@docker/actions-toolkit 0.63.0 → 0.65.0

package/lib/sigstore/sigstore.js

@@ -0,0 +1,362 @@
+"use strict";
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sigstore = void 0;
+const crypto_1 = require("crypto");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const core = __importStar(require("@actions/core"));
+const sign_1 = require("@actions/attest/lib/sign");
+const bundle_1 = require("@sigstore/bundle");
+const cosign_1 = require("../cosign/cosign");
+const exec_1 = require("../exec");
+const github_1 = require("../github");
+const imagetools_1 = require("../buildx/imagetools");
+const intoto_1 = require("../types/intoto/intoto");
+const sigstore_1 = require("../types/sigstore/sigstore");
+class Sigstore {
+    constructor(opts) {
+        this.cosign = (opts === null || opts === void 0 ? void 0 : opts.cosign) || new cosign_1.Cosign();
+        this.imageTools = (opts === null || opts === void 0 ? void 0 : opts.imageTools) || new imagetools_1.ImageTools();
+    }
+    signAttestationManifests(opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!(yield this.cosign.isAvailable())) {
+                throw new Error('Cosign is required to sign attestation manifests');
+            }
+            const result = {};
+            try {
+                if (!process.env.ACTIONS_ID_TOKEN_REQUEST_URL) {
+                    throw new Error('missing "id-token" permission. Please add "permissions: id-token: write" to your workflow.');
+                }
+                const endpoints = this.signingEndpoints(opts.noTransparencyLog);
+                core.info(`Using Sigstore signing endpoint: ${endpoints.fulcioURL}`);
+                const noTransparencyLog = Sigstore.noTransparencyLog(opts.noTransparencyLog);
+                const attestationDigests = yield this.imageTools.attestationDigests(`${opts.imageName}@${opts.imageDigest}`);
+                for (const attestationDigest of attestationDigests) {
+                    const attestationRef = `${opts.imageName}@${attestationDigest}`;
+                    yield core.group(`Signing attestation manifest ${attestationRef}`, () => __awaiter(this, void 0, void 0, function* () {
+                        // prettier-ignore
+                        const cosignArgs = [
+                            '--verbose',
+                            'sign',
+                            '--yes',
+                            '--oidc-provider', 'github-actions',
+                            '--registry-referrers-mode', 'oci-1-1',
+                            '--new-bundle-format',
+                            '--use-signing-config'
+                        ];
+                        if (noTransparencyLog) {
+                            cosignArgs.push('--tlog-upload=false');
+                        }
+                        core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+                        const execRes = yield exec_1.Exec.getExecOutput('cosign', [...cosignArgs, attestationRef], {
+                            ignoreReturnCode: true,
+                            silent: true,
+                            env: Object.assign({}, process.env, {
+                                COSIGN_EXPERIMENTAL: '1'
+                            })
+                        });
+                        const signResult = cosign_1.Cosign.parseCommandOutput(execRes.stderr.trim());
+                        if (execRes.exitCode != 0) {
+                            if (signResult.errors && signResult.errors.length > 0) {
+                                const errorMessages = signResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
+                                throw new Error(`Cosign sign command failed with errors:\n${errorMessages}`);
+                            }
+                            else {
+                                throw new Error(`Cosign sign command failed with exit code ${execRes.exitCode}`);
+                            }
+                        }
+                        const attest = Sigstore.toAttestation((0, bundle_1.bundleFromJSON)(signResult.bundle));
+                        if (attest.tlogID) {
+                            core.info(`Uploaded to Rekor transparency log: ${sigstore_1.SEARCH_URL}?logIndex=${attest.tlogID}`);
+                        }
+                        core.info(`Signature manifest pushed: https://oci.dag.dev/?referrers=${attestationRef}`);
+                        result[attestationRef] = Object.assign(Object.assign({}, attest), { imageName: opts.imageName });
+                    }));
+                }
+            }
+            catch (err) {
+                throw new Error(`Signing BuildKit attestation manifests failed: ${err.message}`);
+            }
+            return result;
+        });
+    }
+    verifySignedManifests(opts, signed) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const result = {};
+            const retries = (_a = opts.retries) !== null && _a !== void 0 ? _a : 15;
+            if (!(yield this.cosign.isAvailable())) {
+                throw new Error('Cosign is required to verify signed manifests');
+            }
+            let lastError;
+            for (const [attestationRef, signedRes] of Object.entries(signed)) {
+                yield core.group(`Verifying signature of ${attestationRef}`, () => __awaiter(this, void 0, void 0, function* () {
+                    // prettier-ignore
+                    const cosignArgs = [
+                        '--verbose',
+                        'verify',
+                        '--experimental-oci11',
+                        '--new-bundle-format',
