force signing with github private sigstore (#17)

Signed-off-by: Brian DeHamer <bdehamer@github.com>
2024-02-29 08:12:24 -08:00
parent 2246042d69
commit e6f9108958
1 changed files with 2 additions and 0 deletions
@@ -67,6 +67,8 @@ jobs:
          echo "sha-256=${SHA_256}" >> "$GITHUB_OUTPUT"
      - name: Run attest
        id: attest
+        env:
+          INPUT_PRIVATE-SIGNING: 'true'
        uses: ./
        with:
          subject-name: 'https://api.github.com${{ env.SUBJECT }}'