sampras343/model-signing conformance

Run model-signing conformance tests against a language client adapter. Reports pass/fail counts per test category and uploads a JSON artifact.

Trust Signals

name	description	required	default
entrypoint	Path to the conformance adapter binary or script. The adapter must implement the sign-model and verify-model subcommands as described in the conformance protocol (see README.md).	yes	—
skip-signing	Set to 'true' to skip sign+verify round-trip tests. Verify-only tests (pre-committed bundles) still run.	—	false
xfail	Newline- or comma-separated list of test IDs to mark as expected failures. Tests matching these IDs will be counted as 'xfailed' rather than 'failed'. Example: xfail: \| test_roundtrip[certificate-simple] test_verify[historical/historical-v0.2.0-certificate]	—	""
skip-sigstore	Set to 'true' to skip sigstore tests (for offline environments or adapters that do not implement sigstore signing/verification).	—	false
sigstore-identity	Expected certificate identity (SAN) for sigstore verification. Defaults to the sigstore-conformance GCP service account.	—	untrusted-sa@sigstore-conformance.iam.gserviceaccount.com
sigstore-issuer	Expected OIDC issuer URL for sigstore verification.	—	https://accounts.google.com
skip-result-upload	Set to 'true' to skip uploading the conformance-report.json artifact.	—	false

no outputs