icedream/Sign with osslsignserver
Sign an artifact by calling a running osslsignserver instance via its REST API
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| url | Base URL of the osslsignserver instance, e.g. https://sign.example.com. The action appends /v1/sign automatically. | yes | — |
| api-key-secret | HMAC shared secret used to sign requests. Must match the value in the server's apiKeyHMACSecret file. Store this in a GitHub Actions secret. | yes | — |
| profile | Signing profile name configured on the server (e.g. "windows-release"). | yes | — |
| file | Path to the artifact to sign (relative to GITHUB_WORKSPACE or absolute). | yes | — |
| output | Output path for the signed artifact. Defaults to overwriting the input file in-place. | no | "" |
| timeout | Maximum time in seconds to wait for the signing request to complete. | no | 120 |
| description | Optional text description for the signature. Appears in Windows UAC dialogs and signature verification tools. | no | "" |
| description-url | Optional URL to be associated with the signature description. | no | "" |
Outputs
| name | description |
|---|---|
| signed-file | Path to the signed artifact. |