Force signing w/ private sigstore instance (#16)

Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Brian DeHamer 2024-02-29 16:29:00 -08:00 committed by GitHub
parent f47db5c9bc
commit b6400165aa
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -59,6 +59,8 @@ jobs:
- name: Run attest-provenance
id: attest-provenance
uses: ./
env:
INPUT_PRIVATE-SIGNING: 'true'
with:
subject-digest: 'sha256:7d070f6b64d9bcc530fe99cc21eaaa4b3c364e0b2d367d7735671fa202a03b32'
subject-name: 'subject'