Keys

The evaluation needs no key at all. A key is the paid organisation licence — and none are being issued yet, because there is no checkout.

Evaluating? You need nothing from this page

Inside GitHub Actions, Presift starts the 30-day evaluation by itself when the job has permissions: id-token: write. The entitlement is short-lived, renewed automatically on every run, and never shown to you — there is nothing to store, rotate or lose. How the evaluation works.

Where a paid key goes

An organisation key is a signed string. Store it as a repository or organisation secret and pass it to the Action, or set it in the environment for command-line use:

      - uses: nishu-sde/presift@v1
        with:
          paths: db/migrations
          license: ${{ secrets.PRESIFT_LICENSE }}

A supplied key always takes precedence over the evaluation, and it is the only way to run Presift outside GitHub Actions. Inside Actions the organisation in the key must match the repository owner.

Nothing to retrieve yet

No licences have been sold, so there are no keys to look up. When licences are offered, the key will be delivered by the checkout and retrievable afterwards; that page does not exist yet, and this one has no form, no order lookup and no account.

Messages you may see

Message	Meaning
Presift needs an organisation key … or `permissions: id-token: write`	running outside GitHub Actions without a key, or in Actions without the permission
this job may not request an OIDC token	add `id-token: write` to the job's `permissions:`
`PRESIFT_LICENSE` is not a valid key	the secret is malformed — usually truncated or wrapped when pasted
the 30-day evaluation for '…' ended on …	that owner's evaluation is over; see pricing
the organisation licence has expired (grace period over)	a paid licence lapsed more than 30 days ago

Each refusal prints a stable code; the full list is the client's error reference. Keys are verified on your runner against a public key compiled into the client, so a key never depends on a server being reachable at check time.