4,077
+340
// summary
Vouch is a community trust management system that allows projects to explicitly verify or block contributors through a configurable trust model. It utilizes a simple, flat-file format to maintain lists of vouched or denounced users, which can be shared across projects to form a web of trust. The system provides native GitHub integration via Actions and a CLI tool to automate contributor management and policy enforcement.
// use cases
01
Automated validation of issue and pull request authors to prevent low-quality contributions.
02
Collaborative management of contributor status directly through issue and discussion comments.
03
Creation of a cross-project web of trust by sharing and reading trust lists between different communities.