taproot/action.yml at main · Epoch-AI-Lab/taproot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
name: "Taproot Baseline Check"
description: "Verify .taproot/state.json integrity and check drift against baseline — strict by default"
branding:
  icon: "layers"
  color: "gray-dark"

inputs:
  state-path:
    description: "Path to current state file (PR head)"
    default: ".taproot/state.json"
    required: false
  baseline-ref:
    description: "Git ref to fetch baseline from (default: github.base_ref or main)"
    default: ""
    required: false
  baseline-path:
    description: "Path to state file in baseline branch (default: same as state-path)"
    default: ""
    required: false
  fail-on-drift:
    description: "Exit 1 if drift detected (breaking or strict warnings)"
    default: "true"
    required: false
  working-directory:
    description: "Working directory to run in"
    default: "."
    required: false
  registry-url:
    description: "Remote registry URL (e.g. https://registry.taproot.dev). If set, baseline is fetched via API first, fallback to git."
    default: ""
    required: false
  registry-token:
    description: "Bearer token for remote registry"
    default: ""
    required: false
  registry-path:
    description: "Local registry path (default: .taproot/registry)"
    default: ".taproot/registry"
    required: false

outputs:
  hash:
    description: "sha256 hash of head state"
    value: ${{ steps.check.outputs.hash }}
  baseline-hash:
    description: "sha256 hash of baseline state, empty if no baseline"
    value: ${{ steps.check.outputs.baseline-hash }}
  drift:
    description: "'true' if drift detected, 'false' otherwise"
    value: ${{ steps.check.outputs.drift }}
  verified:
    description: "'true' if head state passed hash+signature check"
    value: ${{ steps.check.outputs.verified }}
  baseline-exists:
    description: "'true' if baseline state was found"
    value: ${{ steps.check.outputs.baseline-exists }}

runs:
  using: "composite"
  steps:
    - id: check
      shell: bash
      env:
        INPUT_STATE_PATH: ${{ inputs.state-path }}
        INPUT_BASELINE_REF: ${{ inputs.baseline-ref }}
        INPUT_BASELINE_PATH: ${{ inputs.baseline-path }}
        INPUT_FAIL_ON_DRIFT: ${{ inputs.fail-on-drift }}
        INPUT_WORKING_DIRECTORY: ${{ inputs.working-directory }}
        INPUT_REGISTRY_URL: ${{ inputs.registry-url }}
        INPUT_REGISTRY_TOKEN: ${{ inputs.registry-token }}
        INPUT_REGISTRY_PATH: ${{ inputs.registry-path }}
      run: ${{ github.action_path }}/scripts/run.sh