Merge branch 'main' into eugene/unitTest

.github/workflows/ci.yml

@@ -60,6 +60,8 @@ jobs:
       - name: Run attest-provenance
         id: attest-provenance
         uses: ./
+        env:
+          INPUT_PRIVATE-SIGNING: 'true'
         with:
           subject-digest: 'sha256:7d070f6b64d9bcc530fe99cc21eaaa4b3c364e0b2d367d7735671fa202a03b32'
           subject-name: 'subject'

action.yml

@@ -39,14 +39,8 @@ outputs:
 runs:
   using: 'composite'
   steps:
-    - uses: actions/attest-build-provenance/generate-build-provenance-statement@main
-      id: generate-build-provenance-statement
-      with:
-        github-token: ${{ inputs.github-token }}
-        subject-path: ${{ inputs.subject-path }}
-        subject-digest: ${{ inputs.subject-digest }}
-        subject-name: ${{ inputs.subject-name }}
-        push-to-registry: ${{ inputs.push-to-registry }}
+    - uses: actions/attest-build-provenance/generate-build-provenance-predicate@main
+      id: generate-build-provenance-predicate
     - uses: actions/attest@main
       id: attest
       with:
@@ -55,5 +49,5 @@ runs:
         subject-digest: ${{ inputs.subject-digest }}
         subject-name: ${{ inputs.subject-name }}
         push-to-registry: ${{ inputs.push-to-registry }}
-        predicate-type: ${{ steps.generate-build-provenance-statement.outputs.predicate-type }}
-        predicate: ${{ steps.generate-build-provenance-statement.outputs.predicate }}
+        predicate-type: ${{ steps.generate-build-provenance-predicate.outputs.predicate-type }}
+        predicate: ${{ steps.generate-build-provenance-predicate.outputs.predicate }}

generate-build-provenance-predicate/action.yml

@@ -0,0 +1,14 @@
+name: 'Generate Build Provenance Statement'
+description: 'Generate provenance statement for build artifacts'
+author: 'GitHub'
+
+outputs:
+  predicate:
+    description: >
+      The JSON-serialized of the attestation predicate.
+  predicate-type:
+    description: >
+      URI identifying the type of the predicate.
+runs:
+  using: node20
+  main: ../dist/index.js

generate-build-provenance-statement/action.yml

@@ -1,43 +0,0 @@
-name: 'Generate Build Provenance Statement'
-description: 'Generate provenance statement for build artifacts'
-author: 'GitHub'
-
-inputs:
-  github-token:
-    description: >
-      The GitHub token used to make authenticated API requests.
-    default: ${{ github.token }}
-    required: false
-  subject-path:
-    description: >
-      Path to the artifact for which provenance will be generated. Must specify
-      exactly one of "subject-path" or "subject-digest".
-    required: false
-  subject-digest:
-    description: >
-      Digest of the subject for which provenance will be generated. Must be in
-      the form "algorithm:hex_digest" (e.g. "sha256:abc123..."). Must specify
-      exactly one of "subject-path" or "subject-digest".
-    required: false
-  subject-name:
-    description: >
-      Subject name as it should appear in the provenance statement. Required
-      unless "subject-path" is specified, in which case it will be inferred from
-      the path.
-  push-to-registry:
-    description: >
-      Whether to push the provenance statement to the image registry. Requires
-      that the "subject-name" parameter specify the fully-qualified image name
-      and that the "subject-digest" parameter be specified. Defaults to false.
-    default: false
-    required: false
-outputs:
-  predicate:
-    description: >
-      The JSON-serialized of the attestation predicate.
-  predicate-type:
-    description: >
-      URI identifying the type of the predicate.
-runs:
-  using: node20
-  main: ../dist/index.js