29
29
- uses : actions/checkout@v3
30
30
- name : install
31
31
run : python -m pip install .
32
- - uses : sigstore/gh-action-sigstore-python@v1.2.3
32
+ - uses : sigstore/gh-action-sigstore-python@v2.0.0
33
33
with :
34
34
inputs : file.txt
35
35
` ` `
@@ -53,15 +53,15 @@ provided.
53
53
To sign one or more files :
54
54
55
55
` ` ` yaml
56
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
56
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
57
57
with:
58
58
inputs: file0.txt file1.txt file2.txt
59
59
` ` `
60
60
61
61
The `inputs` argument also supports file globbing :
62
62
63
63
` ` ` yaml
64
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
64
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
65
65
with:
66
66
inputs: ./path/to/inputs/*.txt
67
67
` ` `
@@ -74,7 +74,7 @@ The `identity-token` setting controls the OpenID Connect token provided to Fulci
74
74
workflow will use the credentials found in the GitHub Actions environment.
75
75
76
76
` ` ` yaml
77
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
77
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
78
78
with:
79
79
inputs: file.txt
80
80
identity-token: ${{ IDENTITY_TOKEN }} # assigned elsewhere
@@ -90,7 +90,7 @@ Server during OAuth2.
90
90
Example :
91
91
92
92
` ` ` yaml
93
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
93
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
94
94
with:
95
95
inputs: file.txt
96
96
oidc-client-id: alternative-sigstore-id
@@ -106,7 +106,7 @@ Connect Server during OAuth2.
106
106
Example :
107
107
108
108
` ` ` yaml
109
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
109
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
110
110
with:
111
111
inputs: file.txt
112
112
oidc-client-secret: alternative-sigstore-secret
@@ -122,7 +122,7 @@ when signing multiple input files.
122
122
Example :
123
123
124
124
` ` ` yaml
125
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
125
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
126
126
with:
127
127
inputs: file.txt
128
128
signature: custom-signature-filename.sig
@@ -131,7 +131,7 @@ Example:
131
131
However, this example is invalid :
132
132
133
133
` ` ` yaml
134
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
134
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
135
135
with:
136
136
inputs: file0.txt file1.txt file2.txt
137
137
signature: custom-signature-filename.sig
@@ -147,7 +147,7 @@ work when signing multiple input files.
147
147
Example :
148
148
149
149
` ` ` yaml
150
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
150
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
151
151
with:
152
152
inputs: file.txt
153
153
certificate: custom-certificate-filename.crt
@@ -156,7 +156,7 @@ Example:
156
156
However, this example is invalid :
157
157
158
158
` ` ` yaml
159
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
159
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
160
160
with:
161
161
inputs: file0.txt file1.txt file2.txt
162
162
certificate: custom-certificate-filename.crt
@@ -172,7 +172,7 @@ when signing multiple input files.
172
172
Example :
173
173
174
174
` ` ` yaml
175
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
175
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
176
176
with:
177
177
inputs: file.txt
178
178
bundle: custom-bundle.sigstore
@@ -181,7 +181,7 @@ Example:
181
181
However, this example is invalid :
182
182
183
183
` ` ` yaml
184
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
184
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
185
185
with:
186
186
inputs: file0.txt file1.txt file2.txt
187
187
certificate: custom-bundle.sigstore
@@ -197,7 +197,7 @@ from. This setting cannot be used in combination with the `staging` setting.
197
197
Example :
198
198
199
199
` ` ` yaml
200
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
200
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
201
201
with:
202
202
inputs: file.txt
203
203
fulcio-url: https://fulcio.sigstage.dev
@@ -213,7 +213,7 @@ cannot be used in combination with the `staging` setting.
213
213
Example :
214
214
215
215
` ` ` yaml
216
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
216
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
217
217
with:
218
218
inputs: file.txt
219
219
rekor-url: https://rekor.sigstage.dev
@@ -229,7 +229,7 @@ in combination with the `staging` setting.
229
229
Example :
230
230
231
231
` ` ` yaml
232
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
232
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
233
233
with:
234
234
inputs: file.txt
235
235
ctfe: ./path/to/ctfe.pub
@@ -245,7 +245,7 @@ be used in combination with `staging` setting.
245
245
Example :
246
246
247
247
` ` ` yaml
248
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
248
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
249
249
with:
250
250
inputs: file.txt
251
251
ctfe: ./path/to/rekor.pub
@@ -261,7 +261,7 @@ instead of the default production instances.
261
261
Example :
262
262
263
263
` ` ` yaml
264
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
264
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
265
265
with:
266
266
inputs: file.txt
267
267
staging: true
@@ -284,7 +284,7 @@ and `verify-oidc-issuer` settings. Failing to pass these will produce an error.
284
284
Example :
285
285
286
286
` ` ` yaml
287
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
287
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
288
288
with:
289
289
inputs: file.txt
290
290
verify: true
@@ -307,7 +307,7 @@ This setting may only be used in conjunction with `verify-oidc-issuer`.
307
307
Supplying it without `verify-oidc-issuer` will produce an error.
308
308
309
309
` ` ` yaml
310
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
310
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
311
311
with:
312
312
inputs: file.txt
313
313
verify: true
@@ -332,7 +332,7 @@ Supplying it without `verify-cert-identity` will produce an error.
332
332
Example :
333
333
334
334
` ` ` yaml
335
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
335
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
336
336
with:
337
337
inputs: file.txt
338
338
verify: true
@@ -354,7 +354,7 @@ workflow artifact retention period is used.
354
354
Example :
355
355
356
356
` ` ` yaml
357
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
357
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
358
358
with:
359
359
inputs: file.txt
360
360
upload-signing-artifacts: true
@@ -382,7 +382,7 @@ permissions:
382
382
383
383
# ...
384
384
385
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
385
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
386
386
with:
387
387
inputs: file.txt
388
388
release-signing-artifacts: true
@@ -409,7 +409,7 @@ permissions:
409
409
Example :
410
410
411
411
` ` ` yaml
412
- - uses: sigstore/gh-action-sigstore-python@v1.2.3
412
+ - uses: sigstore/gh-action-sigstore-python@v2.0.0
413
413
with:
414
414
inputs: file.txt
415
415
internal-be-careful-debug: true
0 commit comments