grcorsair/Corsair Sign
Sign compliance evidence as a CPOE (JWT-VC) using Corsair
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| file | Path to evidence JSON file | yes | — |
| format | Force generic parsing (bypasses mapping packs) | no | — |
| key-dir | Ed25519 key directory (default: ./keys) | no | ./keys |
| did | Issuer DID (e.g., did:web:acme.com) | no | — |
| scope | Override scope string | no | — |
| output | Output file path for signed CPOE (default: cpoe.jwt) | no | cpoe.jwt |
| expiry-days | CPOE validity in days | no | 90 |
| register-scitt | Register signed CPOE in SCITT transparency log | no | false |
| notify | Emit FLAGSHIP PAPERS_CHANGED signal on sign | no | false |
| badge | Generate badge URL for the signed CPOE | no | false |
Outputs
| name | description |
|---|---|
| cpoe | Signed CPOE (JWT-VC string) |
| marque-id | CPOE identifier (marque-UUID) |
| score | Overall compliance score (0-100) |
| controls-tested | Number of controls tested |
| controls-passed | Number of controls passed |
| controls-failed | Number of controls failed |
| format-detected | Detected evidence format |
| scitt-entry-id | SCITT entry ID (when register-scitt is true) |
| badge-url | Badge SVG URL (when badge is true) |