utsugi0101/BANSOU PR Gate
Validate BANSOU attestation JWTs in PRs
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| issuer | Expected JWT issuer | yes | — |
| jwks_url | JWKS URL for signature verification | yes | — |
| required_quiz_id | Required quiz_id to pass the gate | yes | — |
| attestations_dir | Directory containing attestation JWTs | no | .bansou/attestations |
| fail_on_missing | Fail if no attestation files are found | no | true |
| require_file_coverage | Require attestations for all changed files in the PR | no | false |
| require_diff_hash_match | Require at least one valid attestation with matching PR diff_hash | no | false |
| allow_ancestor_commit | Allow tokens from ancestor commits of PR head (set false to require exact head commit) | no | true |
| github_token | GitHub token used to read PR changed files (recommended: github.token) | no | — |
| gate_url | BANSOU server URL for ledger-based gate check (if set, JWT file scan is skipped) | no | — |
| gate_api_token | Bearer token for /gate/evaluate (optional if server does not require it) | no | — |
| head_sha | PR head SHA to verify against | no | — |
| pr_author | PR author to verify against | no | — |
| repo | Repository full name (owner/repo) to verify against | no | — |
Outputs
no outputs