eidetic-research/Palsy Gate

Self-hosted dependency admission gate for Python, npm, OCI, and generic artefacts.

Trust Signals

name	description	required	default
lockfiles	Newline-separated lockfiles to assess. Defaults to requirements*.txt and package-lock.json auto-discovery.	no	""
policy	Palsy policy file.	no	.palsy/policy.yaml
mode	observe or enforce. Enforce fails the job unless every assessed lockfile is admitted.	no	enforce
environment	dev, ci, or prod.	no	ci
project	Project name recorded in build permits. Defaults to the repository name.	no	""
state-dir	Local Palsy state directory used by the action.	no	.palsy/state
permit-out	Directory or file path for signed build permits.	no	.palsy/permits
report-dir	Directory for admission.json, dependency-passport.html, and summary.md.	no	.palsy
licence	Optional Palsy licence file to validate before dependency admission.	no	""
json-out	Optional path for the raw admission response JSON.	no	""

no outputs