mipiti/Mipiti Verify
Verify security controls against Mipiti threat models in CI. Runs typed assertions against your codebase and reports results.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| model-id | Mipiti threat model ID (omit if using all) | no | "" |
| all | Verify all models in the workspace | no | false |
| api-key | Mipiti API key (MIPITI_API_KEY) | yes | — |
| base-url | API base URL | no | https://api.mipiti.io |
| tier2-provider | AI provider for Tier 2 verification: openai, anthropic, or ollama | no | "" |
| tier2-model | Model name (e.g. gpt-4o, claude-sonnet-4-5-20250514) | no | "" |
| tier2-api-key | Provider API key (OpenAI or Anthropic) | no | "" |
| project-root | Project root directory | no | . |
| reverify | Re-verify all assertions, not just pending (default true) | no | true |
| dry-run | Run verifiers but don't submit results | no | false |
| concurrency | Max concurrent Tier 2 LLM calls | no | 1 |
| sigstore-tuf-url | Custom Sigstore TUF root URL for private deployments (default public sigstore.dev) | no | "" |
| sigstore-trust-config | Path to a pre-downloaded Sigstore ClientTrustConfig JSON (out-of-band snapshot, skips all TUF network fetches) | no | "" |
| workspace-signing-key | Path to a PEM ECDSA P-256 private key for workspace-attested submission. Used when no OIDC token is available (e.g. self-hosted runners without id-token: write), or when signing-prefer=workspace. The matching public key must be registered on the Mipiti workspace. | no | "" |
| signing-prefer | When both an OIDC token and a workspace key are available, prefer this signer ('sigstore' or 'workspace'). Default: sigstore. | no | sigstore |
| require-attestation | Fail the run when no attestation is produced (Sigstore or workspace-ECDSA). Default behaviour is to log a warning and submit unsigned when both signers are unavailable; with this flag, the runner exits non-zero. Set to 'true' for security-sensitive CI gates. | no | false |
Outputs
| name | description |
|---|---|
| content-hash | SHA-256 content hash of verified assertions (sha256:<hex>). Use with actions/attest-build-provenance for Sigstore attestation. |