actions-marketplace-validations/cosign-installer
Installs cosign and includes it in your path
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 7, 2026
- License
- Apache 2.0
Pinned Snippet
uses: actions-marketplace-validations/sigstore_cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| cosign-release | cosign release version to be installed | no | v3.0.6 |
| install-dir | Where to install the cosign binary | no | $HOME/.cosign |
| use-sudo | set to true if install-dir location requires sudo privs | no | false |
Outputs
no outputs