@docker/actions-toolkit 0.76.0 → 0.77.0

package/lib/cosign/cosign.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Copyright 2025 actions-toolkit authors
  *
@@ -14,118 +13,69 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Cosign = void 0;
-const core = __importStar(require("@actions/core"));
-const bundle_1 = require("@sigstore/bundle");
-const exec_1 = require("../exec");
-const semver = __importStar(require("semver"));
-const mediatype_1 = require("../types/oci/mediatype");
-class Cosign {
+import * as core from '@actions/core';
+import { BUNDLE_V03_MEDIA_TYPE } from '@sigstore/bundle';
+import { Exec } from '../exec.js';
+import * as semver from 'semver';
+import { MEDIATYPE_EMPTY_JSON_V1 } from '../types/oci/mediatype.js';
+export class Cosign {
+    binPath;
+    _version;
+    _versionOnce;
     constructor(opts) {
-        this.binPath = (opts === null || opts === void 0 ? void 0 : opts.binPath) || 'cosign';
+        this.binPath = opts?.binPath || 'cosign';
         this._version = '';
         this._versionOnce = false;
     }
-    isAvailable() {
-        return __awaiter(this, void 0, void 0, function* () {
-            const ok = yield exec_1.Exec.getExecOutput(this.binPath, [], {
-                ignoreReturnCode: true,
-                silent: true
-            })
-                .then(res => {
-                if (res.stderr.length > 0 && res.exitCode != 0) {
-                    core.debug(`Cosign.isAvailable cmd err: ${res.stderr.trim()}`);
-                    return false;
-                }
-                return res.exitCode == 0;
-            })
-                .catch(error => {
-                core.debug(`Cosign.isAvailable error: ${error}`);
+    async isAvailable() {
+        const ok = await Exec.getExecOutput(this.binPath, [], {
+            ignoreReturnCode: true,
+            silent: true
+        })
+            .then(res => {
+            if (res.stderr.length > 0 && res.exitCode != 0) {
+                core.debug(`Cosign.isAvailable cmd err: ${res.stderr.trim()}`);
                 return false;
-            });
-            core.debug(`Cosign.isAvailable: ${ok}`);
-            return ok;
+            }
+            return res.exitCode == 0;
+        })
+            .catch(error => {
+            core.debug(`Cosign.isAvailable error: ${error}`);
+            return false;
         });
+        core.debug(`Cosign.isAvailable: ${ok}`);
+        return ok;
     }
-    version() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (this._versionOnce) {
-                return this._version;
-            }
-            this._versionOnce = true;
-            this._version = yield exec_1.Exec.getExecOutput(this.binPath, ['version', '--json'], {
-                ignoreReturnCode: true,
-                silent: true
-            }).then(res => {
-                if (res.stderr.length > 0 && res.exitCode != 0) {
-                    throw new Error(res.stderr.trim());
-                }
-                return JSON.parse(res.stdout.trim()).gitVersion;
-            });
+    async version() {
+        if (this._versionOnce) {
             return this._version;
+        }
+        this._versionOnce = true;
+        this._version = await Exec.getExecOutput(this.binPath, ['version', '--json'], {
+            ignoreReturnCode: true,
+            silent: true
+        }).then(res => {
+            if (res.stderr.length > 0 && res.exitCode != 0) {
+                throw new Error(res.stderr.trim());
+            }
+            return JSON.parse(res.stdout.trim()).gitVersion;
         });
+        return this._version;
     }
-    printVersion() {
-        return __awaiter(this, void 0, void 0, function* () {
-            yield exec_1.Exec.exec(this.binPath, ['version', '--json'], {
-                failOnStdErr: false
-            });
+    async printVersion() {
+        await Exec.exec(this.binPath, ['version', '--json'], {
+            failOnStdErr: false
         });
     }
-    versionSatisfies(range, version) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const ver = version !== null && version !== void 0 ? version : (yield this.version());
-            if (!ver) {
-                core.debug(`Cosign.versionSatisfies false: undefined version`);
-                return false;
-            }
-            const res = semver.satisfies(ver, range) || /^[0-9a-f]{7}$/.exec(ver) !== null;
-            core.debug(`Cosign.versionSatisfies ${ver} statisfies ${range}: ${res}`);
-            return res;
-        });
+    async versionSatisfies(range, version) {
+        const ver = version ?? (await this.version());
+        if (!ver) {
+            core.debug(`Cosign.versionSatisfies false: undefined version`);
+            return false;
+        }
+        const res = semver.satisfies(ver, range) || /^[0-9a-f]{7}$/.exec(ver) !== null;
+        core.debug(`Cosign.versionSatisfies ${ver} statisfies ${range}: ${res}`);
+        return res;
     }
     static parseCommandOutput(logs) {
         let signatureManifestDigest;
@@ -142,7 +92,7 @@ class Cosign {
             try {
                 obj = JSON.parse(line);
             }
-            catch (_a) {
+            catch {
                 continue;
             }
             if (obj && Array.isArray(obj.errors) && obj.errors.length > 0) {
@@ -151,15 +101,15 @@ class Cosign {
             // signature manifest digest
             if (!signatureManifestDigest && obj && Array.isArray(obj.manifests) && obj.manifests.length > 0) {
                 const m0 = obj.manifests[0];
-                if ((m0 === null || m0 === void 0 ? void 0 : m0.artifactType) === bundle_1.BUNDLE_V03_MEDIA_TYPE && typeof m0.digest === 'string') {
+                if (m0?.artifactType === BUNDLE_V03_MEDIA_TYPE && typeof m0.digest === 'string') {
                     signatureManifestDigest = m0.digest;
                 }
-                else if ((m0 === null || m0 === void 0 ? void 0 : m0.artifactType) === mediatype_1.MEDIATYPE_EMPTY_JSON_V1 && typeof m0.digest === 'string') {
+                else if (m0?.artifactType === MEDIATYPE_EMPTY_JSON_V1 && typeof m0.digest === 'string') {
                     signatureManifestFallbackDigest = m0.digest;
                 }
             }
             // signature payload
-            if (!bundlePayload && obj && obj.mediaType === bundle_1.BUNDLE_V03_MEDIA_TYPE) {
+            if (!bundlePayload && obj && obj.mediaType === BUNDLE_V03_MEDIA_TYPE) {
                 bundlePayload = obj;
             }
             if (bundlePayload && (signatureManifestDigest || signatureManifestFallbackDigest)) {
@@ -174,5 +124,4 @@ class Cosign {
         };
     }
 }
-exports.Cosign = Cosign;
 //# sourceMappingURL=cosign.js.map

