Releases: TrustSignal-dev/TrustSignal-Verify-Artifact
Releases · TrustSignal-dev/TrustSignal-Verify-Artifact
TrustSignal Verify Artifact v0.2.0
v0.2.0 adds live workflow validation, published-action demos, receipt verification fixes, and dist integrity checks.
TrustSignal Verify Artifact v0.1.0
Verify build artifacts and issue signed TrustSignal verification receipts.
Initial public release of the TrustSignal artifact verification GitHub Action.
This action verifies build artifacts using the TrustSignal API and issues a signed verification receipt.
Features:
• SHA-256 artifact verification
• Signed verification receipts
• GitHub workflow metadata capture
• Later integrity verification support
Inputs:
- api_base_url
- api_key
- artifact_path or artifact_hash
- source
- fail_on_mismatch
Outputs:
- verification_id
- status
- receipt_id
- receipt_signature