+                        '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
+                        '--certificate-identity-regexp', opts.certificateIdentityRegexp
+                    ];
+                    if (!signedRes.tlogID) {
+                        // skip tlog verification but still verify the signed timestamp
+                        cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
+                    }
+                    core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+                    for (let attempt = 0; attempt < retries; attempt++) {
+                        const execRes = yield exec_1.Exec.getExecOutput('cosign', [...cosignArgs, attestationRef], {
+                            ignoreReturnCode: true,
+                            silent: true,
+                            env: Object.assign({}, process.env, {
+                                COSIGN_EXPERIMENTAL: '1'
+                            })
+                        });
+                        const verifyResult = cosign_1.Cosign.parseCommandOutput(execRes.stderr.trim());
+                        if (execRes.exitCode === 0) {
+                            result[attestationRef] = {
+                                cosignArgs: cosignArgs,
+                                signatureManifestDigest: verifyResult.signatureManifestDigest
+                            };
+                            lastError = undefined;
+                            core.info(`Signature manifest verified: https://oci.dag.dev/?image=${signedRes.imageName}@${verifyResult.signatureManifestDigest}`);
+                            break;
+                        }
+                        else {
+                            if (verifyResult.errors && verifyResult.errors.length > 0) {
+                                const errorMessages = verifyResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
+                                lastError = new Error(`Cosign verify command failed with errors:\n${errorMessages}`);
+                                if (verifyResult.errors.some(e => e.code === 'MANIFEST_UNKNOWN')) {
+                                    core.info(`Cosign verify command failed with MANIFEST_UNKNOWN, retrying attempt ${attempt + 1}/${retries}...\n${errorMessages}`);
+                                    yield new Promise(res => setTimeout(res, Math.pow(2, attempt) * 100));
+                                }
+                                else {
+                                    throw lastError;
+                                }
+                            }
+                            else {
+                                throw new Error(`Cosign verify command failed: ${execRes.stderr}`);
+                            }
+                        }
+                    }
+                }));
+            }
+            if (lastError) {
+                throw lastError;
+            }
+            return result;
+        });
+    }
+    signProvenanceBlobs(opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const result = {};
+            try {
+                if (!process.env.ACTIONS_ID_TOKEN_REQUEST_URL) {
+                    throw new Error('missing "id-token" permission. Please add "permissions: id-token: write" to your workflow.');
+                }
+                const endpoints = this.signingEndpoints(opts.noTransparencyLog);
+                core.info(`Using Sigstore signing endpoint: ${endpoints.fulcioURL}`);
+                const provenanceBlobs = Sigstore.getProvenanceBlobs(opts);
+                for (const p of Object.keys(provenanceBlobs)) {
+                    yield core.group(`Signing ${p}`, () => __awaiter(this, void 0, void 0, function* () {
+                        var _a;
+                        const blob = provenanceBlobs[p];
+                        const bundlePath = path_1.default.join(path_1.default.dirname(p), `${(_a = opts.name) !== null && _a !== void 0 ? _a : 'provenance'}.sigstore.json`);
+                        const subjects = Sigstore.getProvenanceSubjects(blob);
+                        if (subjects.length === 0) {
+                            core.warning(`No subjects found in provenance ${p}, skip signing.`);
+                            return;
+                        }
+                        const bundle = yield (0, sign_1.signPayload)({
+                            body: blob,
+                            type: intoto_1.MEDIATYPE_PAYLOAD
+                        }, endpoints);
+                        const attest = Sigstore.toAttestation(bundle);
+                        core.info(`Provenance blob signed for:`);
+                        for (const subject of subjects) {
+                            const [digestAlg, digestValue] = Object.entries(subject.digest)[0] || [];
+                            core.info(`  - ${subject.name} (${digestAlg}:${digestValue})`);
+                        }
+                        if (attest.tlogID) {
+                            core.info(`Attestation signature uploaded to Rekor transparency log: ${sigstore_1.SEARCH_URL}?logIndex=${attest.tlogID}`);
+                        }
+                        core.info(`Writing Sigstore bundle to: ${bundlePath}`);
+                        fs_1.default.writeFileSync(bundlePath, JSON.stringify(attest.bundle, null, 2), {
+                            encoding: 'utf-8'
+                        });
+                        result[p] = Object.assign(Object.assign({}, attest), { bundlePath: bundlePath, subjects: subjects });
+                    }));
+                }
+            }
+            catch (err) {
