jonogitty/Patchwork Audit
Verify and attest your AI coding agent audit trail. Gate deployments on audit completeness, hash chain integrity, and policy compliance.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 12, 2026
- License
- None
Pinned Snippet
uses: jonogitty/patchwork-audit@43306117ba5f5ffdfd8d583e816bbf3a10046ea7 # v0.6.11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| profile | Enforcement profile: strict (all checks) or baseline (audit-only) | no | strict |
| events-file | Path to audit events JSONL file | no | "" |
| seals-file | Path to seals JSONL file | no | "" |
| witnesses-file | Path to witness records JSONL file | no | "" |
| attestation-output | Path to write the attestation artifact | no | audit-attestation.json |
| node-version | Node.js version to use | no | 22 |
| patchwork-version | patchwork-audit npm package version | no | latest |
| fail-on-error | Fail the workflow step if verification fails | no | true |
| upload-attestation | Upload attestation artifact to GitHub | no | true |
| verify-flags | Additional flags for patchwork verify | no | "" |
| attest-flags | Additional flags for patchwork attest | no | "" |
Outputs
| name | description |
|---|---|
| pass | Whether verification passed (true/false) |
| total-events | Total number of audit events |
| chained-events | Number of hash-chained events |
| attestation-path | Path to the generated attestation artifact |
| verify-json | Full verification result as JSON |