https://github.com/deislabs/ratify-action

Ratify Github Action
https://github.com/deislabs/ratify-action

Last synced: 11 months ago
JSON representation

Ratify Github Action

• Host: GitHub
• URL: https://github.com/deislabs/ratify-action
• Owner: deislabs
• License: mit
• Archived: true
• Created: 2022-02-02T22:46:29.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2022-02-10T00:45:17.000Z (over 4 years ago)
• Last Synced: 2025-03-22T11:16:32.035Z (about 1 year ago)
• Language: Shell
• Size: 5.86 KB
• Stars: 1
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md
  • Codeowners: CODEOWNERS

Awesome Lists containing this project

README

          
## About

An action to run [Ratify](https://github.com/deislabs/ratify) on specified images.

## Usage

Ratify requires a signing certificate and a subject image reference.  Certificates must be present in the action workspace.  The following example shows how to do this by either checking the certificate into the repository or storing it as a Github secret.

``` yaml

jobs:

  ratify_job:

    runs-on: ubuntu-latest

    name: Verify subject

    steps:

      # needed if signing keys are checked into repo

      - name: checkout repo

        id: checkout

        uses: actions/checkout@v2

      - shell: bash

        env:

          SIGNING_CERT: ${{ secrets.SIGNING_CERT }}

        run: |

          echo "$SIGNING_CERT" > cert2.crt

      - name: Ratify verification step

        id: ratify

        uses: deislabs/ratify-action

        with:

          # comma delimited list of signing certificates

          # path relative to action working directory

          verification-certs: '.crt,cert2.crt'

          subject: '/'

      - name: Get verification results

        run: echo "Verification results are ${{ steps.ratify.outputs.verification }}"

```

## Contributing

Please see our [contributing guide](./CONTRIBUTING.md)

## Support

[Please search open issues on GitHub](https://github.com/deislabs/ratify-action/issues), and if your issue isn't already represented please [open a new one](https://github.com/deislabs/ratify-action/issues/new). The Ratify action maintainers will respond to the best of their abilities.

## Code of Conduct

Please see our [Code of Conduct](./CODE_OF_CONDUCT.md)