actions / attest

Action for generating attestations for workflow artifacts
MIT License
28 stars 5 forks source link

fix bug w/ private-signing input #77

Closed bdehamer closed 3 months ago

bdehamer commented 3 months ago

Fix bug related to the reading of the private-signing input variable.

Since this variable is not officially part of the action interface (undocumented), we can't provide a default value for it. The getBooleanInput expects the variable to contain a valid boolean value and will throw an error if one is not found. To properly handle the case of an empty input here ("") we need to use the getInput helper instead and do our own check for boolean values.