ensigniasec/Ensignia

Ensignia helps your team make better decisions about packages and dependencies.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Oct 27, 2025
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: ensigniasec/ensignia-action@ca250cd16f4fe87790fca729a15110f668b98445 # v0.0.3

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
sigctl-versionThe version of sigctl to useyeslatest

no outputs