actions-marketplace-validations/Gitsign Verify
Uses `gitsign` to verify commit signatures of a branch
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Oct 18, 2022
- License
- None
Pinned Snippet
uses: actions-marketplace-validations/operatorequals_gitsign-action@66f54db836597640dbb6947cd2554972ea6477cb # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Version of `gitsign` binary | yes | 0.3.1 |
| ref | Git ref to check against | yes | origin/master |
| email-domains | Email Domains that are allowed to sign commits (space-separated list) | no | "" |
| connector-ids | The Identity Providers that are trusted to authenticate the signers (space-separated list) | yes | https://github.com/login/oauth https://accounts.google.com https://login.microsoftonline.com |
| check-signing-date | Whether to verify that the Commit Date is in the SigningCertificate's Validity Period (Not Before <= Commit Date <= Not After) | no | false |
Outputs
no outputs