+                throw new Error(`Signing BuildKit provenance blobs failed: ${err.message}`);
+            }
+            return result;
+        });
+    }
+    verifySignedArtifacts(opts, signed) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const result = {};
+            if (!(yield this.cosign.isAvailable())) {
+                throw new Error('Cosign is required to verify signed artifacts');
+            }
+            for (const [provenancePath, signedRes] of Object.entries(signed)) {
+                const baseDir = path_1.default.dirname(provenancePath);
+                yield core.group(`Verifying signature bundle ${signedRes.bundlePath}`, () => __awaiter(this, void 0, void 0, function* () {
+                    for (const subject of signedRes.subjects) {
+                        const artifactPath = path_1.default.join(baseDir, subject.name);
+                        core.info(`Verifying signed artifact ${artifactPath}`);
+                        // prettier-ignore
+                        const cosignArgs = [
+                            'verify-blob-attestation',
+                            '--new-bundle-format',
+                            '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
+                            '--certificate-identity-regexp', opts.certificateIdentityRegexp
+                        ];
+                        if (!signedRes.tlogID) {
+                            // if there is no tlog entry, we skip tlog verification but still verify the signed timestamp
+                            cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
+                        }
+                        const execRes = yield exec_1.Exec.getExecOutput('cosign', [...cosignArgs, '--bundle', signedRes.bundlePath, artifactPath], {
+                            ignoreReturnCode: true
+                        });
+                        if (execRes.stderr.length > 0 && execRes.exitCode != 0) {
+                            throw new Error(execRes.stderr);
+                        }
+                        result[artifactPath] = {
+                            bundlePath: signedRes.bundlePath,
+                            cosignArgs: cosignArgs
+                        };
+                    }
+                }));
+            }
+            return result;
+        });
+    }
+    signingEndpoints(noTransparencyLog) {
+        noTransparencyLog = Sigstore.noTransparencyLog(noTransparencyLog);
+        core.info(`Upload to transparency log: ${noTransparencyLog ? 'disabled' : 'enabled'}`);
+        return {
+            fulcioURL: sigstore_1.FULCIO_URL,
+            rekorURL: noTransparencyLog ? undefined : sigstore_1.REKOR_URL,
+            tsaServerURL: sigstore_1.TSASERVER_URL
+        };
+    }
+    static noTransparencyLog(noTransparencyLog) {
+        var _a;
+        return noTransparencyLog !== null && noTransparencyLog !== void 0 ? noTransparencyLog : (_a = github_1.GitHub.context.payload.repository) === null || _a === void 0 ? void 0 : _a.private;
+    }
+    static getProvenanceBlobs(opts) {
+        // For single platform build
+        const singleProvenance = path_1.default.join(opts.localExportDir, 'provenance.json');
+        if (fs_1.default.existsSync(singleProvenance)) {
+            return { [singleProvenance]: fs_1.default.readFileSync(singleProvenance) };
+        }
+        // For multi-platform build
+        const dirents = fs_1.default.readdirSync(opts.localExportDir, { withFileTypes: true });
+        const platformFolders = dirents.filter(dirent => dirent.isDirectory());
+        if (platformFolders.length > 0 && platformFolders.length === dirents.length && platformFolders.every(platformFolder => fs_1.default.existsSync(path_1.default.join(opts.localExportDir, platformFolder.name, 'provenance.json')))) {
+            const result = {};
+            for (const platformFolder of platformFolders) {
+                const p = path_1.default.join(opts.localExportDir, platformFolder.name, 'provenance.json');
+                result[p] = fs_1.default.readFileSync(p);
+            }
+            return result;
+        }
+        throw new Error(`No valid provenance.json found in ${opts.localExportDir}`);
+    }
+    static getProvenanceSubjects(body) {
+        const statement = JSON.parse(body.toString());
+        return statement.subject.map(s => ({
+            name: s.name,
+            digest: s.digest
+        }));
+    }
+    // https://github.com/actions/toolkit/blob/d3ab50471b4ff1d1274dffb90ef9c5d9949b4886/packages/attest/src/attest.ts#L90
+    static toAttestation(bundle) {
+        let certBytes;
+        switch (bundle.verificationMaterial.content.$case) {
+            case 'x509CertificateChain':
+                certBytes = bundle.verificationMaterial.content.x509CertificateChain.certificates[0].rawBytes;
+                break;
+            case 'certificate':
+                certBytes = bundle.verificationMaterial.content.certificate.rawBytes;
+                break;
+            default:
+                throw new Error('Bundle must contain an x509 certificate');
+        }
+        const signingCert = new crypto_1.X509Certificate(certBytes);
+        // Collect transparency log ID if available
+        const tlogEntries = bundle.verificationMaterial.tlogEntries;
+        const tlogID = tlogEntries.length > 0 ? tlogEntries[0].logIndex : undefined;
+        return {
+            bundle: (0, bundle_1.bundleToJSON)(bundle),
+            certificate: signingCert.toString(),
+            tlogID: tlogID
+        };
+    }
+}
+exports.Sigstore = Sigstore;
+//# sourceMappingURL=sigstore.js.map

