nvidia-model-promotion-gatekeeper

name	nvidia-model-promotion-gatekeeper
description	Use this skill when an operator is about to promote an NVIDIA NIM container from staging to production and needs a runtime-evidence go/no-go decision. The skill executes a fixed allowlist of cosign/crane/oras/grype commands against the candidate image, then emits a signed attestation JSON whose verdict is one of promote, block, or manual-review. Trigger when the user asks "is this NIM safe to promote", "verify this container before deploy", or hands the agent a `nvcr.io/...` image reference and a current-prod digest. Live tier counterpart to `nvidia-ngc-nim-supply-chain-governor` (which is static-review only).
allowed-tools	Read Grep Glob Bash(cosign verify --certificate-identity=* --certificate-oidc-issuer=* nvcr.io/*) Bash(cosign verify-attestation --type=spdxjson nvcr.io/*) Bash(cosign verify-attestation --type=cyclonedx nvcr.io/*) Bash(cosign download attestation nvcr.io/*) Bash(crane digest nvcr.io/*) Bash(crane manifest nvcr.io/*) Bash(crane config nvcr.io/*) Bash(oras discover --format json nvcr.io/*) Bash(oras manifest fetch nvcr.io/*) Bash(grype nvcr.io/* --output json --fail-on never) Bash(grype sha256:* --output json --fail-on never)
metadata	{"author":"github: Raishin","version":"0.1.0","updated":"2026-05-11","category":"security","lifecycle":"experimental","execution_tier":"read-only-runtime","required_egress":["nvcr.io","rekor.sigstore.dev","fulcio.sigstore.dev","tuf-repo-cdn.sigstore.dev"],"requires_credentials":["NGC_API_KEY"],"output_attestation":{"schema":"schemas/attestation.schema.json","signed_with":"cosign-blob"},"eval_fixtures":"tests/fixtures/nvidia-model-promotion-gatekeeper/"}

NVIDIA Model Promotion Gatekeeper