English Français العربية

Korext: AI Code Governance

السجل الرسمي أدوات المطورين

Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

الشيفرة المصدرية التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http korext-ai-code-governance 'https://app.korext.com/api/mcp' --header 'Authorization: <Bearer token from app.korext.com Settings. Format: Bearer <token>>'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "korext-ai-code-governance": {
            "type": "http",
            "url": "https://app.korext.com/api/mcp",
            "headers": {
                "Authorization": "<Bearer token from app.korext.com Settings. Format: Bearer <token>>"
            }
        }
    }
}
NPM package korext
Claude Code 
claude mcp add korext-ai-code-governance -- npx -y korext@1.0.0
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "korext-ai-code-governance": {
            "command": "npx",
            "args": [
                "-y",
                "korext@1.0.0"
            ]
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. KOREXT Enforce Action
  2. Quick Start
  3. How It Works
  4. Inputs
  5. Outputs
  6. Examples
  7. Authentication
  8. Links
  9. License

KOREXT Enforce Action

Enforce compliance policies on AI generated code in your GitHub workflows.

72 policy packs. 532 rules. 13 languages. Violations appear as GitHub Code Scanning annotations on pull requests.

Quick Start

Add this to .github/workflows/korext.yml:

name: Korext Enforcement
on: [push, pull_request]

permissions:
  contents: read
  security-events: write

jobs:
  enforce:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Korext/enforce-action@v3
        with:
          api-token: ${{ secrets.KOREXT_API_TOKEN }}

Korext scans your code on every push and PR using the default web policy pack.

How It Works

  1. Install: The action installs the Korext CLI
  2. Scan: Runs korext enforce against your codebase with the selected policy pack
  3. Report: Generates a SARIF file and uploads it to GitHub Code Scanning
  4. Gate: Fails the workflow if critical or high severity violations are found

Violations appear as annotations directly on the PR diff, powered by GitHub Code Scanning.

Inputs

InputDescriptionRequiredDefault
directoryDirectory to scan for policy violationsNo.
packPolicy Pack ID to enforceNoweb
api-tokenKorext API token for authenticated modeNo(anonymous)
fail-on-violationsFail workflow on critical/high violationsNotrue
sarif-uploadUpload SARIF to GitHub Code ScanningNotrue
regionData processing region (us, eu, apac)No(default)
sign-bundlesRequest signed proof bundlesNotrue

Outputs

OutputDescription
violationsTotal number of policy violations found
sarif-filePath to the generated SARIF results file
bundle-countNumber of proof bundles generated
bundles-signedNumber of signed proof bundles
bundle-idsComma separated list of proof bundle IDs

Examples

Multiple Policy Packs
- uses: Korext/enforce-action@v3
  with:
    pack: web,pci-dss-v1,owasp-v1
    api-token: ${{ secrets.KOREXT_API_TOKEN }}
EU Data Sovereignty
- uses: Korext/enforce-action@v3
  with:
    pack: gdpr-v1
    region: eu
    api-token: ${{ secrets.KOREXT_API_TOKEN }}
Scan Specific Directory
- uses: Korext/enforce-action@v3
  with:
    directory: src/
    pack: hipaa-v1
    api-token: ${{ secrets.KOREXT_API_TOKEN }}
Warn Only (do not fail)
- uses: Korext/enforce-action@v3
  with:
    pack: web
    fail-on-violations: 'false'

Authentication

For full access to all policy packs and signed proof bundles, create an API token in your KOREXT dashboard and add it as a GitHub secret:

  1. Go to app.korext.com > Settings > API Tokens
  2. Create a new token
  3. Add it as KOREXT_API_TOKEN in your repo's Settings > Secrets and variables > Actions

Without a token, the action runs in anonymous mode (20 requests per hour, limited packs).

License

Proprietary. See Terms of Service.

الأسئلة الشائعة

ما هو Korext: AI Code Governance؟

Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

كيف أثبّت Korext: AI Code Governance؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http korext-ai-code-governance 'https://app.korext.com/api/mcp' --header 'Authorization: <Bearer token from app.korext.com Settings. Format: Bearer <token>>'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج Korext: AI Code Governance إلى مفتاح API؟

نعم. يتطلب Authorization، وتضبطها في إعداداته.

هل Korext: AI Code Governance مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص Apache-2.0.

من يصون Korext: AI Code Governance؟

ينشره Korext. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.