package/lib/sigstore/sigstore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sigstore.js","sourceRoot":"","sources":["../../src/sigstore/sigstore.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,mCAAuC;AACvC,4CAAoB;AACpB,gDAAwB;AAGxB,oDAAsC;AACtC,mDAAqD;AACrD,6CAA8D;AAI9D,6CAAwC;AACxC,kCAA6B;AAC7B,sCAAiC;AACjC,qDAAgD;AAEhD,mDAA8F;AAC9F,yDAA4F;AA+C5F,MAAa,QAAQ;IAInB,YAAY,IAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,KAAI,IAAI,eAAM,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,KAAI,IAAI,uBAAU,EAAE,CAAC;IACzD,CAAC;IAEY,wBAAwB,CAAC,IAAkC;;YACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,MAAM,GAAmD,EAAE,CAAC;YAClE,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;gBAChH,CAAC;gBAED,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,oCAAoC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;gBACrE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAE7E,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC7G,KAAK,MAAM,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;oBACnD,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,iBAAiB,EAAE,CAAC;oBAChE,MAAM,IAAI,CAAC,KAAK,CAAC,gCAAgC,cAAc,EAAE,EAAE,GAAS,EAAE;wBAC5E,kBAAkB;wBAClB,MAAM,UAAU,GAAG;4BACjB,WAAW;4BACX,MAAM;4BACN,OAAO;4BACP,iBAAiB,EAAE,gBAAgB;4BACnC,2BAA2B,EAAE,SAAS;4BACtC,qBAAqB;4BACrB,sBAAsB;yBACvB,CAAC;wBACF,IAAI,iBAAiB,EAAE,CAAC;4BACtB,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;wBACzC,CAAC;wBACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,UAAU,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAC1E,MAAM,OAAO,GAAG,MAAM,WAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,GAAG,UAAU,EAAE,cAAc,CAAC,EAAE;4BAClF,gBAAgB,EAAE,IAAI;4BACtB,MAAM,EAAE,IAAI;4BACZ,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE;gCAClC,mBAAmB,EAAE,GAAG;6BACzB,CAEA;yBACF,CAAC,CAAC;wBACH,MAAM,UAAU,GAAG,eAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;wBACpE,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;4BAC1B,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACtD,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gCACxG,MAAM,IAAI,KAAK,CAAC,4CAA4C,aAAa,EAAE,CAAC,CAAC;4BAC/E,CAAC;iCAAM,CAAC;gCACN,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;4BACnF,CAAC;wBACH,CAAC;wBACD,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAA,uBAAc,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;wBACzE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;4BAClB,IAAI,CAAC,IAAI,CAAC,uCAAuC,qBAAU,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC3F,CAAC;wBACD,IAAI,CAAC,IAAI,CAAC,6DAA6D,cAAc,EAAE,CAAC,CAAC;wBACzF,MAAM,CAAC,cAAc,CAAC,mCACjB,MAAM,KACT,SAAS,EAAE,IAAI,CAAC,SAAS,GAC1B,CAAC;oBACJ,CAAC,CAAA,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,kDAAmD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAEY,qBAAqB,CAAC,IAA+B,EAAE,MAAsD;;;YACxH,MAAM,MAAM,GAAgD,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAA,IAAI,CAAC,OAAO,mCAAI,EAAE,CAAC;YAEnC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,SAA4B,CAAC;YACjC,KAAK,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,cAAc,EAAE,EAAE,GAAS,EAAE;oBACtE,kBAAkB;oBAClB,MAAM,UAAU,GAAG;wBACjB,WAAW;wBACX,QAAQ;wBACR,sBAAsB;wBACtB,qBAAqB;wBACrB,2BAA2B,EAAE,6CAA6C;wBAC1E,+BAA+B,EAAE,IAAI,CAAC,yBAAyB;qBAChE,CAAC;oBACF,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;wBACtB,+DAA+D;wBAC/D,UAAU