try storing vsa in a note (#38)

Signed-off-by: Tom Hennen <[email protected]>

Author: TomHennen

actions/vsa_creator/action.yml

@@ -38,6 +38,13 @@ runs:
         echo "## Signed VSA" >> $GITHUB_STEP_SUMMARY
         cat ${{ github.workspace }}/metadata/signed_vsa.json >> $GITHUB_STEP_SUMMARY
       shell: bash
+    - id: store_in_note
+      run: |
+          git config user.name "${{ github.actor }}"
+          git config user.email "${{ github.actor }}@users.noreply.github.com"
+          git fetch origin "refs/notes/*:refs/notes/*"
+          git notes append -F ${{ github.workspace }}/metadata/signed_vsa.json
+          git push origin "refs/notes/*"
     - uses: actions/upload-artifact@v4
       if: always()
       with: