scribe-security/Scribe Third-party Evidence action
Collect, Create and Store any file as evidence
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | — | yes | — |
| attest-config | Attestation config path | — | — |
| attest-default | Attestation default config, options=[sigstore sigstore-github x509 x509-env kms pubkey] | — | — |
| ca | x509 CA Chain path | — | — |
| cert | x509 Cert path | — | — |
| compress | Compress content) | — | — |
| crl | x509 CRL path | — | — |
| crl-full-chain | Enable Full chain CRL verfication | — | — |
| disable-crl | Disable certificate revocation verificatoin | — | — |
| format | Evidence format, options=[statement attest] | — | — |
| format-encoding | Evidence Format encoding | — | — |
| format-type | Evidence Format type | — | — |
| format-version | Evidence Format version | — | — |
| key | x509 Private key path | — | — |
| kms | Provide KMS key reference | — | — |
| oci | Enable OCI store | — | — |
| oci-repo | Select OCI custom attestation repo | — | — |
| parser | Evidence Parser Name | — | — |
| pass | Private key password | — | — |
| pubkey | Public key path | — | — |
| skip-confirmation | Skip Sigstore Confirmation | — | — |
| tool | Evidence Tool name | — | — |
| tool-vendor | Evidence Tool vendor | — | — |
| tool-version | Evidence Tool version | — | — |
| cache-enable | Enable local cache | — | — |
| config | Configuration file path | — | — |
| deliverable | Mark as deliverable, options=[true, false] | — | — |
| env | Environment keys to include in evidence | — | — |
| gate-name | Policy Gate name | — | — |
| gate-type | Policy Gate type | — | — |
| input | Input Evidence target, format (\<parser>:\<file> or \<scheme>:\<name>:\<tag>) | — | — |
| label | Add Custom labels | — | — |
| level | Log depth level, options=[panic fatal error warning info debug trace] | — | — |
| log-context | Attach context to all logs | — | — |
| log-file | Output log to file | — | — |
| output-directory | Output directory path | — | ./scribe/valint |
| output-file | Output file name | — | — |
| pipeline-name | Pipeline name | — | — |
| predicate-type | Custom Predicate type (generic evidence format) | — | — |
| product-key | Product Key | — | — |
| product-version | Product Version | — | — |
| scribe-client-id | Scribe Client ID (deprecated) | — | — |
| scribe-client-secret | Scribe Client Token | — | — |
| scribe-disable | Disable scribe client | — | — |
| scribe-enable | Enable scribe client (deprecated) | — | — |
| scribe-url | Scribe API Url | — | — |
| structured | Enable structured logger | — | — |
| timeout | Timeout duration | — | — |
| verbose | Log verbosity level [-v,--verbose=1] = info, [-vv,--verbose=2] = debug | — | — |
Outputs
| name | description |
|---|---|
| OUTPUT_PATH | evidence output file path |