,CAAC,IAAI,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;oBACvE,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,UAAU,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC1E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;wBACnD,MAAM,OAAO,GAAG,MAAM,WAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,GAAG,UAAU,EAAE,cAAc,CAAC,EAAE;4BAClF,gBAAgB,EAAE,IAAI;4BACtB,MAAM,EAAE,IAAI;4BACZ,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE;gCAClC,mBAAmB,EAAE,GAAG;6BACzB,CAA4B;yBAC9B,CAAC,CAAC;wBACH,MAAM,YAAY,GAAG,eAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;wBACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;4BAC3B,MAAM,CAAC,cAAc,CAAC,GAAG;gCACvB,UAAU,EAAE,UAAU;gCACtB,uBAAuB,EAAE,YAAY,CAAC,uBAAwB;6BAC/D,CAAC;4BACF,SAAS,GAAG,SAAS,CAAC;4BACtB,IAAI,CAAC,IAAI,CAAC,2DAA2D,SAAS,CAAC,SAAS,IAAI,YAAY,CAAC,uBAAuB,EAAE,CAAC,CAAC;4BACpI,MAAM;wBACR,CAAC;6BAAM,CAAC;4BACN,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCAC1D,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gCAC1G,SAAS,GAAG,IAAI,KAAK,CAAC,8CAA8C,aAAa,EAAE,CAAC,CAAC;gCACrF,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,EAAE,CAAC;oCACjE,IAAI,CAAC,IAAI,CAAC,wEAAwE,OAAO,GAAG,CAAC,IAAI,OAAO,QAAQ,aAAa,EAAE,CAAC,CAAC;oCACjI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gCACxE,CAAC;qCAAM,CAAC;oCACN,MAAM,SAAS,CAAC;gCAClB,CAAC;4BACH,CAAC;iCAAM,CAAC;gCACN,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;4BACrE,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC,CAAA,CAAC,CAAC;YACL,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAEY,mBAAmB,CAAC,IAA6B;;YAC5D,MAAM,MAAM,GAA8C,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;gBAChH,CAAC;gBAED,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,oCAAoC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;gBAErE,MAAM,eAAe,GAAG,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC1D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,GAAS,EAAE;;wBAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;wBAChC,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,cAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAA,IAAI,CAAC,IAAI,mCAAI,YAAY,gBAAgB,CAAC,CAAC;wBAC5F,MAAM,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;wBACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAC1B,IAAI,CAAC,OAAO,CAAC,mCAAmC,CAAC,iBAAiB,CAAC,CAAC;4BACpE,OAAO;wBACT,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAW,EAC9B;4BACE,IAAI,EAAE,IAAI;4BACV,IAAI,EAAE,0BAAwB;yBAC/B,EACD,SAAS,CACV,CAAC;wBACF,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;wBAC9C,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;wBACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;4BAC/B,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;4BACzE,IAAI,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,GAAG,CAAC,CAAC;wBACjE,CAAC;wBACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;4BAClB,IAAI,CAAC,IAAI,CAAC,6DAA6D,qBAAU,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;wBACjH,CAAC;wBACD,IAAI,CAAC,IAAI,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;wBACvD,YAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;4BACnE,QAAQ,EAAE,OAAO;yBAClB,CAAC,CAAC;wBACH,MAAM,CAAC,CAAC,CAAC,mCACJ,MAAM,KACT,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,QAAQ,GACnB,CAAC;oBACJ,CAAC,CAAA,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