Version updated for https://github.com/Mipiti/mipiti-verify to version v0.48.0. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary Mipiti-verify is a CI verification tool for Mipiti threat model assertions that automates security controls, ensuring they never drift. It supports both OpenAI and Anthropic AI providers to verify assertions against models, providing options for local Tier 1 verification and offline batch verification from JSON files. The tool also offers features like list, report, audit, and check commands to manage and verify Mipiti assertions effectively.

Version updated for https://github.com/Mipiti/mipiti-verify to version v0.47.3. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary Mipiti-verify automates the verification of Mipiti threat model assertions using AI models, offering local and online verification options. It supports OpenAI and Anthropic models for Tier 2 verification and provides a command-line interface for running and checking individual assertions locally. The action also includes features to list and report on pending and verified assertions, as well as audit signed reports for integrity and provenance.

Version updated for https://github.com/Mipiti/mipiti-verify to version v0.47.0. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action, mipiti-verify, automates the verification of threat model assertions for Mipiti tools. It can verify assertions against OpenAI or Anthropic models or check them locally using Tier 1 controls. It supports multiple commands including running all models, verifying a single assertion, checking assertions from a JSON file, listing pending assertions, reporting results, and auditing signed reports. The audit envelope contract ensures the integrity and authenticity of the verification results by leveraging public cryptographic chains and signatures.