clowdhaus/AWS Lambda Code Signing GitHub Action
GitHub action which uses AWS Code Signer to sign ✍🏼 AWS Lambda artifacts 📦 from your pipeline
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| aws-region | AWS Region, e.g. us-east-2 | yes | — |
| client-request-token | String that identifies the signing request. All calls after the first that use this token return the same response as the first call | no | — |
| source-s3-bucket | The S3 bucket that contains the object to sign | yes | — |
| source-s3-key | Key name of the bucket object that contains your unsigned code | yes | — |
| source-s3-version | Version of your source image in your version enabled S3 bucket | yes | — |
| destination-s3-bucket | The S3 bucket in which to save your signed object | yes | — |
| destination-s3-prefix | S3 object key prefix to prepend to your signed object | no | signed/ |
| profile-name | The name of the signing profile | yes | — |
| profile-owner | The AWS account ID of the signing profile owner | no | — |
| rename-signed-object | Rename the generated signed object to match the original `sourceS3Key` with the `destinationS3Prefix` | no | true |
| wait-until-successful | Wait until the signed jobs complete successfully | no | true |
| max-wait-time | Maximum amount of time, in seconds, to wait for a job to complete successfully | no | 30 |
Outputs
| name | description |
|---|---|
| job-id | The ID of your signing job |
| signed-object-key | The S3 key of your signed object, as created by AWS Signer |
| renamed-signed-object-key | The renamed S3 key of your signed object |