rustonaut/Git gpg2 verify

Verify and filter/list git tags and commits.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
Runtime
Deprecated runtime
namedescriptionrequireddefault
ignoreUnknownKeysIgnore all signatures which have unknown keys. For both commits and tags. (overrides the commit/tag specific options!)
ignoreUnknownKeysForCommitsIgnore all signatures which have unknown keys. For both commits.false
ignoreUnknownKeysForTagsIgnore all signatures which have unknown keys. For both tags.false
ignoreUntrustyKeysIgnore all signatures which have untrusty keys. For both commits and tags. (overrides the commit/tag specific options!)
ignoreUntrustyKeysForCommitsIgnore all signatures which have untrusty keys. For both commits.false
ignoreUntrustyKeysForTagsIgnore all signatures which have untrusty keys. For both tags.false
requireMinTrustLevelSet the minimal required trust level of keys used for signing for both commits and tags. (overrides the commit/tag specific options)
requireMinTrustLevelForCommitsSet the minimal required trust level of keys used to sign commits.Undefined
requireMinTrustLevelForTagsSet the minimal required trust level of keys used to sign tags.Undefined
requireSignatureRequire all commits and tags to be signed with a trust signature. (overrides the commit/tag specific options)
requireSignatureForCommitsRequire all commits to be signed.false
requireSignatureForTagsRequire all tags to be signed.true
includedCommitsExplicitly include commits as JSON array of commit hashes, this can be used to pipe the output of another action.
includedTagsExplicitly include tags as JSON array of tag name, this can be used to pipe the output of another action.
excludedCommitsExplicitly exclude all commits in this JSON array of commit hashes.
excludedTagsExplicitly exclude all tags in this JSON array of tag names.
includeTagsFromGitHow tags should be included from the git repo. Values are either of None,All,ForCommits." - None will include no tags and can be used with includedTags to make another action decide on the tags. - All will include all tags (which are returned by a `git tag --list` call) - ForCommits will include all tags which are attached to an commit which is included. ForCommits
includeCommitsFromGitAfterUse this to include all commits in the current branch after the ref passed in here. Normally you could e.g. use `master` to get all commits since this branch/PR diverged from master. But due to how the checkout action works the branch name might not work and thinks like refs/remotes/origin/master might have to be used instead.
includeCommitsFromGitUpToUse this to include all commits in the current branch up to (including) the ref passed in here. Note that due to how the checkout action works this might not work as simple as you might think it does.
includePrCommitsUse all commits from the current PR. Use this option only when triggered on a PR. This option conflicts with includeCommitsFromGitAfter and includeCommitsFromGitUpTo. This options will use GITHUB_BASE_REF and GITHUB_REF to get the commits of this PR using some tricks to workaround the partial/thin checkout the checkout actions does.
filterTagsFilter all tags to only include tags matching the given regex. This is applied after all other options like includedTags or includeTagsFromGit. You can provide a regex of the form /regex/flags (e.g. roughly like JS). Alternatively you can use a predefined regex by passing in the name of the predefined regex. Currently predefined regexes includ: - "semver": A semver version number as defined by semver.org - "v_semver": Like semver but prefixed with a "v" e.g. v1.0.2
namedescription
commitsA comma separated list of all commits of which the signature(s) where validated
tagsA comma separated list of all tags of which the signature(s) where validated