27
27
- uses : actions/checkout@v3
28
28
- name : install
29
29
run : python -m pip install .
30
- -
uses :
trailofbits/[email protected] .6
30
+ -
uses :
trailofbits/[email protected] .7
31
31
with :
32
32
inputs : file.txt
33
33
` ` `
@@ -55,15 +55,15 @@ provided.
55
55
To sign one or more files :
56
56
57
57
` ` ` yaml
58
- - uses: trailofbits/[email protected] .6
58
+ - uses: trailofbits/[email protected] .7
59
59
with:
60
60
inputs: file0.txt file1.txt file2.txt
61
61
` ` `
62
62
63
63
The `inputs` argument also supports file globbing :
64
64
65
65
` ` ` yaml
66
- - uses: trailofbits/[email protected] .6
66
+ - uses: trailofbits/[email protected] .7
67
67
with:
68
68
inputs: ./path/to/inputs/*.txt
69
69
` ` `
@@ -78,7 +78,7 @@ Server during OAuth2.
78
78
Example :
79
79
80
80
` ` ` yaml
81
- - uses: trailofbits/[email protected] .6
81
+ - uses: trailofbits/[email protected] .7
82
82
with:
83
83
inputs: file.txt
84
84
oidc-client-id: alternative-sigstore-id
@@ -94,7 +94,7 @@ Connect Server during OAuth2.
94
94
Example :
95
95
96
96
` ` ` yaml
97
- - uses: trailofbits/[email protected] .6
97
+ - uses: trailofbits/[email protected] .7
98
98
with:
99
99
inputs: file.txt
100
100
oidc-client-secret: alternative-sigstore-secret
@@ -113,7 +113,7 @@ These output files are necessary for verification so turning this setting on wil
113
113
Example :
114
114
115
115
` ` ` yaml
116
- - uses: trailofbits/[email protected] .6
116
+ - uses: trailofbits/[email protected] .7
117
117
with:
118
118
inputs: file.txt
119
119
no-default-files: true
@@ -129,7 +129,7 @@ when signing multiple input files.
129
129
Example :
130
130
131
131
` ` ` yaml
132
- - uses: trailofbits/[email protected] .6
132
+ - uses: trailofbits/[email protected] .7
133
133
with:
134
134
inputs: file.txt
135
135
signature: custom-signature-filename.sig
@@ -138,7 +138,7 @@ Example:
138
138
However, this example is invalid :
139
139
140
140
` ` ` yaml
141
- - uses: trailofbits/[email protected] .6
141
+ - uses: trailofbits/[email protected] .7
142
142
with:
143
143
inputs: file0.txt file1.txt file2.txt
144
144
signature: custom-signature-filename.sig
@@ -154,7 +154,7 @@ work when signing multiple input files.
154
154
Example :
155
155
156
156
` ` ` yaml
157
- - uses: trailofbits/[email protected] .6
157
+ - uses: trailofbits/[email protected] .7
158
158
with:
159
159
inputs: file.txt
160
160
certificate: custom-certificate-filename.crt
@@ -163,7 +163,7 @@ Example:
163
163
However, this example is invalid :
164
164
165
165
` ` ` yaml
166
- - uses: trailofbits/[email protected] .6
166
+ - uses: trailofbits/[email protected] .7
167
167
with:
168
168
inputs: file0.txt file1.txt file2.txt
169
169
certificate: custom-certificate-filename.crt
@@ -179,7 +179,7 @@ overwritten.
179
179
Example :
180
180
181
181
` ` ` yaml
182
- - uses: trailofbits/[email protected] .6
182
+ - uses: trailofbits/[email protected] .7
183
183
with:
184
184
inputs: file.txt
185
185
overwrite: true
@@ -195,7 +195,7 @@ from. This setting cannot be used in combination with the `staging` setting.
195
195
Example :
196
196
197
197
` ` ` yaml
198
- - uses: trailofbits/[email protected] .6
198
+ - uses: trailofbits/[email protected] .7
199
199
with:
200
200
inputs: file.txt
201
201
fulcio-url: https://fulcio.sigstage.dev
@@ -211,7 +211,7 @@ cannot be used in combination with the `staging` setting.
211
211
Example :
212
212
213
213
` ` ` yaml
214
- - uses: trailofbits/[email protected] .6
214
+ - uses: trailofbits/[email protected] .7
215
215
with:
216
216
inputs: file.txt
217
217
rekor-url: https://rekor.sigstage.dev
@@ -227,7 +227,7 @@ in combination with the `staging` setting.
227
227
Example :
228
228
229
229
` ` ` yaml
230
- - uses: trailofbits/[email protected] .6
230
+ - uses: trailofbits/[email protected] .7
231
231
with:
232
232
inputs: file.txt
233
233
ctfe: ./path/to/ctfe.pub
@@ -243,7 +243,7 @@ be used in combination with `staging` setting.
243
243
Example :
244
244
245
245
` ` ` yaml
246
- - uses: trailofbits/[email protected] .6
246
+ - uses: trailofbits/[email protected] .7
247
247
with:
248
248
inputs: file.txt
249
249
ctfe: ./path/to/rekor.pub
@@ -260,7 +260,7 @@ checked to ensure that it matches.
260
260
Example :
261
261
262
262
` ` ` yaml
263
- - uses: trailofbits/[email protected] .6
263
+ - uses: trailofbits/[email protected] .7
264
264
with:
265
265
inputs: file.txt
266
266
oidc-issuer: https://oauth2.sigstage.dev/auth
@@ -276,7 +276,7 @@ instead of the default production instances.
276
276
Example :
277
277
278
278
` ` ` yaml
279
- - uses: trailofbits/[email protected] .6
279
+ - uses: trailofbits/[email protected] .7
280
280
with:
281
281
inputs: file.txt
282
282
staging: true
@@ -296,7 +296,7 @@ generated properly and the signature was properly submitted to Rekor.
296
296
Example :
297
297
298
298
` ` ` yaml
299
- - uses: trailofbits/[email protected] .6
299
+ - uses: trailofbits/[email protected] .7
300
300
with:
301
301
inputs: file.txt
302
302
verify: false
@@ -313,7 +313,7 @@ certificate's SAN against the provided value.
313
313
This setting only applies if `verify` is set to `true`.
314
314
315
315
` ` ` yaml
316
- - uses: trailofbits/[email protected] .6
316
+ - uses: trailofbits/[email protected] .7
317
317
with:
318
318
inputs: file.txt
319
319
verify-cert-email: [email protected]
@@ -333,7 +333,7 @@ workflow artifact retention period is used.
333
333
Example :
334
334
335
335
` ` ` yaml
336
- - uses: trailofbits/[email protected] .6
336
+ - uses: trailofbits/[email protected] .7
337
337
with:
338
338
inputs: file.txt
339
339
upload-signing-artifacts: true
@@ -358,7 +358,7 @@ permissions:
358
358
359
359
# ...
360
360
361
- - uses: trailofbits/[email protected] .6
361
+ - uses: trailofbits/[email protected] .7
362
362
with:
363
363
inputs: file.txt
364
364
release-signing-artifacts: true
@@ -385,7 +385,7 @@ permissions:
385
385
Example :
386
386
387
387
` ` ` yaml
388
- - uses: trailofbits/[email protected] .6
388
+ - uses: trailofbits/[email protected] .7
389
389
with:
390
390
inputs: file.txt
391
391
internal-be-careful-debug: true
0 commit comments