| connector-url | GitHub Actions SignPath connector URL | yes | https://githubactions.connectors.signpath.io |
| api-token | SignPath REST API access token. Read more in the SignPath documentation: https://about.signpath.io/redirects/connectors/api-token | yes | — |
| organization-id | SignPath organization ID | yes | — |
| project-slug | SignPath project slug | yes | — |
| signing-policy-slug | SignPath signing policy slug | yes | — |
| artifact-configuration-slug | SignPath artifact configuration slug | no | — |
| github-artifact-id | Id of the Github Actions artifact. Use `steps.<step-id>.outputs.artifact-id` from the preceding actions/upload-artifact action step. | yes | — |
| github-token | GitHub access token used to read job details and download the artifact. Defaults to the [`secrets.GITHUB_TOKEN`](https://docs.github.com/en/actions/security-guides/automatic-token-authentication). | no | ${{ github.token }} |
| parameters | Multiline-string of values that map to user-defined parameters in the Artifact Configuration. Use one line per parameter with the format <name>: "<value>" where <value> needs to be a valid JSON string. | no | — |
| wait-for-completion-timeout-in-seconds | Maximum time in seconds that the action will wait for the signing request to complete | no | 600 |
| service-unavailable-timeout-in-seconds | Total time in seconds that the action will wait for a single service call to succeed (across several retries) | no | 600 |
| download-signed-artifact-timeout-in-seconds | HTTP timeout when downloading the signed artifact. | no | 300 |
| wait-for-completion | If true, the action will wait for the signing request to complete | no | true |
| output-artifact-directory | Path where the signed artifact will be saved. If not specified, the task will not download the signed artifact from SignPath | no | — |
| skip-decompress | If true, the signed artifact will be saved as-is (without extracting the archive) using the artifact's original file name. If false (default), the archive will be extracted to the output-artifact-directory. | no | false |