AI coding agents read specs and start building — but nothing in the CI pipeline validates that those specs are compliant, complete, or that requirements survive the iteration process.

nod is a lightweight GitHub Action that scans project documentation against community-maintained compliance rule sets. It catches missing controls, regulatory anti-patterns, and requirement drift before or during agentic development. It also includes an Agentic Action Security pack for validating agent guardrails and scanning for behavioral red flags.

Two files in your .github/ directory, run it in strict or permissive mode with findings logged as security scan results in GitHub.

https://github.com/marketplace/actions/nod-ai-compliance-gat...