notaryproject / notation-action

GitHub Actions for signing and verifying artifacts with Notation
https://notaryproject.dev/
Apache License 2.0
16 stars 7 forks source link

checking version of plugins #32

Open Two-Hearts opened 1 year ago

Two-Hearts commented 1 year ago

Currently, the Notation: Sign action checks duplicate plugins by name. This is to reduce roundtrips and download time when multiple signings happen in a single workflow. User might want to use different versions of plugins to produce different versions of signature for backward compatibility if there is a breaking change between those two versions. Created this issue to track the above scenario.

_Originally posted by @shizhMSFT in https://github.com/notaryproject/notation-action/pull/31#discussion_r1289837083_