crzgames/Azure Sign Tool Action
GitHub Action to sign files using Azure Key Vault
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Feb 25, 2025
- License
- None
Pinned Snippet
uses: crzgames/azure-signtool-action@bc3a5ead0af8d589bb4142333fc71a76277ef3a3 # v1.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| azure-key-vault-url | The URL of the Azure Key Vault | yes | — |
| azure-key-vault-certificate | The name of the certificate in Azure Key Vault | yes | — |
| azure-key-vault-client-id | The Azure Key Vault client ID | no | — |
| azure-key-vault-client-secret | The Azure Key Vault client secret | no | — |
| azure-key-vault-tenant-id | The Azure Key Vault tenant ID | no | — |
| azure-key-vault-accesstoken | An access token used to authenticate to Azure | no | — |
| azure-key-vault-managed-identity | Use the ambient Managed Identity to authenticate to Azure | no | — |
| description | A description of the signed content | no | — |
| description-url | A URL with more information of the signed content | no | — |
| timestamp-rfc3161 | The RFC3161 timestamp URL | no | — |
| timestamp-authenticode | The legacy Authenticode timestamp URL | no | — |
| timestamp-digest | The digest algorithm for the timestamp | no | sha256 |
| file-digest | The digest algorithm for the files | no | sha256 |
| additional-certificates | Paths to additional certificates | no | — |
| verbose | Include additional output in the log | no | false |
| quiet | Do not print output to the log | no | false |
| continue-on-error | Continue on error when signing multiple files | no | false |
| input-file-list | Path to a text file containing a list of files to sign | no | — |
| skip-signed | Skip files that are already signed | no | — |
| files | The paths to individual files to be signed | no | — |
| recursive | Recursively sign files in directories | no | false |
Outputs
no outputs