chore: disable cosign installation when verify blob disabled

As from cpanato suggested the installation of cosign should be skipped. Signed-off-by: Marco Lecheler <marco.lecheler@mercedes-benz.com>
helm · Oct 31, 2023 · 96db42b · 96db42b
1 parent 861053a
commit 96db42b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/action.yml b/action.yml
@@ -24,6 +24,7 @@ runs:
   using: composite
   steps:
     - uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
+      if: ${{ inputs.verify_blob != 'false' }}
     - run: |
         cd $GITHUB_ACTION_PATH \
         && ./ct.sh \