Skip to content

Treetop Bundle Action v1.0.0

Choose a tag to compare

View all tags
@terjekv terjekv released this 16 Aug 19:56
· 2 commits to main since this release
v1.0.0
This tag was signed with the committer’s verified signature. The key has expired.
terjekv Terje Kvernes
GPG key ID: F369EBACAF3BE717
Expired
Verified
Learn about vigilant mode.
e759357
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Treetop Bundle Action v1.0.0

Validate Cedar permissions, schemas, labels, module manifests, and complete Treetop bundles directly in GitHub Actions.

Highlights

  • Checks bundles, modules, and standalone policies with GitHub annotations and job summaries.
  • Optionally builds deterministic unsigned bundle archives for later deployment jobs.
  • Downloads an exact treetop-bundle release, enforces a 128 MiB limit, and verifies the archive against SHA256SUMS before execution.
  • Supports Linux x86-64, Linux ARM64, Apple-silicon macOS, and Windows x86-64 runners.
  • Defaults to treetop-bundle 0.0.4.

Usage

- uses: treetop-policy-engine/treetop-bundle-action@v1
  with:
    manifest: treetop-bundle.toml
    deny-warnings: true

For an immutable workflow reference, pin the action to commit e7593574b96b33d6aea9b52fd5d0005afa0f4d64.

This release passed unit and metadata checks plus native and real-release-download scenarios on all four supported runner platforms.

Assets 2
Loading