2727      - uses : actions/checkout@v3 
2828      - name : install 
2929        run : python -m pip install . 
30-       - 
uses : 
sigstore/[email protected] .9  30+       - 
uses : 
sigstore/[email protected] .10  3131        with :
3232          inputs : file.txt 
3333` ` ` 
@@ -55,15 +55,15 @@ provided.
5555To sign one or more files :
5656
5757` ` ` yaml
58- - uses: sigstore/[email protected] .9  58+ - uses: sigstore/[email protected] .10  5959  with: 
6060    inputs: file0.txt file1.txt file2.txt 
6161` ` ` 
6262
6363The `inputs` argument also supports file globbing :
6464
6565` ` ` yaml
66- - uses: sigstore/[email protected] .9  66+ - uses: sigstore/[email protected] .10  6767  with: 
6868    inputs: ./path/to/inputs/*.txt 
6969` ` ` 
@@ -76,7 +76,7 @@ The `identity-token` setting controls the OpenID Connect token provided to Fulci
7676workflow will use the credentials found in the GitHub Actions environment. 
7777
7878` ` ` yaml
79- - uses: sigstore/[email protected] .9  79+ - uses: sigstore/[email protected] .10  8080  with: 
8181    inputs: file.txt 
8282    identity-token: ${{ IDENTITY_TOKEN  }} # assigned elsewhere 
@@ -92,7 +92,7 @@ Server during OAuth2.
9292Example :
9393
9494` ` ` yaml
95- - uses: sigstore/[email protected] .9  95+ - uses: sigstore/[email protected] .10  9696  with: 
9797    inputs: file.txt 
9898    oidc-client-id: alternative-sigstore-id 
@@ -108,7 +108,7 @@ Connect Server during OAuth2.
108108Example :
109109
110110` ` ` yaml
111- - uses: sigstore/[email protected] .9  111+ - uses: sigstore/[email protected] .10  112112  with: 
113113    inputs: file.txt 
114114    oidc-client-secret: alternative-sigstore-secret 
@@ -124,7 +124,7 @@ when signing multiple input files.
124124Example :
125125
126126` ` ` yaml
127- - uses: sigstore/[email protected] .9  127+ - uses: sigstore/[email protected] .10  128128  with: 
129129    inputs: file.txt 
130130    signature: custom-signature-filename.sig 
@@ -133,7 +133,7 @@ Example:
133133However, this example is invalid :
134134
135135` ` ` yaml
136- - uses: sigstore/[email protected] .9  136+ - uses: sigstore/[email protected] .10  137137  with: 
138138    inputs: file0.txt file1.txt file2.txt 
139139    signature: custom-signature-filename.sig 
@@ -149,7 +149,7 @@ work when signing multiple input files.
149149Example :
150150
151151` ` ` yaml
152- - uses: sigstore/[email protected] .9  152+ - uses: sigstore/[email protected] .10  153153  with: 
154154    inputs: file.txt 
155155    certificate: custom-certificate-filename.crt 
@@ -158,7 +158,7 @@ Example:
158158However, this example is invalid :
159159
160160` ` ` yaml
161- - uses: sigstore/[email protected] .9  161+ - uses: sigstore/[email protected] .10  162162  with: 
163163    inputs: file0.txt file1.txt file2.txt 
164164    certificate: custom-certificate-filename.crt 
@@ -174,7 +174,7 @@ from. This setting cannot be used in combination with the `staging` setting.
174174Example :
175175
176176` ` ` yaml
177- - uses: sigstore/[email protected] .9  177+ - uses: sigstore/[email protected] .10  178178  with: 
179179    inputs: file.txt 
180180    fulcio-url: https://fulcio.sigstage.dev 
@@ -190,7 +190,7 @@ cannot be used in combination with the `staging` setting.
190190Example :
191191
192192` ` ` yaml
193- - uses: sigstore/[email protected] .9  193+ - uses: sigstore/[email protected] .10  194194  with: 
195195    inputs: file.txt 
196196    rekor-url: https://rekor.sigstage.dev 
@@ -206,7 +206,7 @@ in combination with the `staging` setting.
206206Example :
207207
208208` ` ` yaml
209- - uses: sigstore/[email protected] .9  209+ - uses: sigstore/[email protected] .10  210210  with: 
211211    inputs: file.txt 
212212    ctfe: ./path/to/ctfe.pub 
@@ -222,7 +222,7 @@ be used in combination with `staging` setting.
222222Example :
223223
224224` ` ` yaml
225- - uses: sigstore/[email protected] .9  225+ - uses: sigstore/[email protected] .10  226226  with: 
227227    inputs: file.txt 
228228    ctfe: ./path/to/rekor.pub 
@@ -238,7 +238,7 @@ instead of the default production instances.
238238Example :
239239
240240` ` ` yaml
241- - uses: sigstore/[email protected] .9  241+ - uses: sigstore/[email protected] .10  242242  with: 
243243    inputs: file.txt 
244244    staging: true 
@@ -258,7 +258,7 @@ generated properly and the signature was properly submitted to Rekor.
258258Example :
259259
260260` ` ` yaml
261- - uses: sigstore/[email protected] .9  261+ - uses: sigstore/[email protected] .10  262262  with: 
263263    inputs: file.txt 
264264    verify: false 
@@ -275,7 +275,7 @@ certificate's SAN against the provided value.
275275This setting only applies if `verify` is set to `true`. 
276276
277277` ` ` yaml
278- - uses: sigstore/[email protected] .9  278+ - uses: sigstore/[email protected] .10  279279  with: 
280280    inputs: file.txt 
281281    verify-cert-email: [email protected]  @@ -294,7 +294,7 @@ This setting only applies if `verify` is set to `true`.
294294Example :
295295
296296` ` ` yaml
297- - uses: sigstore/[email protected] .9  297+ - uses: sigstore/[email protected] .10  298298  with: 
299299    inputs: file.txt 
300300    verify-oidc-issuer: https://oauth2.sigstage.dev/auth 
@@ -314,7 +314,7 @@ workflow artifact retention period is used.
314314Example :
315315
316316` ` ` yaml
317- - uses: sigstore/[email protected] .9  317+ - uses: sigstore/[email protected] .10  318318  with: 
319319    inputs: file.txt 
320320    upload-signing-artifacts: true 
@@ -339,7 +339,7 @@ permissions:
339339
340340# ... 
341341
342- - uses: sigstore/[email protected] .9  342+ - uses: sigstore/[email protected] .10  343343  with: 
344344    inputs: file.txt 
345345    release-signing-artifacts: true 
@@ -366,7 +366,7 @@ permissions:
366366  Example :
367367
368368  ` ` ` yaml
369-   - uses: sigstore/[email protected] .9  369+   - uses: sigstore/[email protected] .10  370370    with: 
371371      inputs: file.txt 
372372      internal-be-careful-debug: true 
0 commit comments