27
27
- uses : actions/checkout@v3
28
28
- name : install
29
29
run : python -m pip install .
30
- -
uses :
sigstore/[email protected] .10
30
+ -
uses :
sigstore/[email protected] .11
31
31
with :
32
32
inputs : file.txt
33
33
` ` `
@@ -55,15 +55,15 @@ provided.
55
55
To sign one or more files :
56
56
57
57
` ` ` yaml
58
- - uses: sigstore/[email protected] .10
58
+ - uses: sigstore/[email protected] .11
59
59
with:
60
60
inputs: file0.txt file1.txt file2.txt
61
61
` ` `
62
62
63
63
The `inputs` argument also supports file globbing :
64
64
65
65
` ` ` yaml
66
- - uses: sigstore/[email protected] .10
66
+ - uses: sigstore/[email protected] .11
67
67
with:
68
68
inputs: ./path/to/inputs/*.txt
69
69
` ` `
@@ -76,7 +76,7 @@ The `identity-token` setting controls the OpenID Connect token provided to Fulci
76
76
workflow will use the credentials found in the GitHub Actions environment.
77
77
78
78
` ` ` yaml
79
- - uses: sigstore/[email protected] .10
79
+ - uses: sigstore/[email protected] .11
80
80
with:
81
81
inputs: file.txt
82
82
identity-token: ${{ IDENTITY_TOKEN }} # assigned elsewhere
@@ -92,7 +92,7 @@ Server during OAuth2.
92
92
Example :
93
93
94
94
` ` ` yaml
95
- - uses: sigstore/[email protected] .10
95
+ - uses: sigstore/[email protected] .11
96
96
with:
97
97
inputs: file.txt
98
98
oidc-client-id: alternative-sigstore-id
@@ -108,7 +108,7 @@ Connect Server during OAuth2.
108
108
Example :
109
109
110
110
` ` ` yaml
111
- - uses: sigstore/[email protected] .10
111
+ - uses: sigstore/[email protected] .11
112
112
with:
113
113
inputs: file.txt
114
114
oidc-client-secret: alternative-sigstore-secret
@@ -124,7 +124,7 @@ when signing multiple input files.
124
124
Example :
125
125
126
126
` ` ` yaml
127
- - uses: sigstore/[email protected] .10
127
+ - uses: sigstore/[email protected] .11
128
128
with:
129
129
inputs: file.txt
130
130
signature: custom-signature-filename.sig
@@ -133,7 +133,7 @@ Example:
133
133
However, this example is invalid :
134
134
135
135
` ` ` yaml
136
- - uses: sigstore/[email protected] .10
136
+ - uses: sigstore/[email protected] .11
137
137
with:
138
138
inputs: file0.txt file1.txt file2.txt
139
139
signature: custom-signature-filename.sig
@@ -149,7 +149,7 @@ work when signing multiple input files.
149
149
Example :
150
150
151
151
` ` ` yaml
152
- - uses: sigstore/[email protected] .10
152
+ - uses: sigstore/[email protected] .11
153
153
with:
154
154
inputs: file.txt
155
155
certificate: custom-certificate-filename.crt
@@ -158,7 +158,7 @@ Example:
158
158
However, this example is invalid :
159
159
160
160
` ` ` yaml
161
- - uses: sigstore/[email protected] .10
161
+ - uses: sigstore/[email protected] .11
162
162
with:
163
163
inputs: file0.txt file1.txt file2.txt
164
164
certificate: custom-certificate-filename.crt
@@ -174,7 +174,7 @@ from. This setting cannot be used in combination with the `staging` setting.
174
174
Example :
175
175
176
176
` ` ` yaml
177
- - uses: sigstore/[email protected] .10
177
+ - uses: sigstore/[email protected] .11
178
178
with:
179
179
inputs: file.txt
180
180
fulcio-url: https://fulcio.sigstage.dev
@@ -190,7 +190,7 @@ cannot be used in combination with the `staging` setting.
190
190
Example :
191
191
192
192
` ` ` yaml
193
- - uses: sigstore/[email protected] .10
193
+ - uses: sigstore/[email protected] .11
194
194
with:
195
195
inputs: file.txt
196
196
rekor-url: https://rekor.sigstage.dev
@@ -206,7 +206,7 @@ in combination with the `staging` setting.
206
206
Example :
207
207
208
208
` ` ` yaml
209
- - uses: sigstore/[email protected] .10
209
+ - uses: sigstore/[email protected] .11
210
210
with:
211
211
inputs: file.txt
212
212
ctfe: ./path/to/ctfe.pub
@@ -222,7 +222,7 @@ be used in combination with `staging` setting.
222
222
Example :
223
223
224
224
` ` ` yaml
225
- - uses: sigstore/[email protected] .10
225
+ - uses: sigstore/[email protected] .11
226
226
with:
227
227
inputs: file.txt
228
228
ctfe: ./path/to/rekor.pub
@@ -238,7 +238,7 @@ instead of the default production instances.
238
238
Example :
239
239
240
240
` ` ` yaml
241
- - uses: sigstore/[email protected] .10
241
+ - uses: sigstore/[email protected] .11
242
242
with:
243
243
inputs: file.txt
244
244
staging: true
@@ -258,7 +258,7 @@ generated properly and the signature was properly submitted to Rekor.
258
258
Example :
259
259
260
260
` ` ` yaml
261
- - uses: sigstore/[email protected] .10
261
+ - uses: sigstore/[email protected] .11
262
262
with:
263
263
inputs: file.txt
264
264
verify: false
@@ -278,7 +278,7 @@ certificate's SAN against the provided value.
278
278
This setting only applies if `verify` is set to `true`.
279
279
280
280
` ` ` yaml
281
- - uses: sigstore/[email protected] .10
281
+ - uses: sigstore/[email protected] .11
282
282
with:
283
283
inputs: file.txt
284
284
verify-cert-identity: [email protected]
@@ -295,7 +295,7 @@ certificate's SAN against the provided value.
295
295
This setting only applies if `verify` is set to `true`.
296
296
297
297
` ` ` yaml
298
- - uses: sigstore/[email protected] .10
298
+ - uses: sigstore/[email protected] .11
299
299
with:
300
300
inputs: file.txt
301
301
verify-cert-identity: [email protected]
@@ -314,7 +314,7 @@ This setting only applies if `verify` is set to `true`.
314
314
Example :
315
315
316
316
` ` ` yaml
317
- - uses: sigstore/[email protected] .10
317
+ - uses: sigstore/[email protected] .11
318
318
with:
319
319
inputs: file.txt
320
320
verify-oidc-issuer: https://oauth2.sigstage.dev/auth
@@ -334,7 +334,7 @@ workflow artifact retention period is used.
334
334
Example :
335
335
336
336
` ` ` yaml
337
- - uses: sigstore/[email protected] .10
337
+ - uses: sigstore/[email protected] .11
338
338
with:
339
339
inputs: file.txt
340
340
upload-signing-artifacts: true
@@ -359,7 +359,7 @@ permissions:
359
359
360
360
# ...
361
361
362
- - uses: sigstore/[email protected] .10
362
+ - uses: sigstore/[email protected] .11
363
363
with:
364
364
inputs: file.txt
365
365
release-signing-artifacts: true
@@ -386,7 +386,7 @@ permissions:
386
386
Example :
387
387
388
388
` ` ` yaml
389
- - uses: sigstore/[email protected] .10
389
+ - uses: sigstore/[email protected] .11
390
390
with:
391
391
inputs: file.txt
392
392
internal-be-careful-debug: true
0 commit comments