stream44/Gordian Open Integrity Validation
Gordian Open Integrity provenance and commit signatures on a repository
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mark | Published provenance mark to verify against | no | "" |
| strict-signers-all-authorized | Require all commit signers to be authorized in the Gordian envelope (default: false) | no | false |
| strict-repo-identifier-is-inception-commit | Require the repository identifier to match the inception commit (default: false) | no | false |
| skip-signature-checks | Skip all commit signature checks — unsigned / key-not-in-envelope commits will no longer fail verification (default: false) | no | false |
Outputs
no outputs