Add input cosign-release (#30)

* Add input cosign-release

Signed-off-by: Mateus Caruccio <[email protected]>

* Add test

Signed-off-by: Mateus Caruccio <[email protected]>

* Verify if test actually succeeded

Signed-off-by: Mateus Caruccio <[email protected]>

* Using bash on test

Signed-off-by: Mateus Caruccio <[email protected]>

---------

Signed-off-by: Mateus Caruccio <[email protected]>

Author: caruccio

.github/workflows/test-setup-vexctl.yaml

@@ -105,3 +105,39 @@ jobs:
         with:
           vexctl-release: 'honk'
         continue-on-error: true
+
+  test_vexctl_action_custom_cosign_release:
+    strategy:
+      matrix:
+        os:
+          - macos-latest
+          - ubuntu-latest
+          - windows-latest
+    runs-on: ${{ matrix.os }}
+    permissions: {}
+    name: Install with custom cosign release
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - name: Install vexctl
+        uses: ./
+        with:
+          cosign-release: v2.6.1
+      - name: Check vexctl install!
+        run: vexctl version
+      - name: Check cosign install!
+        run: |-
+          if [[ "$(cosign version --json | jq -r .gitVersion)" != 'v2.6.1' ]]; then
+            echo 'unexpected cosign version'
+            exit 1
+          fi
+        shell: bash
+
+      - name: Check root directory
+        run: |
+          if [[ $(git diff --stat) != '' ]]; then
+            echo 'should be clean'
+            exit 1
+          else
+            exit 0
+          fi
+        shell: bash

README.md

@@ -57,5 +57,6 @@ The following optional inputs:
 | Input | Description |
 | --- | --- |
 | `vexctl-release` | `vexctl` version to use instead of the default. |
+| `cosign-release` | `cosign` version to use instead of the default. |
 | `install-dir` | directory to place the `vexctl` binary into instead of the default (`$HOME/.vexctl`). |
 | `use-sudo` | set to `true` if `install-dir` location requires sudo privs. Defaults to false. |

action.yml

@@ -15,6 +15,10 @@ inputs:
     description: 'vexctl release version to be installed'
     required: false
     default: '0.3.0'
+  cosign-release:
+    description: 'cosign release version to be installed'
+    required: false
+    default: 'v3.0.2'
   install-dir:
     description: 'Where to install the vexctl binary'
     required: false
@@ -28,6 +32,7 @@ runs:
   steps:
     - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
       with:
+        cosign-release: ${{ inputs.cosign-release }}      
         install-dir: ${{ inputs.install-dir }}
         use-sudo: ${{ inputs.use-sudo }}
     - shell: bash