skeeto/aas-sign
Sign PE images with Azure Artifact Signing (formerly Trusted Signing)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| endpoint | Azure Trusted Signing endpoint host (e.g. eus.codesigning.azure.net) | yes | — |
| account | Trusted Signing account name | yes | — |
| profile | Certificate profile name | yes | — |
| files | Files to sign, one path per line | yes | — |
| client-id | Azure app registration client ID (for GitHub OIDC federation). | no | "" |
| tenant-id | Azure tenant ID (used with client-id for OIDC). | no | "" |
| token | Pre-minted Azure bearer token. Usually omitted -- set client-id and tenant-id instead and let aas-sign perform the OIDC exchange. | no | "" |
| version | aas-sign release tag to install | no | v0.3.0 |
| timestamp-url | RFC 3161 TSA URL (overrides aas-sign's built-in default) | no | "" |
| no-timestamp | Set to "true" to skip timestamping | no | false |
| max-parallel | Maximum concurrent signing operations | no | "" |
Outputs
no outputs