package/lib/cosign/cosign.js.map

@@ -1 +1 @@
-{"version":3,"file":"cosign.js","sourceRoot":"","sources":["../../src/cosign/cosign.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,oDAAsC;AACtC,6CAAyE;AAEzE,kCAA6B;AAC7B,+CAAiC;AACjC,sDAA+D;AAkB/D,MAAa,MAAM;IAKjB,YAAY,IAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,KAAI,QAAQ,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,CAAC;IAEY,WAAW;;YACtB,MAAM,EAAE,GAAY,MAAM,WAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE;gBAC7D,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,IAAI;aACb,CAAC;iBACC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACV,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;oBAC/C,IAAI,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC/D,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC3B,CAAC,CAAC;iBACD,KAAK,CAAC,KAAK,CAAC,EAAE;gBACb,IAAI,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;gBACjD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEL,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;KAAA;IAEY,OAAO;;YAClB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,QAAQ,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,QAAQ,GAAG,MAAM,WAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;gBAC5E,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACZ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrC,CAAC;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC;YAClD,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;KAAA;IAEY,YAAY;;YACvB,MAAM,WAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;gBACnD,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;KAAA;IAEY,gBAAgB,CAAC,KAAa,EAAE,OAAgB;;YAC3D,MAAM,GAAG,GAAG,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;YAC/E,IAAI,CAAC,KAAK,CAAC,2BAA2B,GAAG,eAAe,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;YACzE,OAAO,GAAG,CAAC;QACb,CAAC;KAAA;IAEM,MAAM,CAAC,kBAAkB,CAAC,IAAY;QAC3C,IAAI,uBAA2C,CAAC;QAChD,IAAI,+BAAmD,CAAC;QACxD,IAAI,aAA2C,CAAC;QAChD,IAAI,MAA6C,CAAC;QAElD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,8DAA8D;YAC9D,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,WAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACtB,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC,uBAAuB,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChG,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,CAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,YAAY,MAAK,8BAAqB,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChF,uBAAuB,GAAG,EAAE,CAAC,MAAM,CAAC;gBACtC,CAAC;qBAAM,IAAI,CAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,YAAY,MAAK,mCAAuB,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACzF,+BAA+B,GAAG,EAAE,CAAC,MAAM,CAAC;gBAC9C,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,aAAa,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,8BAAqB,EAAE,CAAC;gBACrE,aAAa,GAAG,GAAuB,CAAC;YAC1C,CAAC;YAED,IAAI,aAAa,IAAI,CAAC,uBAAuB,IAAI,+BAA+B,CAAC,EAAE,CAAC;gBAClF,MAAM,GAAG,SAAS,CAAC,CAAC,2DAA2D;gBAC/E,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,uBAAuB,EAAE,uBAAuB,IAAI,+BAA+B;YACnF,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;CACF;AArHD,wBAqHC"}
