trustility/Trustility Repo-Safe Proof
Emit a Trustility proof for a CI action. Sends only a canonical hash of abstracted metadata — never your source, diffs, or secrets.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-url | Base URL of the Trustility proof rail (for example https://api.trustility.io). | yes | — |
| policy-ref | Policy reference the action is proving against (for example pol:baseline@1). | yes | — |
| proof-type | Proof type: Integrity, Reliability, or Oversight. | no | Integrity |
| agent-id | Optional stable identifier for the emitting workflow or agent. | no | "" |
| agent-key | Optional Ed25519 private key as a JWK JSON string (store it as a repository secret). When set, the proof is signed and the matching public key is attached so anyone can verify it. | no | "" |
| event-data | Optional JSON object of extra abstracted metadata to include. Must not contain raw sensitive fields (amount, recipient, email, content, message, subject, body). | no | {} |
| fail-on-error | Fail the step when the proof is not accepted (default true). | no | true |
Outputs
| name | description |
|---|---|
| proof-id | The emitted proof identifier. |
| vc | The VC-JWT credential returned by the proof rail. |
| event-hash | The canonical hash (sha256:...) that was proven. |
| status | emitted or failed. |