kartverket/Nacho SKIP
A composite GitHub Action for authenticating with Kartverket and SKIP when using NAIS's salsa action for image provenance.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 16, 2026
- License
- None
Pinned Snippet
uses: kartverket/nacho-skip@6ff09d1bf9eb2dcb08113bc243acb3170fbcbd17 # v0.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| auth_project_number | The GCP Project Number used for authentication. A 12-digit number used as a unique identifier for the project. Used to find workload identity pool. | yes | — |
| service_account | The GCP service account connected to the identity pool that will be used to authenticate with GCP. | yes | — |
| image_name | Image name of the image to sign. In the format <FOLDER>/<NAME>, where <FOLDER> is optional. Example: `kartverket/skip` | yes | — |
| image_digest | Image digest of the image to sign. Looks like `sha256:a428de44a9059f31a59237a5881c2d2cffa93757d99026156e4ea544577ab7f3`. | yes | — |
| image_registry | Registry in which the image is created. Defaults to `ghcr.io`, GitHubs registry. | no | ghcr.io |
| workload_identity_provider_override | The ID of the provider to use for authentication. Only used for overriding the default workload identity provider based on project number. It should be in the format of `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}` | no | — |
Outputs
no outputs