2929 - uses : actions/checkout@v3
3030 - name : install
3131 run : python -m pip install .
32- -
uses :
sigstore/[email protected] .1 32+ -
uses :
sigstore/[email protected] .2 3333 with :
3434 inputs : file.txt
3535` ` `
@@ -53,15 +53,15 @@ provided.
5353To sign one or more files :
5454
5555` ` ` yaml
56- - uses: sigstore/[email protected] .1 56+ - uses: sigstore/[email protected] .2 5757 with:
5858 inputs: file0.txt file1.txt file2.txt
5959` ` `
6060
6161The `inputs` argument also supports file globbing :
6262
6363` ` ` yaml
64- - uses: sigstore/[email protected] .1 64+ - uses: sigstore/[email protected] .2 6565 with:
6666 inputs: ./path/to/inputs/*.txt
6767` ` `
@@ -74,7 +74,7 @@ The `identity-token` setting controls the OpenID Connect token provided to Fulci
7474workflow will use the credentials found in the GitHub Actions environment.
7575
7676` ` ` yaml
77- - uses: sigstore/[email protected] .1 77+ - uses: sigstore/[email protected] .2 7878 with:
7979 inputs: file.txt
8080 identity-token: ${{ IDENTITY_TOKEN }} # assigned elsewhere
@@ -90,7 +90,7 @@ Server during OAuth2.
9090Example :
9191
9292` ` ` yaml
93- - uses: sigstore/[email protected] .1 93+ - uses: sigstore/[email protected] .2 9494 with:
9595 inputs: file.txt
9696 oidc-client-id: alternative-sigstore-id
@@ -106,7 +106,7 @@ Connect Server during OAuth2.
106106Example :
107107
108108` ` ` yaml
109- - uses: sigstore/[email protected] .1 109+ - uses: sigstore/[email protected] .2 110110 with:
111111 inputs: file.txt
112112 oidc-client-secret: alternative-sigstore-secret
@@ -122,7 +122,7 @@ when signing multiple input files.
122122Example :
123123
124124` ` ` yaml
125- - uses: sigstore/[email protected] .1 125+ - uses: sigstore/[email protected] .2 126126 with:
127127 inputs: file.txt
128128 signature: custom-signature-filename.sig
@@ -131,7 +131,7 @@ Example:
131131However, this example is invalid :
132132
133133` ` ` yaml
134- - uses: sigstore/[email protected] .1 134+ - uses: sigstore/[email protected] .2 135135 with:
136136 inputs: file0.txt file1.txt file2.txt
137137 signature: custom-signature-filename.sig
@@ -147,7 +147,7 @@ work when signing multiple input files.
147147Example :
148148
149149` ` ` yaml
150- - uses: sigstore/[email protected] .1 150+ - uses: sigstore/[email protected] .2 151151 with:
152152 inputs: file.txt
153153 certificate: custom-certificate-filename.crt
@@ -156,7 +156,7 @@ Example:
156156However, this example is invalid :
157157
158158` ` ` yaml
159- - uses: sigstore/[email protected] .1 159+ - uses: sigstore/[email protected] .2 160160 with:
161161 inputs: file0.txt file1.txt file2.txt
162162 certificate: custom-certificate-filename.crt
@@ -172,7 +172,7 @@ when signing multiple input files.
172172Example :
173173
174174` ` ` yaml
175- - uses: sigstore/[email protected] .1 175+ - uses: sigstore/[email protected] .2 176176 with:
177177 inputs: file.txt
178178 bundle: custom-bundle.sigstore
@@ -181,7 +181,7 @@ Example:
181181However, this example is invalid :
182182
183183` ` ` yaml
184- - uses: sigstore/[email protected] .1 184+ - uses: sigstore/[email protected] .2 185185 with:
186186 inputs: file0.txt file1.txt file2.txt
187187 certificate: custom-bundle.sigstore
@@ -197,7 +197,7 @@ from. This setting cannot be used in combination with the `staging` setting.
197197Example :
198198
199199` ` ` yaml
200- - uses: sigstore/[email protected] .1 200+ - uses: sigstore/[email protected] .2 201201 with:
202202 inputs: file.txt
203203 fulcio-url: https://fulcio.sigstage.dev
@@ -213,7 +213,7 @@ cannot be used in combination with the `staging` setting.
213213Example :
214214
215215` ` ` yaml
216- - uses: sigstore/[email protected] .1 216+ - uses: sigstore/[email protected] .2 217217 with:
218218 inputs: file.txt
219219 rekor-url: https://rekor.sigstage.dev
@@ -229,7 +229,7 @@ in combination with the `staging` setting.
229229Example :
230230
231231` ` ` yaml
232- - uses: sigstore/[email protected] .1 232+ - uses: sigstore/[email protected] .2 233233 with:
234234 inputs: file.txt
235235 ctfe: ./path/to/ctfe.pub
@@ -245,7 +245,7 @@ be used in combination with `staging` setting.
245245Example :
246246
247247` ` ` yaml
248- - uses: sigstore/[email protected] .1 248+ - uses: sigstore/[email protected] .2 249249 with:
250250 inputs: file.txt
251251 ctfe: ./path/to/rekor.pub
@@ -261,7 +261,7 @@ instead of the default production instances.
261261Example :
262262
263263` ` ` yaml
264- - uses: sigstore/[email protected] .1 264+ - uses: sigstore/[email protected] .2 265265 with:
266266 inputs: file.txt
267267 staging: true
@@ -284,7 +284,7 @@ and `verify-oidc-issuer` settings. Failing to pass these will produce an error.
284284Example :
285285
286286` ` ` yaml
287- - uses: sigstore/[email protected] .1 287+ - uses: sigstore/[email protected] .2 288288 with:
289289 inputs: file.txt
290290 verify: true
@@ -307,7 +307,7 @@ This setting may only be used in conjunction with `verify-oidc-issuer`.
307307Supplying it without `verify-oidc-issuer` will produce an error.
308308
309309` ` ` yaml
310- - uses: sigstore/[email protected] .1 310+ - uses: sigstore/[email protected] .2 311311 with:
312312 inputs: file.txt
313313 verify: true
@@ -332,7 +332,7 @@ Supplying it without `verify-cert-identity` will produce an error.
332332Example :
333333
334334` ` ` yaml
335- - uses: sigstore/[email protected] .1 335+ - uses: sigstore/[email protected] .2 336336 with:
337337 inputs: file.txt
338338 verify: true
@@ -354,7 +354,7 @@ workflow artifact retention period is used.
354354Example :
355355
356356` ` ` yaml
357- - uses: sigstore/[email protected] .1 357+ - uses: sigstore/[email protected] .2 358358 with:
359359 inputs: file.txt
360360 upload-signing-artifacts: true
@@ -382,7 +382,7 @@ permissions:
382382
383383# ...
384384
385- - uses: sigstore/[email protected] .1 385+ - uses: sigstore/[email protected] .2 386386 with:
387387 inputs: file.txt
388388 release-signing-artifacts: true
@@ -404,7 +404,7 @@ signing artifact is uploaded.
404404Example :
405405
406406` ` ` yaml
407- - uses: sigstore/[email protected] .1 407+ - uses: sigstore/[email protected] .2 408408 with:
409409 inputs: file.txt
410410 upload-signing-artifacts: true
@@ -432,7 +432,7 @@ Example:
432432 Example :
433433
434434 ` ` ` yaml
435- - uses: sigstore/[email protected] .1 435+ - uses: sigstore/[email protected] .2 436436 with:
437437 inputs: file.txt
438438 internal-be-careful-debug: true
0 commit comments