+{"version":3,"file":"cosign.js","sourceRoot":"","sources":["../../src/cosign/cosign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AACtC,OAAO,EAAC,qBAAqB,EAAmB,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EAAC,IAAI,EAAC,MAAM,YAAY,CAAC;AAChC,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAC,uBAAuB,EAAC,MAAM,2BAA2B,CAAC;AAkBlE,MAAM,OAAO,MAAM;IACA,OAAO,CAAS;IACzB,QAAQ,CAAS;IACjB,YAAY,CAAU;IAE9B,YAAY,IAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,CAAC;IAEM,KAAK,CAAC,WAAW;QACtB,MAAM,EAAE,GAAY,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE;YAC7D,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;SACb,CAAC;aACC,IAAI,CAAC,GAAG,CAAC,EAAE;YACV,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;aACD,KAAK,CAAC,KAAK,CAAC,EAAE;YACb,IAAI,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,CAAC;IACZ,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;YAC5E,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACZ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,YAAY;QACvB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;YACnD,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,OAAgB;QAC3D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;QAC/E,IAAI,CAAC,KAAK,CAAC,2BAA2B,GAAG,eAAe,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,kBAAkB,CAAC,IAAY;QAC3C,IAAI,uBAA2C,CAAC;QAChD,IAAI,+BAAmD,CAAC;QACxD,IAAI,aAA2C,CAAC;QAChD,IAAI,MAA6C,CAAC;QAElD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,8DAA8D;YAC9D,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACtB,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC,uBAAuB,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChG,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,EAAE,EAAE,YAAY,KAAK,qBAAqB,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChF,uBAAuB,GAAG,EAAE,CAAC,MAAM,CAAC;gBACtC,CAAC;qBAAM,IAAI,EAAE,EAAE,YAAY,KAAK,uBAAuB,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACzF,+BAA+B,GAAG,EAAE,CAAC,MAAM,CAAC;gBAC9C,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,aAAa,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,qBAAqB,EAAE,CAAC;gBACrE,aAAa,GAAG,GAAuB,CAAC;YAC1C,CAAC;YAED,IAAI,aAAa,IAAI,CAAC,uBAAuB,IAAI,+BAA+B,CAAC,EAAE,CAAC;gBAClF,MAAM,GAAG,SAAS,CAAC,CAAC,2DAA2D;gBAC/E,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,uBAAuB,EAAE,uBAAuB,IAAI,+BAA+B;YACnF,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;CACF"}

package/lib/cosign/dockerfile.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Copyright 2025 actions-toolkit authors
  *
@@ -14,9 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.dockerfileContent = void 0;
-exports.dockerfileContent = `
+export const dockerfileContent = `
 # syntax=docker/dockerfile:1
 
 ARG GO_VERSION="1.24"

package/lib/cosign/dockerfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"dockerfile.js","sourceRoot":"","sources":["../../src/cosign/dockerfile.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEU,QAAA,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4ChC,CAAC"}
+{"version":3,"file":"dockerfile.js","sourceRoot":"","sources":["../../src/cosign/dockerfile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4ChC,CAAC"}

package/lib/cosign/install.d.ts

@@ -13,9 +13,10 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import { Buildx } from '../buildx/buildx';
-import { DownloadVersion } from '../types/cosign/cosign';
-import { GitHubRelease } from '../types/github';
+import { Buildx } from '../buildx/buildx.js';
+import { Sigstore } from '../sigstore/sigstore.js';
+import { DownloadVersion } from '../types/cosign/cosign.js';
+import { GitHubRelease } from '../types/github/github.js';
 export interface DownloadOpts {
     version: string;
     ghaNoCache?: boolean;
@@ -25,10 +26,12 @@ export interface DownloadOpts {
 export interface InstallOpts {
     githubToken?: string;
     buildx?: Buildx;
+    sigstore?: Sigstore;
 }
 export declare class Install {
     private readonly githubToken;
     private readonly buildx;
+    private readonly sigstore;
     constructor(opts?: InstallOpts);
     download(opts: DownloadOpts): Promise<string>;
     build(gitContext: string, ghaNoCache?: boolean, skipState?: boolean): Promise<string>;