jamf-concepts/Crypto-Signed PR Approval
Validates hardware wallet signatures on PR approvals with optional blockchain canary
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| allowed-keys | Comma-separated list of allowed public keys (hex or checksummed addresses). If omitted, reads from keyowners-file. | no | — |
| keyowners-file | Path to KEYOWNERS file listing authorized addresses (one per line) | no | .github/KEYOWNERS |
| min-approvals | Minimum number of unique signers required (M-of-N multi-sig) | no | 1 |
| require-canary | Whether to require blockchain balance check | no | false |
| canary-chain | Blockchain to check for canary balance (ethereum, base, polygon) | no | ethereum |
| canary-rpc-url | RPC URL for blockchain queries (defaults to public RPC) | no | — |
| canary-min-balance | Minimum balance in wei required for canary check | no | 10000000000000000 |
| signature-max-age | Maximum age of signature in seconds | no | 3600 |
| github-token | GitHub token for API access | yes | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| valid | Whether enough valid crypto approvals were found |
| signer | Comma-separated addresses of valid signers |
| approval-count | Number of unique valid approvals |
| canary-balance | The canary wallet balance (if checked) |