codad5/Verify Branch Ancestry
Enforce staging-first deployments by verifying commit ancestry and minimum soak time before production.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| required-branches | Comma-separated list of branch names that must contain the commit (e.g., "staging,dev") | yes | staging |
| current-branch | Current branch being checked (auto-detected if not provided) | no | "" |
| fail-on-missing | Whether to fail the workflow if commit is not found in required branches | no | true |
| check-merge-commits | Whether to validate merge commits by checking their parents | no | true |
| minimum-age | Minimum time the commit must exist in required branches (e.g., "1h", "30m", "2d") | no | 0m |
| timezone | Timezone for time calculations (e.g., "UTC", "America/New_York") | no | UTC |
| verbose | Enable detailed logging for debugging | no | false |
| github-token | GitHub token for API access (usually secrets.GITHUB_TOKEN) | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| verified | Whether the commit verification passed (true/false) |
| commit-sha | The commit SHA that was verified |
| source-branch | The branch from which the commit originated |
| merge-commit | Whether the current commit is a merge commit (true/false) |
| commit-age | Age of the commit in the source branch (human readable, e.g., "2 hours ago") |
| minimum-age-met | Whether the minimum age requirement was met (true/false) |