yugantm/HVTrust Gate
Fail CI when an AI agent, framework, or MCP server your project depends on falls below your trust threshold on HVTracker (hvtracker.net) — independent, evidence-based supply-chain trust scores.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| targets | Dependencies to check, comma- or newline-separated. Each entry may be a GitHub owner/repo, repo URL, npm or PyPI package name, HVTracker slug, or display name (same resolution as hvtracker.net/verify). | yes | — |
| min-grade | Minimum acceptable trust grade: A, B, C, or D (default C). | no | C |
| fail-on-untracked | Treat targets that are not in the HVTracker registry as failures (default false: untracked targets only warn). | no | false |
| warn-only | Never fail the job; report findings only (default false). | no | false |
Outputs
| name | description |
|---|---|
| failures | Number of targets below the threshold (or untracked when fail-on-untracked). |
| report | One-line-per-target result summary. |