Discovery and routing · Free listing
GitHub App
Repository-level discovery and PR check annotations that route maintainers to TrustOps for setup and to Resolver for current proof.
What the app does
- Detects repository-level ecz-agent.json or equivalent manifest references
- Annotates pull requests with discovery findings
- Offers a manifest scaffold pull request when no manifest is present
- Links to Resolver for current proof of any referenced credentials
- Routes setup actions to TrustOps
What the app does not do
- It does not write truth or issue credentials
- It does not replace Resolver
- It does not act as a marketplace checkout surface
- It does not assert that the repository is approved by GitHub or any other platform
Permissions
Minimum permissions required to read repository metadata and post check annotations on pull requests. No source code is uploaded off-platform beyond what GitHub already exposes to installed apps.
Listing posture
- Free listing only
- No paid GitHub plans
- No partnership or approval claim with GitHub
- Honest description of what the app can and cannot prove
ECZ-ID separates setup, verification state, and public proof. Developer Gateway documents setup paths and verifier guidance. TrustOps handles setup. Resolver remains the public proof surface. Re-check before reliance. Local policy decides.