29
29
- uses : actions/checkout@v3
30
30
- name : install
31
31
run : python -m pip install .
32
- -
uses :
sigstore/[email protected] .0
32
+ -
uses :
sigstore/[email protected] .1
33
33
with :
34
34
inputs : file.txt
35
35
` ` `
@@ -53,15 +53,15 @@ provided.
53
53
To sign one or more files :
54
54
55
55
` ` ` yaml
56
- - uses: sigstore/[email protected] .0
56
+ - uses: sigstore/[email protected] .1
57
57
with:
58
58
inputs: file0.txt file1.txt file2.txt
59
59
` ` `
60
60
61
61
The `inputs` argument also supports file globbing :
62
62
63
63
` ` ` yaml
64
- - uses: sigstore/[email protected] .0
64
+ - uses: sigstore/[email protected] .1
65
65
with:
66
66
inputs: ./path/to/inputs/*.txt
67
67
` ` `
@@ -78,7 +78,7 @@ The `identity-token` setting controls the OpenID Connect token provided to Fulci
78
78
workflow will use the credentials found in the GitHub Actions environment.
79
79
80
80
` ` ` yaml
81
- - uses: sigstore/[email protected] .0
81
+ - uses: sigstore/[email protected] .1
82
82
with:
83
83
inputs: file.txt
84
84
identity-token: ${{ IDENTITY_TOKEN }} # assigned elsewhere
@@ -94,7 +94,7 @@ Server during OAuth2.
94
94
Example :
95
95
96
96
` ` ` yaml
97
- - uses: sigstore/[email protected] .0
97
+ - uses: sigstore/[email protected] .1
98
98
with:
99
99
inputs: file.txt
100
100
oidc-client-id: alternative-sigstore-id
@@ -110,7 +110,7 @@ Connect Server during OAuth2.
110
110
Example :
111
111
112
112
` ` ` yaml
113
- - uses: sigstore/[email protected] .0
113
+ - uses: sigstore/[email protected] .1
114
114
with:
115
115
inputs: file.txt
116
116
oidc-client-secret: alternative-sigstore-secret
@@ -126,7 +126,7 @@ when signing multiple input files.
126
126
Example :
127
127
128
128
` ` ` yaml
129
- - uses: sigstore/[email protected] .0
129
+ - uses: sigstore/[email protected] .1
130
130
with:
131
131
inputs: file.txt
132
132
signature: custom-signature-filename.sig
@@ -135,7 +135,7 @@ Example:
135
135
However, this example is invalid :
136
136
137
137
` ` ` yaml
138
- - uses: sigstore/[email protected] .0
138
+ - uses: sigstore/[email protected] .1
139
139
with:
140
140
inputs: file0.txt file1.txt file2.txt
141
141
signature: custom-signature-filename.sig
@@ -151,7 +151,7 @@ work when signing multiple input files.
151
151
Example :
152
152
153
153
` ` ` yaml
154
- - uses: sigstore/[email protected] .0
154
+ - uses: sigstore/[email protected] .1
155
155
with:
156
156
inputs: file.txt
157
157
certificate: custom-certificate-filename.crt
@@ -160,7 +160,7 @@ Example:
160
160
However, this example is invalid :
161
161
162
162
` ` ` yaml
163
- - uses: sigstore/[email protected] .0
163
+ - uses: sigstore/[email protected] .1
164
164
with:
165
165
inputs: file0.txt file1.txt file2.txt
166
166
certificate: custom-certificate-filename.crt
@@ -176,7 +176,7 @@ when signing multiple input files.
176
176
Example :
177
177
178
178
` ` ` yaml
179
- - uses: sigstore/[email protected] .0
179
+ - uses: sigstore/[email protected] .1
180
180
with:
181
181
inputs: file.txt
182
182
bundle: custom-bundle.sigstore
@@ -185,7 +185,7 @@ Example:
185
185
However, this example is invalid :
186
186
187
187
` ` ` yaml
188
- - uses: sigstore/[email protected] .0
188
+ - uses: sigstore/[email protected] .1
189
189
with:
190
190
inputs: file0.txt file1.txt file2.txt
191
191
certificate: custom-bundle.sigstore
@@ -201,7 +201,7 @@ from. This setting cannot be used in combination with the `staging` setting.