,6CAA8C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAEY,qBAAqB,CAAC,IAA+B,EAAE,MAAiD;;YACnH,MAAM,MAAM,GAAgD,EAAE,CAAC;YAC/D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,KAAK,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,MAAM,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,8BAA8B,SAAS,CAAC,UAAU,EAAE,EAAE,GAAS,EAAE;oBAChF,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;wBACzC,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;wBACtD,IAAI,CAAC,IAAI,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAC;wBACvD,kBAAkB;wBAClB,MAAM,UAAU,GAAG;4BACjB,yBAAyB;4BACzB,qBAAqB;4BACrB,2BAA2B,EAAE,6CAA6C;4BAC1E,+BAA+B,EAAE,IAAI,CAAC,yBAAyB;yBAChE,CAAA;wBACD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;4BACtB,6FAA6F;4BAC7F,UAAU,CAAC,IAAI,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;wBACvE,CAAC;wBACD,MAAM,OAAO,GAAG,MAAM,WAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,GAAG,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE;4BAClH,gBAAgB,EAAE,IAAI;yBACvB,CAAC,CAAC;wBACH,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;4BACvD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBAClC,CAAC;wBACD,MAAM,CAAC,YAAY,CAAC,GAAG;4BACrB,UAAU,EAAE,SAAS,CAAC,UAAU;4BAChC,UAAU,EAAE,UAAU;yBACvB,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAA,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAEO,gBAAgB,CAAC,iBAA2B;QAClD,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,+BAA+B,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,OAAO;YACL,SAAS,EAAE,qBAAU;YACrB,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAS;YACnD,YAAY,EAAE,wBAAa;SAC5B,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAAC,iBAA2B;;QAC1D,OAAO,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,MAAA,eAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,0CAAE,OAAO,CAAC;IACzE,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,IAA6B;QAC7D,4BAA4B;QAC5B,MAAM,gBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QAC3E,IAAI,YAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,OAAO,EAAC,CAAC,gBAAgB,CAAC,EAAE,YAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAC,CAAC;QACjE,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,EAAC,aAAa,EAAE,IAAI,EAAC,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACvE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9M,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;gBAC7C,MAAM,CAAC,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBACjF,MAAM,CAAC,CAAC,CAAC,GAAG,YAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,IAAY;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAE3C,CAAC;QACF,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,qHAAqH;IAC7G,MAAM,CAAC,aAAa,CAAC,MAAc;QACzC,IAAI,SAAiB,CAAC;QACtB,QAAQ,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClD,KAAK,sBAAsB;gBACzB,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9F,MAAM;YACR,KAAK,aAAa;gBAChB,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;gBACrE,MAAM;YACR;gBACE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,wBAAe,CAAC,SAAS,CAAC,CAAC;QAEnD,2CAA2C;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC;QAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5E,OAAO;YACL,MAAM,EAAE,IAAA,qBAAY,EAAC,MAAM,CAAC;YAC5B,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;CACF;AAjTD,4BAiTC"}

