{"id":18436072,"url":"https://github.com/codenotary/notarize-and-verify-pr-action","last_synced_at":"2025-04-07T20:32:34.534Z","repository":{"id":48481070,"uuid":"367356060","full_name":"codenotary/notarize-and-verify-pr-action","owner":"codenotary","description":"GitHub action which uses VCN to notarize the latest commit in the PR for each approver and then verify it was notarized for each required approver","archived":false,"fork":false,"pushed_at":"2021-07-23T14:32:53.000Z","size":51,"stargazers_count":6,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"main","last_synced_at":"2024-03-15T11:51:34.598Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codenotary.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-05-14T12:29:59.000Z","updated_at":"2023-01-13T13:21:36.000Z","dependencies_parsed_at":"2023-01-11T17:23:06.222Z","dependency_job_id":null,"html_url":"https://github.com/codenotary/notarize-and-verify-pr-action","commit_stats":{"total_commits":17,"total_committers":2,"mean_commits":8.5,"dds":0.05882352941176472,"last_synced_commit":"10a1428d990929f14d6f7cf39282542ad8e8abe7"},"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codenotary%2Fnotarize-and-verify-pr-action","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codenotary%2Fnotarize-and-verify-pr-action/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codenotary%2Fnotarize-and-verify-pr-action/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codenotary%2Fnotarize-and-verify-pr-action/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codenotary","download_url":"https://codeload.github.com/codenotary/notarize-and-verify-pr-action/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223291629,"owners_count":17120965,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-06T06:10:13.971Z","updated_at":"2024-11-06T06:10:14.680Z","avatar_url":"https://github.com/codenotary.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# GitHub action for notarizing and verifying pull requests using VCN\n\nThis official GitHub action from CodeNotary allows to notarize the latest commit on a Pull Request for each approver, and then verify it was notarized by a configurable list of signer IDs.\n\n## Usage\n\n:bulb: See [./.github/workflows/test.yml](.github/workflows/test.yml) for a full example and the complete list of supported inputs.\n\nIn summary, checkout the repo at the latest PR commit and then create a step using this action and pass it the following parameters:\n\n- Immutable Ledger host\n- Keep ${{ github.event.review.user.login }} so that the PR is notarized by the current user on approval\n- Comma separated list of API keys which will be used during notarization and verification.\nThese also determine the required approvers: they will be the signer IDs (i.e. names) of the API keys.\n  - :warning: the signer IDs must match GitHub usernames - either as `\u003cgithub-username\u003e@github` either simply `\u003cgithub-username\u003e`. Example value: `ghuser1@github.xxx...,ghuser2.yyy...`\n  - :warning: if this input is specified, the following inputs will be ignored\n\n```yaml\n    steps:\n      - name: Checkout repository\n        uses: actions/checkout@v2\n        with:\n          ref: ${{ github.event.review.commit_id }}\n\n      - name: Notarize and verify PR\n        uses: codenotary/notarize-and-verify-pr-action@v2.0.0\n        with:\n          cnil_host: your-immutable-ledger-host\n          current_pr_approver: ${{ github.event.review.user.login }}\n          cnil_api_keys: ghuser1@github.UnCbnnjZjruUTVsconoGicRmYeVcwxdhwPke,ghuser2@github.GGkYcktPZGYJSFtMUvuKvmeosDGKPIeSVJIB\n```\n\nOnce a PR is ready for review, each approval will create a notarization. The action will succeed once all listed Signer IDs have notarized.\n\n## How to build and publish the Docker image\n\nIf you want to produce an artifact for the action from the code, you can build the action yourself and publish it to your own registry:\n\n`docker build -t \u003cdocker-hub-username\u003e/notarize-and-verify-pr .`\n\n`docker push \u003cdocker-hub-username\u003e/notarize-and-verify-pr`\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcodenotary%2Fnotarize-and-verify-pr-action","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcodenotary%2Fnotarize-and-verify-pr-action","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcodenotary%2Fnotarize-and-verify-pr-action/lists"}