actions-marketplace-validations/Salsa Registry

Creates an attestation based on your running dependencies, signs & pushes to a registry

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Nov 29, 2022
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: actions-marketplace-validations/nais_salsa-registry@8f2a5c6dca141a5283586afa46551d8f2aac826f # no releases — HEAD as of 2026-07-13

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
service_accountAccount used for authentication to a workload federationyes
identity_providerIdentity provider used for authentication to a workload federationyes
salsa_credentialsCredentials for salsayes
github_tokenGithub token or PATno${{ github.token }}
salsa_keySalsa key used for signingno
salsa_mvn_optsMaven optionsno""
salsa_enabledCreate a salsa attestationnotrue
registryRegistry to push tonoeurope-north1-docker.pkg.dev/nais-io/nais/images
imageImage to be attested and pushedno""
versionVersion of the image to be attestedno""
pushPush to registrynotrue
build_cmdBuild commandno""

no outputs