digicert/DigiCert® Container Signing Action
Sign container images using DigiCert® Software Trust Manager (STM) keypairs and cosign
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Mar 12, 2026
- License
- MIT
Pinned Snippet
uses: digicert/digicert-container-signing-action@9894fd4f2c5d16adf8572b7548bfaa87c324e14d # v1.0.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| input | Container image to sign | yes | — |
| keypair-alias | Keypair alias | yes | — |
| verify | Verify the container image signature | no | false |
| registry-url | Container registry URL | yes | — |
| recursive | Sign multi-architecture container images recursively | no | false |
| verbose | Enable verbose output for cosign commands | no | false |
Outputs
no outputs