title | sidebar_position |
---|---|
Installer |
2 |
Scribe offers GitHub Actions for embedding evidence collecting and validated integrity of your supply chain.
Use installer
to install Scribe tools in your workflow.
For Further documentation Github integration
You can use the installer
Action to install any scribe tool in to your workflow allowing full access to all the CLI options in your workflows.
Install the tool locally if you want to:
- Generate/verify evidence (SBOMS) from docker daemon.
- Generate/sign local directories (not mapped to the working dir)
- Generate evidence for a global cache directory
- Use tool functionality not exposed by containerized actions.
action allows users to utilize
valint
in a non-containerized environment.
Installing
valint
locally is useful when you want to create an evidence (directory or git targets) on targets outside working directory.
tools:
description: 'Select scribe tools <tool:version>'
required: false
- valint
- Linux - arm64, amd64.
- name: Scribe tool install
id: scribe_install
uses: scribe-security/action-installer@master
Select tool
- name: valint install
id: valint_install
uses: scribe-security/action-installer@master
with:
tools: valint