Module verify

Structs§

assess_bundle: Assess an evidence bundle against all built-in controls using the given policy.
assess_repo_bundle: Assess an evidence bundle using repo-scoped controls (dependencies + posture).
collect_pr_batch_evidence: Collect evidence for a batch of PRs.
collect_pr_evidence: Collect evidence for a single pull request without evaluating any policy.
collect_release_attestation_evidence: Phase 3: Check release asset attestations via the GitHub API and merge into the bundle.
collect_release_evidence: Collect all evidence for a release (backward-compatible convenience wrapper).
collect_release_pr_evidence: Phase 1: Collect PR and commit evidence for a release range.
collect_release_repo_evidence: Phase 2: Collect repository security posture and merge into the bundle.
collect_repo_evidence: Collect evidence for repository-level posture and dependencies at a given ref.
exit_if_assessment_fails
verify_pr: Verify a single pull request and return a verification result.
verify_pr_batch: Verify a batch of PRs and aggregate results.
verify_release: Verify a release (tag range) and return a verification result.
verify_repo: Verify repository-level dependency signatures at a given ref.