jobs:
  ai-guard:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: stella-ops/cli-action@v1
        with:
          args: guard run --policy .stellaops.yml --format sarif --out guard.sarif
      - name: Upload SARIF
        uses: github/codeql-action/upload-sarif@v3
        with: { sarif_file: guard.sarif }