leflambeur/yewnorosen-test

something-something

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stalelast commit Feb 14, 2022
License: None

Pinned Snippet

workflow.ymlSHA-pinned

uses: leflambeur/rkvst-sbom@274f2a8a04ea35060154eb5912bae815994b7eaa # v0.0.5

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
command	Event Type	yes	release
asset_id	RKVST Asset Identity (assets/{{UUID}})	yes	—
attrs	Core Event Attributes	yes	{"name": "${{ github.repository }}", "description": "${{ github.event.release.tag_name }} - ${{ github.repository }}", "hash": "${{ github.sha }}", "version": "${{ github.event.release.tag_name }}", "author": "${{ github.actor }}", "supplier": "${{ github.repository_owner }}", "uuid": "${{ github.repository }}"}
attachments	Array of build artifacts to attach to event	yes	[]
custom_attrs	Additional Event Attributes	no	{}
latest_sbom	Only for use with Release Event - used if uploaded sbom is not for latest version	no	{"name": "${{ github.repository }}", "description": "${{ github.event.release.tag_name }} - ${{ github.repository }}", "hash": "${{ github.sha }}", "version": "${{ github.event.release.tag_name }}", "author": "${{ github.actor }}", "supplier": "${{ github.repository_owner }}", "uuid": "${{ github.repository }}"}
custom_asset_attrs	Only for use with Release Event - Additional Asset Attributes	no	{}

Outputs

no outputs