actions-marketplace-validations/Mipiti Verify
Verify security controls against Mipiti threat models in CI. Runs typed assertions against your codebase and reports results.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| model-id | Mipiti threat model ID (omit if using all) | no | "" |
| all | Verify all models in the workspace | no | false |
| api-key | Mipiti API key (MIPITI_API_KEY) | yes | — |
| base-url | API base URL | no | https://api.mipiti.io |
| tier2-provider | AI provider for Tier 2 verification: openai, anthropic, or ollama | no | "" |
| tier2-model | Model name (e.g. gpt-4o, claude-sonnet-4-5-20250514) | no | "" |
| tier2-api-key | Provider API key (OpenAI or Anthropic) | no | "" |
| project-root | Project root directory | no | . |
| reverify | Re-verify all assertions, not just pending (default true) | no | true |
| dry-run | Run verifiers but don't submit results | no | false |
| concurrency | Max concurrent Tier 2 LLM calls | no | 1 |
Outputs
| name | description |
|---|---|
| content-hash | SHA-256 content hash of verified assertions (sha256:<hex>). Use with actions/attest-build-provenance for Sigstore attestation. |