startvest-llc/integrity.md Check

Validate an integrity.md against the TIF (The Integrity Framework) base manifest and per-product audit rules.

Trust Signals

name	description	required	default
path	Path to the repo root containing integrity.md (and optional audits/rules/*.json).	no	.
cli-version	CLI version to install (matches a git tag on Startvest-LLC/startvest-integrity-cli, without the "v" prefix). Pin to a specific version in CI. Requires v1.4.0+ for the CLI-side tier field.	no	1.4.0
strict	Fail on HIGH findings (not just CRITICAL). CLI default fails on CRITICAL only.	no	false
node-version	Node version to install. CLI requires >= 20.	no	20
badge-output	Optional path (relative to the repo root) to write a shields.io endpoint JSON to. Leave empty to skip badge generation.	no	""
badge-label	Text shown on the left side of the badge.	no	integrity.md

name	description
exit-code	Raw exit code from the CLI. 0=pass, 1=CRITICAL, 2=HIGH (strict only), 3=usage error.
critical-count	Number of CRITICAL findings.
high-count	Number of HIGH findings.
medium-count	Number of MEDIUM findings.
low-count	Number of LOW findings.
base-version	Version of the TIF base manifest the CLI ran against.
results-path	Filesystem path to the full JSON results file (uploadable as an artifact).
tier	Tier reported by the CLI: "silver" (no CRITICAL, no HIGH), "bronze" (no CRITICAL, ≥1 HIGH), or "fail" (≥1 CRITICAL). Forward-compatible with future CLI tier strings.
badge-json	Raw shields.io endpoint JSON string. Always emitted, even when badge-output is unset.
badge-path	Filesystem path the badge JSON was written to inside the workspace (empty if badge-output was unset).