Haldir Sign Action

GitHub Action to sign agent skills with Haldir. Creates a .vault/ security envelope with cryptographic signatures, integrity hashes, and permission declarations.

Usage

Keyless Signing (Sigstore)

No secrets needed. Signs with your GitHub Actions OIDC identity.

name: Sign Skill
on: [push]

permissions:
  id-token: write  # Required for Sigstore OIDC
  contents: read

jobs:
  sign:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: haldir-ai/sign-action@v1
        with:
          skill-dir: ./my-skill
          skill-name: my-skill
          skill-version: '1.0.0'

Ed25519 Key Signing

      - uses: haldir-ai/sign-action@v1
        with:
          skill-dir: ./my-skill
          mode: key
          private-key: ${{ secrets.HALDIR_PRIVATE_KEY }}
          skill-name: my-skill
          skill-version: '1.0.0'

Co-signing (Dual-Sign)

Add a second signature to an already-signed skill:

      - uses: haldir-ai/sign-action@v1
        with:
          skill-dir: ./my-skill
          cosign: 'true'
          private-key: ${{ secrets.AUTHORITY_KEY }}

Inputs

Outputs

Verification

After signing, consumers verify with:

# Keyless verification
haldir verify ./my-skill --keyless \
  --trusted-identity "https://token.actions.githubusercontent.com=https://github.com/org/repo"

# Ed25519 verification
haldir verify ./my-skill --key publisher.pub