package/lib/toolkit.d.ts

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { GitHub } from './github';
 import { Buildx } from './buildx/buildx';
 import { Build as BuildxBuild } from './buildx/build';
 import { Bake as BuildxBake } from './buildx/bake';
@@ -21,8 +22,13 @@ import { Builder } from './buildx/builder';
 import { BuildKit } from './buildkit/buildkit';
 import { Compose } from './compose/compose';
 import { Install as ComposeInstall } from './compose/install';
+import { Cosign } from './cosign/cosign';
+import { Install as CosignInstall } from './cosign/install';
+import { Regctl } from './regclient/regctl';
+import { Install as RegctlInstall } from './regclient/install';
 import { Undock } from './undock/undock';
-import { GitHub } from './github';
+import { Install as UndockInstall } from './undock/install';
+import { Sigstore } from './sigstore/sigstore';
 export interface ToolkitOpts {
     /**
      * GitHub token to use for authentication.
@@ -40,6 +46,12 @@ export declare class Toolkit {
     buildkit: BuildKit;
     compose: Compose;
     composeInstall: ComposeInstall;
+    cosign: Cosign;
+    cosignInstall: CosignInstall;
+    regctl: Regctl;
+    regctlInstall: RegctlInstall;
+    sigstore: Sigstore;
     undock: Undock;
+    undockInstall: UndockInstall;
     constructor(opts?: ToolkitOpts);
 }

package/lib/toolkit.js

@@ -16,6 +16,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Toolkit = void 0;
+const github_1 = require("./github");
 const buildx_1 = require("./buildx/buildx");
 const build_1 = require("./buildx/build");
 const bake_1 = require("./buildx/bake");
@@ -24,8 +25,13 @@ const builder_1 = require("./buildx/builder");
 const buildkit_1 = require("./buildkit/buildkit");
 const compose_1 = require("./compose/compose");
 const install_2 = require("./compose/install");
+const cosign_1 = require("./cosign/cosign");
+const install_3 = require("./cosign/install");
+const regctl_1 = require("./regclient/regctl");
+const install_4 = require("./regclient/install");
 const undock_1 = require("./undock/undock");
-const github_1 = require("./github");
+const install_5 = require("./undock/install");
+const sigstore_1 = require("./sigstore/sigstore");
 class Toolkit {
     constructor(opts = {}) {
         this.github = new github_1.GitHub({ token: opts.githubToken });
@@ -37,7 +43,13 @@ class Toolkit {
         this.buildkit = new buildkit_1.BuildKit({ buildx: this.buildx });
         this.compose = new compose_1.Compose();
         this.composeInstall = new install_2.Install();
+        this.cosign = new cosign_1.Cosign();
+        this.cosignInstall = new install_3.Install({ buildx: this.buildx });
+        this.regctl = new regctl_1.Regctl();
+        this.regctlInstall = new install_4.Install();
+        this.sigstore = new sigstore_1.Sigstore();
         this.undock = new undock_1.Undock();
+        this.undockInstall = new install_5.Install();
     }
 }
 exports.Toolkit = Toolkit;

