operatorequals/Gitsign Verify
Uses `gitsign` to verify commit signatures of a branch
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Version of `gitsign` binary | yes | 0.3.1 |
| ref | Git ref to check against | yes | origin/master |
| email-domains | Email Domains that are allowed to sign commits (space-separated list) | no | "" |
| connector-ids | The Identity Providers that are trusted to authenticate the signers (space-separated list) | yes | https://github.com/login/oauth https://accounts.google.com https://login.microsoftonline.com |
| check-signing-date | Whether to verify that the Commit Date is in the SigningCertificate's Validity Period (Not Before <= Commit Date <= Not After) | no | false |
Outputs
no outputs