action.yml

name: 'DataTrails SCITT API'
description: 'Register, Get Receipts and Query Feeds from the DataTrails SCITT API'
branding:
  icon: 'check'
  color: 'blue'
inputs:
  content-type:
    description: 'The payload content type (iana mediaType) to be registered on the SCITT Service (eg: application/spdx+json, application/vnd.cyclonedx+json, Scan Result, Attestation)'
    required: true
  payload-file:
    description: 'The payload file to be registered on the SCITT Service (eg: SBOM, Scan Result, Attestation)'
    required: true
  payload-location:
    description: 'Optional location the content of the payload may be stored.'
    required: false
  subject:
    description: 'Unique ID for the collection of statements about an artifact'
    required: true
  transparent-statement-file:
    description: 'The filename to save the cbor transparent statement, which includes the signed-statement and the receipt'
    required: false
    default: 'transparent-statement.cbor'
  issuer:
    description: 'The name of the issuer, set to CTW_Claims:iss'
    required: true
  signing-key-file:
    description: 'The .pem file used to sign the statement'
    required: true

runs:
  using: 'docker'
  image: 'Dockerfile'
  args:
    - ${{ inputs.content-type }}
    - ${{ inputs.payload-file }}
    - ${{ inputs.payload-location}}
    - ${{ inputs.subject }}
    - ${{ inputs.transparent-statement-file }}
    - ${{ inputs.issuer }}
    - ${{ inputs.signing-key-file }}