conforma/EC Validate
GitHub Action developed by Conforma (formerly Enterprise Contract), designed to assess container images for security & compliance.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 7, 2026
- License
- Apache 2.0
Pinned Snippet
uses: conforma/action-validate-image@a869c81f348673ed192839be2dcf357ec9b06e74 # v1.0.421tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| image | The image reference | yes | — |
| key | The public key for verifying signatures | no | — |
| policy | A policy configuration file which determines what policies are to be applied | no | — |
| identity | A regexp string used to match the certificate identity associated with the image | no | — |
| issuer | The OIDC issuer for validation | no | — |
| extra-params | This is to add some extra arguments into ec. | no | — |
Outputs
no outputs