@@ -45,7 +45,7 @@ permissions:
4545## Usage
4646
4747` ` ` ` yaml
48- - uses: hoverkraft-tech/ci-github-container/actions/docker/sign-images@f9e149b6cdfa8443994994f10085691a57b8cf0e # 0.27.1
48+ - uses: hoverkraft-tech/ci-github-container/actions/docker/sign-images@4f29319e02dd65152386c436e8c3136f380a0e71 # 0.28.0
4949 with:
5050 # Images to sign.
5151 # Can be a single image or a list of images separated by commas or newlines or spaces.
@@ -79,19 +79,19 @@ permissions:
7979
8080# # Inputs
8181
82- | **Input** | **Description** | **Required** | **Default** |
83- | ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | --------------------- |
84- | **`images`** | Images to sign. | **true** | - |
85- | | Can be a single image or a list of images separated by commas or newlines or spaces. | | |
86- | | The images should be in the format `registry/name:tag@digest`. | | |
87- | | It can also be a list of images in JSON format. | | |
88- | | Example : | | |
89- | | | | |
90- | | <!-- textlint-disable --><pre lang="json">[ "ghcr.io/my-org/my-repo/application:pr-63-5222075@sha256:d31aa93410434ac9dcfc9179cac2cb1fd4d7c27f11527addc40299c7c675f49d", "ghcr.io/my-org/my-repo/application:pr-63@sha256:0f5aa93410434ac9dcfc9179cac2cb1fd4d7c27f11527addc40299c7c675f402" ]</pre><!-- textlint-enable --> | | |
91- | | If the image does not have a digest, it will retrieve the digest using `docker buildx imagetools inspect`. | | |
92- | **`github-token`** | GitHub Token to sign the image. | **false** | `${ { github.token }}` |
93- | | Permissions : | | |
94- | | - `id-token` : ` write` | | |
82+ | **Input** | **Description** | **Required** | **Default** |
83+ | ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ----------------------- |
84+ | **`images`** | Images to sign. | **true** | - |
85+ | | Can be a single image or a list of images separated by commas or newlines or spaces. | | |
86+ | | The images should be in the format `registry/name:tag@digest`. | | |
87+ | | It can also be a list of images in JSON format. | | |
88+ | | Example : | | |
89+ | | | | |
90+ | | <!-- textlint-disable --><pre lang="json">[ "ghcr.io/my-org/my-repo/application:pr-63-5222075@sha256:d31aa93410434ac9dcfc9179cac2cb1fd4d7c27f11527addc40299c7c675f49d", "ghcr.io/my-org/my-repo/application:pr-63@sha256:0f5aa93410434ac9dcfc9179cac2cb1fd4d7c27f11527addc40299c7c675f402" ]</pre><!-- textlint-enable --> | | |
91+ | | If the image does not have a digest, it will retrieve the digest using `docker buildx imagetools inspect`. | | |
92+ | **`github-token`** | GitHub Token to sign the image. | **false** | `$\{\ { github.token }}` |
93+ | | Permissions : | | |
94+ | | - `id-token` : ` write` | | |
9595
9696<!-- inputs:end -->
9797
0 commit comments