oci compat mode input arg

Signed-off-by: Brian DeHamer <bdehamer@github.com>

src/attest.ts

@@ -17,6 +17,7 @@ export const createAttestation = async (
     sigstoreInstance: SigstoreInstance
     pushToRegistry: boolean
     githubToken: string
+    ociCompatMode: boolean
   }
 ): Promise<AttestResult> => {
   // Sign provenance w/ Sigstore
@@ -43,6 +44,7 @@ export const createAttestation = async (
         'dev.sigstore.bundle.content': 'dsse-envelope',
         'dev.sigstore.bundle.predicateType': predicate.type
       },
+      compatibility: opts.ociCompatMode,
       fetchOpts: { timeout: OCI_TIMEOUT, retry: OCI_RETRY }
     })
 

src/index.ts

@@ -18,6 +18,9 @@ const inputs: RunInputs = {
   // undocumented -- not part of public interface
   privateSigning: ['true', 'True', 'TRUE', '1'].includes(
     core.getInput('private-signing')
+  ),
+  ociCompatMode: ['true', 'True', 'TRUE', '1'].includes(
+    core.getInput('oci-compatibility-mode')
   )
 }
 

src/main.ts

@@ -23,6 +23,7 @@ export type RunInputs = SubjectInputs &
     githubToken: string
     showSummary: boolean
     privateSigning: boolean
+    ociCompatMode: boolean
   }
 
 /* istanbul ignore next */
@@ -68,7 +69,8 @@ export async function run(inputs: RunInputs): Promise<void> {
     const att = await createAttestation(subjects, predicate, {
       sigstoreInstance,
       pushToRegistry: inputs.pushToRegistry,
-      githubToken: inputs.githubToken
+      githubToken: inputs.githubToken,
+      ociCompatMode: inputs.ociCompatMode
     })
 
     logAttestation(subjects, att, sigstoreInstance)