201
201
Example :
202
202
203
203
` ` ` yaml
204
- - uses: sigstore/[email protected] .0
204
+ - uses: sigstore/[email protected] .1
205
205
with:
206
206
inputs: file.txt
207
207
fulcio-url: https://fulcio.sigstage.dev
@@ -217,7 +217,7 @@ cannot be used in combination with the `staging` setting.
217
217
Example :
218
218
219
219
` ` ` yaml
220
- - uses: sigstore/[email protected] .0
220
+ - uses: sigstore/[email protected] .1
221
221
with:
222
222
inputs: file.txt
223
223
rekor-url: https://rekor.sigstage.dev
@@ -233,7 +233,7 @@ in combination with the `staging` setting.
233
233
Example :
234
234
235
235
` ` ` yaml
236
- - uses: sigstore/[email protected] .0
236
+ - uses: sigstore/[email protected] .1
237
237
with:
238
238
inputs: file.txt
239
239
ctfe: ./path/to/ctfe.pub
@@ -249,7 +249,7 @@ be used in combination with `staging` setting.
249
249
Example :
250
250
251
251
` ` ` yaml
252
- - uses: sigstore/[email protected] .0
252
+ - uses: sigstore/[email protected] .1
253
253
with:
254
254
inputs: file.txt
255
255
ctfe: ./path/to/rekor.pub
@@ -265,7 +265,7 @@ instead of the default production instances.
265
265
Example :
266
266
267
267
` ` ` yaml
268
- - uses: sigstore/[email protected] .0
268
+ - uses: sigstore/[email protected] .1
269
269
with:
270
270
inputs: file.txt
271
271
staging: true
@@ -288,7 +288,7 @@ and `verify-oidc-issuer` settings. Failing to pass these will produce an error.
288
288
Example :
289
289
290
290
` ` ` yaml
291
- - uses: sigstore/[email protected] .0
291
+ - uses: sigstore/[email protected] .1
292
292
with:
293
293
inputs: file.txt
294
294
verify: true
@@ -311,7 +311,7 @@ This setting may only be used in conjunction with `verify-oidc-issuer`.
311
311
Supplying it without `verify-oidc-issuer` will produce an error.
312
312
313
313
` ` ` yaml
314
- - uses: sigstore/[email protected] .0
314
+ - uses: sigstore/[email protected] .1
315
315
with:
316
316
inputs: file.txt
317
317
verify: true
@@ -336,7 +336,7 @@ Supplying it without `verify-cert-identity` will produce an error.
336
336
Example :
337
337
338
338
` ` ` yaml
339
- - uses: sigstore/[email protected] .0
339
+ - uses: sigstore/[email protected] .1
340
340
with:
341
341
inputs: file.txt
342
342
verify: true
@@ -358,7 +358,7 @@ workflow artifact retention period is used.
358
358
Example :
359
359
360
360
` ` ` yaml
361
- - uses: sigstore/[email protected] .0
361
+ - uses: sigstore/[email protected] .1
362
362
with:
363
363
inputs: file.txt
364
364
upload-signing-artifacts: true
@@ -386,7 +386,7 @@ permissions:
386
386
387
387
# ...
388
388
389
- - uses: sigstore/[email protected] .0
389
+ - uses: sigstore/[email protected] .1
390
390
with:
391
391
inputs: file.txt
392
392
release-signing-artifacts: true
@@ -413,7 +413,7 @@ permissions:
413
413
Example :
414
414
415
415
` ` ` yaml
416
- - uses: sigstore/[email protected] .0
416
+ - uses: sigstore/[email protected] .1
417
417
with:
418
418
inputs: file.txt
419
419
internal-be-careful-debug: true
0 commit comments