From c3218494802df537902f97cd38f7b8c2c90a3595 Mon Sep 17 00:00:00 2001
From: Brian DeHamer <bdehamer@github.com>
Date: Fri, 31 May 2024 10:05:27 -0700
Subject: [PATCH] add private input to skip attestation store

Signed-off-by: Brian DeHamer <bdehamer@github.com>
---
 __tests__/index.test.ts | 3 ++-
 dist/index.js           | 9 ++++++---
 src/attest.ts           | 4 +++-
 src/index.ts            | 3 +++
 src/main.ts             | 4 +++-
 5 files changed, 17 insertions(+), 6 deletions(-)

diff --git a/__tests__/index.test.ts b/__tests__/index.test.ts
index 9681388..e8c4e86 100644
--- a/__tests__/index.test.ts
+++ b/__tests__/index.test.ts
@@ -67,7 +67,8 @@ describe('index', () => {
       pushToRegistry: false,
       createStorageRecord: true,
       showSummary: true,
-      privateSigning: false
+      privateSigning: false,
+      skipAttestationStore: false
     })
   })
 })
diff --git a/dist/index.js b/dist/index.js
index 6cddbf3..8d16882 100644
--- a/dist/index.js
+++ b/dist/index.js
@@ -120862,7 +120862,8 @@ const createAttestation = async (subjects, predicate, opts) => {
         predicateType: predicate.type,
         predicate: predicate.params,
         sigstore: opts.sigstoreInstance,
-        token: opts.githubToken
+        token: opts.githubToken,
+        skipWrite: opts.skipAttestationStore
     });
     const result = attestation;
     if (subjects.length === 1 && opts.pushToRegistry) {
@@ -121159,7 +121160,8 @@ async function run(inputs) {
             pushToRegistry: inputs.pushToRegistry,
             createStorageRecord: inputs.createStorageRecord,
             subjectVersion: inputs.subjectVersion,
-            githubToken: inputs.githubToken
+            githubToken: inputs.githubToken,
+            skipAttestationStore: inputs.skipAttestationStore
         });
         logAttestation(subjects, att, sigstoreInstance);
         // Write attestation bundle to output file
@@ -121304,7 +121306,8 @@ const inputs = {
     showSummary: getBooleanInput('show-summary'),
     githubToken: getInput('github-token'),
     // undocumented -- not part of public interface
-    privateSigning: ['true', 'True', 'TRUE', '1'].includes(getInput('private-signing'))
+    privateSigning: ['true', 'True', 'TRUE', '1'].includes(getInput('private-signing')),
+    skipAttestationStore: ['true', 'True', 'TRUE', '1'].includes(getInput('skip-attestation-store'))
 };
 /* eslint-disable-next-line @typescript-eslint/no-floating-promises */
 run(inputs);
diff --git a/src/attest.ts b/src/attest.ts
index e927732..ee9b023 100644
--- a/src/attest.ts
+++ b/src/attest.ts
@@ -28,6 +28,7 @@ export const createAttestation = async (
     createStorageRecord: boolean
     subjectVersion?: string
     githubToken: string
+    skipAttestationStore?: boolean
   }
 ): Promise<AttestResult> => {
   // Sign provenance w/ Sigstore
@@ -36,7 +37,8 @@ export const createAttestation = async (
     predicateType: predicate.type,
     predicate: predicate.params,
     sigstore: opts.sigstoreInstance,
-    token: opts.githubToken
+    token: opts.githubToken,
+    skipWrite: opts.skipAttestationStore
   })
 
   const result: AttestResult = attestation
diff --git a/src/index.ts b/src/index.ts
index def53e0..d458d81 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -21,6 +21,9 @@ const inputs: RunInputs = {
   // undocumented -- not part of public interface
   privateSigning: ['true', 'True', 'TRUE', '1'].includes(
     core.getInput('private-signing')
+  ),
+  skipAttestationStore: ['true', 'True', 'TRUE', '1'].includes(
+    core.getInput('skip-attestation-store')
   )
 }
 
diff --git a/src/main.ts b/src/main.ts
index 54d7fea..05a0354 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -39,6 +39,7 @@ export type RunInputs = SubjectInputs &
     githubToken: string
     showSummary: boolean
     privateSigning: boolean
+    skipAttestationStore: boolean
   }
 
 /* istanbul ignore next */
@@ -99,7 +100,8 @@ export async function run(inputs: RunInputs): Promise<void> {
       pushToRegistry: inputs.pushToRegistry,
       createStorageRecord: inputs.createStorageRecord,
       subjectVersion: inputs.subjectVersion,
-      githubToken: inputs.githubToken
+      githubToken: inputs.githubToken,
+      skipAttestationStore: inputs.skipAttestationStore
     })
 
     logAttestation(subjects, att, sigstoreInstance)