kartverket/Nacho SKIP

A composite GitHub Action for authenticating with Kartverket and SKIP when using NAIS's salsa action for image provenance.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 16, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: kartverket/nacho-skip@6ff09d1bf9eb2dcb08113bc243acb3170fbcbd17 # v0.1.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
auth_project_numberThe GCP Project Number used for authentication. A 12-digit number used as a unique identifier for the project. Used to find workload identity pool.yes
service_accountThe GCP service account connected to the identity pool that will be used to authenticate with GCP.yes
image_nameImage name of the image to sign. In the format <FOLDER>/<NAME>, where <FOLDER> is optional. Example: `kartverket/skip`yes
image_digestImage digest of the image to sign. Looks like `sha256:a428de44a9059f31a59237a5881c2d2cffa93757d99026156e4ea544577ab7f3`.yes
image_registryRegistry in which the image is created. Defaults to `ghcr.io`, GitHubs registry.noghcr.io
workload_identity_provider_overrideThe ID of the provider to use for authentication. Only used for overriding the default workload identity provider based on project number. It should be in the format of `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}`no

no outputs