Skip to content

Releases: TrustSignal-dev/TrustSignal-Verify-Artifact

TrustSignal Verify Artifact v0.2.0

24 Mar 01:44
6080717

Choose a tag to compare

v0.2.0 adds live workflow validation, published-action demos, receipt verification fixes, and dist integrity checks.

TrustSignal Verify Artifact v0.1.0

13 Mar 09:27
7574042

Choose a tag to compare

Verify build artifacts and issue signed TrustSignal verification receipts.

Initial public release of the TrustSignal artifact verification GitHub Action.

This action verifies build artifacts using the TrustSignal API and issues a signed verification receipt.

Features:
• SHA-256 artifact verification
• Signed verification receipts
• GitHub workflow metadata capture
• Later integrity verification support

Inputs:

  • api_base_url
  • api_key
  • artifact_path or artifact_hash
  • source
  • fail_on_mismatch

Outputs:

  • verification_id
  • status
  • receipt_id
  • receipt_signature