package/lib/toolkit.js.map

@@ -1 +1 @@
-{"version":3,"file":"toolkit.js","sourceRoot":"","sources":["../src/toolkit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,4CAAuC;AACvC,0CAAoD;AACpD,wCAAiD;AACjD,8CAA0D;AAC1D,8CAAyC;AACzC,kDAA6C;AAC7C,+CAA0C;AAC1C,+CAA4D;AAC5D,4CAAuC;AACvC,qCAAgC;AAUhC,MAAa,OAAO;IAYlB,YAAY,OAAoB,EAAE;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC,EAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,aAAW,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,WAAU,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAa,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAO,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAQ,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,iBAAc,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,EAAE,CAAC;IAC7B,CAAC;CACF;AAxBD,0BAwBC"}
+{"version":3,"file":"toolkit.js","sourceRoot":"","sources":["../src/toolkit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,qCAAgC;AAChC,4CAAuC;AACvC,0CAAoD;AACpD,wCAAiD;AACjD,8CAA0D;AAC1D,8CAAyC;AACzC,kDAA6C;AAC7C,+CAA0C;AAC1C,+CAA4D;AAC5D,4CAAuC;AACvC,8CAA0D;AAC1D,+CAA0C;AAC1C,iDAA6D;AAC7D,4CAAuC;AACvC,8CAA0D;AAC1D,kDAA6C;AAU7C,MAAa,OAAO;IAkBlB,YAAY,OAAoB,EAAE;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC,EAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,aAAW,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,WAAU,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAa,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAO,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAQ,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,iBAAc,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAa,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAa,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAa,EAAE,CAAC;IAC3C,CAAC;CACF;AApCD,0BAoCC"}

package/lib/types/buildx/buildx.d.ts

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { GitHubContentOpts } from '../github';
 export interface Cert {
     cacert?: string;
     cert?: string;
@@ -22,7 +23,7 @@ export interface DownloadVersion {
     key: string;
     version: string;
     downloadURL: string;
-    releasesURL: string;
+    contentOpts: GitHubContentOpts;
 }
 export interface LocalRefsOpts {
     dir: string;

package/lib/types/buildx/imagetools.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Versioned } from '../oci/versioned';
+import { Descriptor } from '../oci/descriptor';
+import { Digest } from '../oci/digest';
+export interface Manifest extends Versioned {
+    mediaType?: string;
+    digest: Digest;
+    size: number;
+    manifests?: Descriptor[];
+    annotations?: Record<string, string>;
+}

package/lib/types/buildx/imagetools.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=imagetools.js.map

package/lib/types/buildx/imagetools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imagetools.js","sourceRoot":"","sources":["../../../src/types/buildx/imagetools.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG"}

package/lib/types/compose/compose.d.ts

@@ -13,9 +13,10 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { GitHubContentOpts } from '../github';
 export interface DownloadVersion {
     key: string;
     version: string;
     downloadURL: string;
-    releasesURL: string;
+    contentOpts: GitHubContentOpts;
 }

package/lib/types/cosign/cosign.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { GitHubContentOpts } from '../github';
+export interface DownloadVersion {
+    version: string;
+    downloadURL: string;
+    contentOpts: GitHubContentOpts;
+}

package/lib/types/cosign/cosign.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=cosign.js.map

package/lib/types/cosign/cosign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cosign.js","sourceRoot":"","sources":["../../../src/types/cosign/cosign.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG"}

package/lib/types/github.d.ts

@@ -24,6 +24,12 @@ export interface GitHubRelease {
     html_url: string;
     assets: Array<string>;
 }
+export interface GitHubContentOpts {
+    owner: string;
+    repo: string;
+    ref?: string;
+    path: string;
+}
 export type GitHubRepo = OctoOpenApiTypes['schemas']['repository'];
 export interface GitHubActionsRuntimeToken extends JwtPayload {
     ac?: string;

package/lib/types/intoto/intoto.d.ts

@@ -15,3 +15,7 @@
  */
 export declare const MEDIATYPE_PAYLOAD = "application/vnd.in-toto+json";
 export declare const MEDIATYPE_PREDICATE = "in-toto.io/predicate-type";
+export interface Subject {
+    name: string;
+    digest: Record<string, string>;
+}

package/lib/types/regclient/regclient.d.ts

@@ -13,8 +13,9 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { GitHubContentOpts } from '../github';
 export interface DownloadVersion {
     version: string;
     downloadURL: string;
-    releasesURL: string;
+    contentOpts: GitHubContentOpts;
 }

package/lib/types/sigstore/sigstore.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export declare const FULCIO_URL = "https://fulcio.sigstore.dev";
+export declare const REKOR_URL = "https://rekor.sigstore.dev";
+export declare const TSASERVER_URL = "https://timestamp.sigstore.dev";
+export declare const SEARCH_URL = "https://search.sigstore.dev";