-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathaction.yml
125 lines (113 loc) · 3.18 KB
/
action.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
name: "TestifySec Action Wrapper with Witness"
description: "Downloads and executes another GitHub Action or direct command with Witness attestation for supply chain security"
inputs:
# Action or Command (one is required)
action-ref:
description: "Reference to the nested action (e.g., owner/repo@ref or owner/repo@v1)"
required: false
command:
description: "Command to run with Witness (use this or action-ref)"
required: false
# Witness Installation
witness-version:
description: "Version of Witness to use (check https://github.com/testifysec/witness/releases for valid versions)"
required: false
default: "0.8.1"
witness-install-dir:
description: "Directory to install Witness"
required: false
default: "./"
# Witness Core Options
step:
description: "Step name for the attestation"
required: true
attestations:
description: "Space-separated list of attestors to run"
required: true
outfile:
description: "Path to output file for the attestation"
required: false
# Archivista Configuration
enable-archivista:
description: "Enable archivista for storing attestations"
required: false
default: "false"
archivista-server:
description: "Archivista server URL"
required: false
# Certificate & Signing Options
certificate:
description: "Path to certificate file"
required: false
key:
description: "Path to key file"
required: false
intermediates:
description: "Space-separated list of intermediate certificate paths"
required: false
default: ""
# Sigstore Configuration
enable-sigstore:
description: "Enable sigstore for signing"
required: false
default: "false"
fulcio:
description: "Fulcio URL"
required: false
fulcio-oidc-client-id:
description: "Fulcio OIDC client ID"
required: false
fulcio-oidc-issuer:
description: "Fulcio OIDC issuer"
required: false
fulcio-token:
description: "Fulcio token"
required: false
# Timestamp Configuration
timestamp-servers:
description: "Space-separated list of timestamp server URLs"
required: false
default: ""
# Misc Options
trace:
description: "Enable tracing"
required: false
spiffe-socket:
description: "Path to SPIFFE socket"
required: false
# Product Configuration
product-exclude-glob:
description: "Glob pattern for excluding products"
required: false
product-include-glob:
description: "Glob pattern for including products"
required: false
# Attestor Export Options
attestor-link-export:
description: "Export link attestor"
required: false
default: "false"
attestor-sbom-export:
description: "Export SBOM attestor"
required: false
default: "false"
attestor-slsa-export:
description: "Export SLSA attestor"
required: false
default: "false"
attestor-maven-pom-path:
description: "Path to Maven POM file"
required: false
who-to-greet:
description: "Who to greet"
required: false
default: "World"
outputs:
git_oid:
description: "GitOID of the attestation (if created)"
runs:
using: "node20"
main: "index.js"
branding:
icon: 'lock'
color: 'blue'