From 60a047b675dcd569a14343170f7b453f338f3235 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 10 Apr 2025 10:34:15 -0700 Subject: [PATCH] oci compat mode input arg Signed-off-by: Brian DeHamer --- src/attest.ts | 2 ++ src/index.ts | 3 +++ src/main.ts | 4 +++- 3 files changed, 8 insertions(+), 1 deletion(-) diff --git a/src/attest.ts b/src/attest.ts index 3b59cdb..d2f383a 100644 --- a/src/attest.ts +++ b/src/attest.ts @@ -17,6 +17,7 @@ export const createAttestation = async ( sigstoreInstance: SigstoreInstance pushToRegistry: boolean githubToken: string + ociCompatMode: boolean } ): Promise => { // Sign provenance w/ Sigstore @@ -43,6 +44,7 @@ export const createAttestation = async ( 'dev.sigstore.bundle.content': 'dsse-envelope', 'dev.sigstore.bundle.predicateType': predicate.type }, + compatibility: opts.ociCompatMode, fetchOpts: { timeout: OCI_TIMEOUT, retry: OCI_RETRY } }) diff --git a/src/index.ts b/src/index.ts index a4de2b8..6e19911 100644 --- a/src/index.ts +++ b/src/index.ts @@ -18,6 +18,9 @@ const inputs: RunInputs = { // undocumented -- not part of public interface privateSigning: ['true', 'True', 'TRUE', '1'].includes( core.getInput('private-signing') + ), + ociCompatMode: ['true', 'True', 'TRUE', '1'].includes( + core.getInput('oci-compatibility-mode') ) } diff --git a/src/main.ts b/src/main.ts index fcc5c93..21fd411 100644 --- a/src/main.ts +++ b/src/main.ts @@ -23,6 +23,7 @@ export type RunInputs = SubjectInputs & githubToken: string showSummary: boolean privateSigning: boolean + ociCompatMode: boolean } /* istanbul ignore next */ @@ -68,7 +69,8 @@ export async function run(inputs: RunInputs): Promise { const att = await createAttestation(subjects, predicate, { sigstoreInstance, pushToRegistry: inputs.pushToRegistry, - githubToken: inputs.githubToken + githubToken: inputs.githubToken, + ociCompatMode: inputs.ociCompatMode }) logAttestation(subjects, att, sigstoreInstance)