Open SourceApache-2.0 License

badgr-agent

Shared runtime behind Badgr Pipeline Check — diagnoses failed builds, checks pipeline health, flags security risks, and audits config across GitHub Actions, Azure Pipelines, GitLab CI, Jenkins, and Kubernetes.

How it works

badgr-agent plugs into your CI provider, runs four local rule-based engines on every build, and only escalates to AI when a failure is ambiguous.

1

Collect & redact

Fetches job logs and pipeline metadata, then strips secrets and tokens before any analysis happens.

2

Score locally

Runs four local rule-based engines — failure, health, security, audit — free, with no API key required.

3

Escalate only when ambiguous

If the failure score is low-confidence and BADGR_API_KEY (or BADGR_LLM_PROVIDER=bedrock) is configured, AI refines the fix; otherwise results publish as-is.

1

Install

Terminal
npm install badgr-agent

Requires Node.js 20.10+. Free to run as Pipeline Check — no API key required.

2

Usage

Add one step to your GitHub Actions workflow — no credentials required by default:

GitHub Actions (.yml)
- name: Badgr Pipeline Check
  uses: michaelmanly/badgr-ci@v1
  if: always()

Example output

Pipeline Check report
### Badgr Pipeline Check

**Failure:** Missing dependency `vite`
**Evidence:** Cannot find module 'vite'
**Suggested fix:** npm install --save-dev vite
**Confidence:** high

**Health:** Install step took 4m 12s — consider caching node_modules
**Security:** No issues found
**Audit:** No timeout set on test step

Commands

badgr-agent pipeline-checkRun Pipeline Check locally, in GitLab CI, or in Jenkins — collects logs, redacts secrets, scores failure/health/security/audit, and escalates to AI only when ambiguous.

What's included

Local rule-based engines for failure, health, security, and audit checks — no API key needed
AI escalation only for ambiguous, low-confidence failures, gated by an optional BADGR_API_KEY
One shared runtime across GitHub Actions, Azure Pipelines, GitLab CI, Jenkins, and Kubernetes
Amazon Bedrock direct-LLM mode (BADGR_LLM_PROVIDER=bedrock) for teams that don't want logs sent to aibadgr.com
Client-side log redaction removes secrets and tokens before any analysis
Summary, console, and PR/MR-comment output modes
Badgr Agent Infra Docker image for detect-only container/service monitoring with allowlisted auto-fix
Per-org, per-project, per-runtime on/off toggle in the Badgr dashboard
View on GitHub →

Ready to try badgr-agent?

npm install badgr-agent — no account needed to get started.