Skip to content

GraphSmith Verify v0.3.1 — GSA attestation checks for agent PRs

Marketplace
Marketplace

Choose a tag to compare

View all tags
@pjpoulose pjpoulose released this 25 Jul 01:18
v0.3.1
5496866

GraphSmith Verify runs GraphSmith Attestation (GSA) checks on agent-authored
pull requests: a run passes graphsmith verify or it doesn't — a signed,
replayable, tamper-evident record of exactly what your agents did.

This release

  • First publish of the Verify action to the GitHub Marketplace
  • Static GSA hero added to the README

What it does

  • Enforces deterministic merge boundaries for agent PRs
  • Fail-closed integrity + profile verification in CI
  • Emits a JSON result for downstream badge/status steps
  • unavailable-is-not-failure mode by default (failed profiles still fail the build)

Security
Pin this action by full commit SHA, never a tag:

uses: SathiaAI/graphsmith@5496866128c68ac6ae424578b56ff8aff3ccf8ac

Docs: https://graphsmith.ai · License: MIT · local-first

Assets 2
Loading