54d9a343c3357a4739d140b3d98c01271631d640
This involves generating the attestation in the code using the new attest library in the actions toolkit.
Publish Action Package
This action packages your action as OCI artifacts and publishes it to the GitHub Container registry.
This allows your action to be consumed as an immutable package even if a SemVer is specified in the consumer's workflow file.
Your action workflow must be triggered on release as in the following example. The release's title must follow semantic versioning.
Then consumers of your action will then be able to specify the version, e.g., - uses: your-name/your-action@v1.2.3 or even - uses: your-name/your-action@v1.
Usage
on:
release:
- uses: immutable-actions/publish-action-package@v1
License
The scripts and documentation in this project are released under the MIT License.
Description
Languages
TypeScript
98.7%
Shell
1.3%