"
7      - "pipelines/**"
8
9jobs:
10  compliance:
11    runs-on: ubuntu-latest
12    steps:
13      - uses: actions/checkout@v4
14
15      - name: Run Compliance Evaluation
16        uses: aegissovereign/compliance-action@v1
17        with:
18          api_key: ${{ secrets.AEGISSOVEREIGN_API_KEY }}
19          workspace_id: ${{ vars.AEGISSOVEREIGN_WORKSPACE_ID }}
20          model_id: ${{ github.event.inputs.model_id || 'auto' }}
21          framework: eu_ai_act          # or dora, mas_trmg, nist_ai_rmf, etc.
22          fail_on_below: 0.70           # block PR if score < 0.70

GitOps Webhook

When a policy bundle is synced from a GitHub push event, the platform fires a gitops.bundle.synced webhook. Subscribe to this event to trigger downstream processes (Slack notifications, JIRA tickets, etc.).