eda10f897a
* upgrade to node24 * update .node-version to 24.x Signed-off-by: Brian DeHamer <bdehamer@github.com> * delete publish immutable action Signed-off-by: Brian DeHamer <bdehamer@github.com> * bump version from 2.4.0 to 3.0.0 Signed-off-by: Brian DeHamer <bdehamer@github.com> --------- Signed-off-by: Brian DeHamer <bdehamer@github.com> Co-authored-by: Salman Chishti <salmanmkc@GitHub.com>
78 lines
2.6 KiB
YAML
78 lines
2.6 KiB
YAML
name: 'Generate Generic Attestations'
|
|
description: 'Generate attestations for build artifacts'
|
|
author: 'GitHub'
|
|
branding:
|
|
color: 'blue'
|
|
icon: 'link'
|
|
|
|
inputs:
|
|
subject-path:
|
|
description: >
|
|
Path to the artifact serving as the subject of the attestation. Must
|
|
specify exactly one of "subject-path", "subject-digest", or
|
|
"subject-checksums". May contain a glob pattern or list of paths (total
|
|
subject count cannot exceed 1024).
|
|
required: false
|
|
subject-digest:
|
|
description: >
|
|
Digest of the subject for the attestation. Must be in the form
|
|
"algorithm:hex_digest" (e.g. "sha256:abc123..."). Must specify exactly one
|
|
of "subject-path", "subject-digest", or "subject-checksums".
|
|
required: false
|
|
subject-name:
|
|
description: >
|
|
Subject name as it should appear in the attestation. Required when
|
|
identifying the subject with the "subject-digest" input.
|
|
required: false
|
|
subject-checksums:
|
|
description: >
|
|
Path to checksums file containing digest and name of subjects for
|
|
attestation. Must specify exactly one of "subject-path", "subject-digest",
|
|
or "subject-checksums".
|
|
required: false
|
|
predicate-type:
|
|
description: >
|
|
URI identifying the type of the predicate.
|
|
required: true
|
|
predicate:
|
|
description: >
|
|
String containing the value for the attestation predicate. String length
|
|
cannot exceed 16MB. Must supply exactly one of "predicate-path" or
|
|
"predicate".
|
|
required: false
|
|
predicate-path:
|
|
description: >
|
|
Path to the file which contains the content for the attestation predicate.
|
|
File size cannot exceed 16MB. Must supply exactly one of "predicate-path"
|
|
or "predicate".
|
|
required: false
|
|
push-to-registry:
|
|
description: >
|
|
Whether to push the attestation to the image registry. Requires that the
|
|
"subject-name" parameter specify the fully-qualified image name and that
|
|
the "subject-digest" parameter be specified. Defaults to false.
|
|
default: false
|
|
required: false
|
|
show-summary:
|
|
description: >
|
|
Whether to attach a list of generated attestations to the workflow run
|
|
summary page. Defaults to true.
|
|
default: true
|
|
required: false
|
|
github-token:
|
|
description: >
|
|
The GitHub token used to make authenticated API requests.
|
|
default: ${{ github.token }}
|
|
required: false
|
|
outputs:
|
|
bundle-path:
|
|
description: 'The path to the file containing the attestation bundle.'
|
|
attestation-id:
|
|
description: 'The ID of the attestation.'
|
|
attestation-url:
|
|
description: 'The URL for the attestation summary.'
|
|
|
|
runs:
|
|
using: node24
|
|
main: ./dist/index.js
|