-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore: update witness.yml with workingdir input (#16)
* fix: ncc is required to build * feat: add working directory input to workflow Added a new 'workingdir' input to the GitHub Actions workflow. This allows for specifying the working directory when running commands. The changes include: - Added 'workingdir' as an optional input in the workflow_call section. - Updated testifysec/witness-run-action usage to include 'workingdir'. - Set 'working-directory' for run commands when pull_request is true. This enhancement provides more flexibility in configuring workflows, especially when dealing with projects that have complex structures or require specific execution contexts. * chore: update witness action version in reusable workflow to latest attempt
- Loading branch information
1 parent
65352e5
commit 599989b
Showing
6 changed files
with
1,222 additions
and
1,022 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,95 +1,94 @@ | ||
| name: witness-run | ||
| description: "Creates Attestation of CI Process with Witness" | ||
| description: 'Creates Attestation of CI Process with Witness' | ||
| inputs: | ||
| witness-install-dir: | ||
| description: "Directory to install witness in. The directory will be created if it does not exist" | ||
| description: 'Directory to install witness in. The directory will be created if it does not exist' | ||
| required: false | ||
| default: "./" | ||
| archivista-server: | ||
| description: "URL of the Archivista server to store or retrieve attestations" | ||
| description: 'URL of the Archivista server to store or retrieve attestations' | ||
| required: false | ||
| default: "https://archivista.testifysec.io" | ||
| default: 'https://archivista.testifysec.io' | ||
| attestations: | ||
| description: "Attestations to record" | ||
| description: 'Attestations to record' | ||
| required: false | ||
| default: "environment git github" | ||
| default: 'environment git github' | ||
| attestor-link-export: | ||
| description: "Export the attestor link predicate in its own attestation" | ||
| description: 'Export the attestor link predicate in its own attestation' | ||
| required: false | ||
| default: "false" | ||
| default: 'false' | ||
| attestor-maven-pom-path: | ||
| description: "Path to the Maven POM file" | ||
| description: 'Path to the Maven POM file' | ||
| required: false | ||
| attestor-sbom-export: | ||
| description: "Export the SBOM predicate in its own attestation" | ||
| description: 'Export the SBOM predicate in its own attestation' | ||
| required: false | ||
| default: "false" | ||
| default: 'false' | ||
| attestor-slsa-export: | ||
| description: "Export the SLSA predicate in its own attestation" | ||
| description: 'Export the SLSA predicate in its own attestation' | ||
| required: false | ||
| default: "false" | ||
| default: 'false' | ||
| enable-sigstore: | ||
| description: 'Use Sigstore for attestation' | ||
| required: false | ||
| default: "true" | ||
| default: 'true' | ||
| command: | ||
| description: "command to run" | ||
| description: 'command to run' | ||
| required: true | ||
| certificate: | ||
| description: "Path to the signing key's certificate" | ||
| required: false | ||
| enable-archivista: | ||
| description: "Use Archivista to store or retrieve attestations" | ||
| description: 'Use Archivista to store or retrieve attestations' | ||
| required: false | ||
| default: "true" | ||
| default: 'true' | ||
| fulcio: | ||
| description: "Fulcio address to sign with" | ||
| description: 'Fulcio address to sign with' | ||
| required: false | ||
| fulcio-oidc-client-id: | ||
| description: "OIDC client ID to use for authentication" | ||
| description: 'OIDC client ID to use for authentication' | ||
| required: false | ||
| fulcio-oidc-issuer: | ||
| description: "OIDC issuer to use for authentication" | ||
| description: 'OIDC issuer to use for authentication' | ||
| required: false | ||
| fulcio-token: | ||
| description: "Raw token to use for authentication" | ||
| description: 'Raw token to use for authentication' | ||
| required: false | ||
| intermediates: | ||
| description: "Intermediates that link trust back to a root of trust in the policy" | ||
| description: 'Intermediates that link trust back to a root of trust in the policy' | ||
| required: false | ||
| key: | ||
| description: "Path to the signing key" | ||
| description: 'Path to the signing key' | ||
| required: false | ||
| outfile: | ||
| description: "File to which to write signed data. Defaults to stdout" | ||
| description: 'File to which to write signed data. Defaults to stdout' | ||
| required: false | ||
| product-exclude-glob: | ||
| description: "Pattern to use when recording products. Files that match this pattern will be excluded as subjects on the attestation." | ||
| description: 'Pattern to use when recording products. Files that match this pattern will be excluded as subjects on the attestation.' | ||
| required: false | ||
| product-include-glob: | ||
| description: "Pattern to use when recording products. Files that match this pattern will be included as subjects on the attestation." | ||
| description: 'Pattern to use when recording products. Files that match this pattern will be included as subjects on the attestation.' | ||
| required: false | ||
| spiffe-socket: | ||
| description: "Path to the SPIFFE Workload API socket" | ||
| description: 'Path to the SPIFFE Workload API socket' | ||
| required: false | ||
| step: | ||
| description: "Name of the step being run" | ||
| description: 'Name of the step being run' | ||
| required: true | ||
| timestamp-servers: | ||
| description: "Timestamp Authority Servers to use when signing envelope" | ||
| description: 'Timestamp Authority Servers to use when signing envelope' | ||
| required: false | ||
| trace: | ||
| description: "Enable tracing for the command" | ||
| description: 'Enable tracing for the command' | ||
| required: false | ||
| default: "false" | ||
| default: 'false' | ||
| version: | ||
| description: "Version of Witness CLI" | ||
| description: 'Version of Witness CLI' | ||
| required: false | ||
| default: "0.6.0" | ||
| default: '0.6.0' | ||
| workingdir: | ||
| description: "Directory from which commands will run" | ||
| description: 'Directory from which commands will run' | ||
| required: false | ||
|
|
||
| runs: | ||
| using: "node20" | ||
| main: "dist/index.js" | ||
| using: 'node20' | ||
| main: 'dist/index.js' |
Oops, something went wrong.