lfreleng-actions/sigul-docker
Sign artifacts with Sigul
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| sign-type | Either 'sign-data' or 'sign-git-tag' | no | sign-data |
| sign-object | File or git tag to sign | yes | — |
| sigul-conf | Body of the Sigul client configuration file (client.conf) | yes | — |
| sigul-key-name | The key name on the server to utilize | yes | — |
| sigul-pass | Passphrase for the Sigul key (also used to decrypt sigul-pki) | yes | — |
| sigul-pki | Client PKI material: a tar.xz archive containing the .sigul/ directory, GPG-encrypted with sigul-pass. May be supplied raw or base64-encoded; the entrypoint auto-detects. | yes | — |
| gh-user | GitHub user for pushing signed tags | no | — |
| gh-key | GitHub API key for pushing signed tags | no | — |
| sigul-mock-mode | Mock mode testing (operates without a Sigul server) | no | false |
Outputs
no outputs