libverify-github 0.10.0

GitHub connector for libverify SDLC verification
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

pub mod adapter;
pub mod attestation;
pub mod client;
pub mod config;
pub mod dependency;
pub mod graphql;
pub mod npm_attestation;
pub mod ossinsight;
pub mod posture;
pub mod pr_api;
pub mod pypi_attestation;
pub mod range;
pub mod release_api;
pub mod types;
pub mod verify;

pub use client::GitHubClient;
pub use config::GitHubConfig;
pub use verify::GitHubAdapter;
pub use verify::{
    // Assessment (cheap, re-runnable with different policies)
    assess_bundle,
    assess_repo_bundle,
    collect_pr_batch_evidence,
    // Evidence collection (expensive, cacheable)
    collect_pr_evidence,
    collect_release_evidence,
    collect_repo_evidence,
    // Phased release evidence collection (for progressive output)
    collect_release_attestation_evidence,
    collect_release_pr_evidence,
    collect_release_repo_evidence,
    // Utilities
    exit_if_assessment_fails,
    // Convenience wrappers (collect + assess)
    verify_pr,
    verify_pr_batch,
    verify_release,
    verify_repo,
};