cashapp/Check Signature
Checks digital signatures attached to Git SHAs, and verifies their authenticity
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Jun 21, 2023
- License
- None
Pinned Snippet
uses: cashapp/check-signature-action@4a792302844562be691e29acc1a4d129503dec39 # v0.2.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| allowed-release-signers | Comma separated list of GitHub usernames allowed to create new releases for this project | yes | — |
Outputs
| name | description |
|---|---|
| signed_by | The GitHub username whose key was used to verify the signature |