add private input to skip attestation store

Signed-off-by: Brian DeHamer <[email protected]>

__tests__/index.test.ts

@@ -67,7 +67,8 @@ describe('index', () => {
       pushToRegistry: false,
       createStorageRecord: true,
       showSummary: true,
-      privateSigning: false
+      privateSigning: false,
+      skipAttestationStore: false
     })
   })
 })

dist/index.js

@@ -120862,7 +120862,8 @@ const createAttestation = async (subjects, predicate, opts) => {
         predicateType: predicate.type,
         predicate: predicate.params,
         sigstore: opts.sigstoreInstance,
-        token: opts.githubToken
+        token: opts.githubToken,
+        skipWrite: opts.skipAttestationStore
     });
     const result = attestation;
     if (subjects.length === 1 && opts.pushToRegistry) {
@@ -121159,7 +121160,8 @@ async function run(inputs) {
             pushToRegistry: inputs.pushToRegistry,
             createStorageRecord: inputs.createStorageRecord,
             subjectVersion: inputs.subjectVersion,
-            githubToken: inputs.githubToken
+            githubToken: inputs.githubToken,
+            skipAttestationStore: inputs.skipAttestationStore
         });
         logAttestation(subjects, att, sigstoreInstance);
         // Write attestation bundle to output file
@@ -121304,7 +121306,8 @@ const inputs = {
     showSummary: getBooleanInput('show-summary'),
     githubToken: getInput('github-token'),
     // undocumented -- not part of public interface
-    privateSigning: ['true', 'True', 'TRUE', '1'].includes(getInput('private-signing'))
+    privateSigning: ['true', 'True', 'TRUE', '1'].includes(getInput('private-signing')),
+    skipAttestationStore: ['true', 'True', 'TRUE', '1'].includes(getInput('skip-attestation-store'))
 };
 /* eslint-disable-next-line @typescript-eslint/no-floating-promises */
 run(inputs);

src/attest.ts

@@ -28,6 +28,7 @@ export const createAttestation = async (
     createStorageRecord: boolean
     subjectVersion?: string
     githubToken: string
+    skipAttestationStore?: boolean
   }
 ): Promise<AttestResult> => {
   // Sign provenance w/ Sigstore
@@ -36,7 +37,8 @@ export const createAttestation = async (
     predicateType: predicate.type,
     predicate: predicate.params,
     sigstore: opts.sigstoreInstance,
-    token: opts.githubToken
+    token: opts.githubToken,
+    skipWrite: opts.skipAttestationStore
   })
 
   const result: AttestResult = attestation

src/index.ts

@@ -21,6 +21,9 @@ const inputs: RunInputs = {
   // undocumented -- not part of public interface
   privateSigning: ['true', 'True', 'TRUE', '1'].includes(
     core.getInput('private-signing')
+  ),
+  skipAttestationStore: ['true', 'True', 'TRUE', '1'].includes(
+    core.getInput('skip-attestation-store')
   )
 }
 

src/main.ts

@@ -39,6 +39,7 @@ export type RunInputs = SubjectInputs &
     githubToken: string
     showSummary: boolean
     privateSigning: boolean
+    skipAttestationStore: boolean
   }
 
 /* istanbul ignore next */
@@ -99,7 +100,8 @@ export async function run(inputs: RunInputs): Promise<void> {
       pushToRegistry: inputs.pushToRegistry,
       createStorageRecord: inputs.createStorageRecord,
       subjectVersion: inputs.subjectVersion,
-      githubToken: inputs.githubToken
+      githubToken: inputs.githubToken,
+      skipAttestationStore: inputs.skipAttestationStore
     })
 
     logAttestation(subjects, att, sigstoreInstance)