step-security/Publish to BCR
Create a new module version entry in a Bazel registry
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| attest | Whether to generate attestations for files created by Publish to BCR. | no | false |
| attestations-dest | Directory to output attestations to. Attestations are not included in the entry. | no | "" |
| gh-token | Token for persisting attestations to the repo. This must be a token with id-token and attestation write permissions. | no | ${{ github.token }} |
| github-repository | GitHub repository for the module being published. Used to substititue the OWNER and REPO vars into the source template. Defaults to the repository this action runs in. | no | ${{ github.repository }} |
| local-artifact-path | A newline separated list of local file paths to scan for artifacts declared in source.json and attestations.json instead of downloading them to compute an integrity checksum. | no | "" |
| local-registry | Path to a locally checked out registry where the entry files will be created. | yes | — |
| metadata-template | Content of the metadata template. An alternative to supplying a metadata.template.json file in the templates dir. | no | "" |
| module-roots | A newline separated list of relative paths of modules to publish. Overrides the content of moduleRoots in the configuration file. | no | — |
| module-version | The module version to publish to the registry. | yes | — |
| patch | Patch content to apply to the release archive. An alternative to supplying a patches folder in the templates dir. The GitHub action is limited to a single patch input so all patches should be merged into one. | no | "" |
| presubmit | Content of the presubmit. An alternative to supplying a presubmit.yml file in the templates dir. | no | "" |
| source-template | Content of the source template. An alternative to supplying a source.template.json file in the templates dir. | no | "" |
| tag | Tag of the the module repository's release. Used for substitution in the source template. | no | "" |
| templates-dir | Directory containing BCR release template files: metadata.template.json, source.template.json, presubmit.yaml, patches/. Equivalent to the .bcr directory required by the legacy GitHub app. | no | "" |
Outputs
| name | description |
|---|---|
| module-names | Name(s) of the module(s) from MODULE.bazel, comma-separated |
| short-description | A short, single-line description of the operation, e.g. "Publish foo_module@1.2.3". |