testifysec/TestifySec Action Wrapper with Witness
Downloads and executes another GitHub Action or direct command with Witness attestation for supply chain security
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| action-ref | Reference to the nested action (e.g., owner/repo@ref or owner/repo@v1) | no | — |
| command | Command to run with Witness (use this or action-ref) | no | — |
| witness-version | Version of Witness to use (check https://github.com/testifysec/witness/releases for valid versions) | no | 0.8.1 |
| witness-install-dir | Directory to install Witness | no | ./ |
| step | Step name for the attestation | yes | — |
| attestations | Space-separated list of attestors to run | yes | — |
| outfile | Path to output file for the attestation | no | — |
| enable-archivista | Enable archivista for storing attestations | no | false |
| archivista-server | Archivista server URL | no | — |
| certificate | Path to certificate file | no | — |
| key | Path to key file | no | — |
| intermediates | Space-separated list of intermediate certificate paths | no | "" |
| enable-sigstore | Enable sigstore for signing | no | false |
| fulcio | Fulcio URL | no | — |
| fulcio-oidc-client-id | Fulcio OIDC client ID | no | — |
| fulcio-oidc-issuer | Fulcio OIDC issuer | no | — |
| fulcio-token | Fulcio token | no | — |
| timestamp-servers | Space-separated list of timestamp server URLs | no | "" |
| trace | Enable tracing | no | — |
| spiffe-socket | Path to SPIFFE socket | no | — |
| product-exclude-glob | Glob pattern for excluding products | no | — |
| product-include-glob | Glob pattern for including products | no | — |
| attestor-link-export | Export link attestor | no | false |
| attestor-sbom-export | Export SBOM attestor | no | false |
| attestor-slsa-export | Export SLSA attestor | no | false |
| attestor-maven-pom-path | Path to Maven POM file | no | — |
| who-to-greet | Who to greet | no | World |
Outputs
| name | description |
|---|---|
| git_oid | GitOID of the attestation (if created) |