Add the gate in two minutes.

Add the workflow

Create .github/workflows/slop-gate.yml. Keep the job name slop — it is the check you will require.

# .github/workflows/slop-gate.yml
name: slop-gate
on: { pull_request: {} }
jobs:
  slop:                        # keep the job name: it is the check you require
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write          # required — OIDC proves the repo, no secret
      pull-requests: write     # optional — inline findings on the PR
      security-events: write   # optional — Security tab (Code Scanning)
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }
      - uses: maxor-tech/slopgrade-firewall@ad16c325dfe136c2f66107da87655b3b330e8575  # v0.9.2

Open a pull request

The slop check runs on the PR. Findings appear inline on their line, in the run summary and — with security-events: write — in the Security tab.

Require the check

Make slop a required status check on main (GitHub branch protection, or « Protect main » in the app). A blocking finding now stops the merge.