ssx360/Matrix Scroll Verify
Verify a signed Matrix Scroll manifest or PR commit envelope range in CI.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| manifest | Path to signed manifest JSON file (single-manifest mode) | no | "" |
| head-ref | Head ref for commit-range verification (enables PR gate mode) | no | "" |
| base-ref | Base ref for commit-range verification | no | "" |
| source | Envelope source for range mode (local, notes, bundle) | no | notes |
| bundle-dir | Bundle directory when source=bundle | no | "" |
| notes-ref | Git notes ref for envelope transport | no | refs/notes/matrixscroll |
| fetch-notes | Fetch notes ref from origin before range verification | no | true |
| python-version | Python version for installing matrixscroll | no | 3.12 |
| matrixscroll-version | matrixscroll package version pin (recommended 0.6.0) | no | 0.6.0 |
| require-mode | Optional policy require-mode (v0.2.1+) | no | "" |
| trusted-keys | Optional path to trusted public keys JSON (v0.2.1+) | no | "" |
| summary-output | Optional path to write full range verification JSON summary | no | "" |
| verify-agent-scope | Verify linked agent_scope manifest signatures (range mode) | no | false |
Outputs
| name | description |
|---|---|
| ok | Whether verification passed |
| device_id | Signer device id from manifest (single-manifest mode) |
| mode | Provider mode from manifest signature block (single-manifest mode) |
| verified_count | Number of verified commits (range mode) |
| agent_count | Number of agent-authored verified commits (range mode) |
| human_count | Number of human-authored verified commits (range mode) |
| modes | Comma-separated signature modes seen in range mode |
| summary_path | Path to written summary JSON when summary-output is set |