From 96db42b007328f634b7ac9cd2f4fe1e954a9038e Mon Sep 17 00:00:00 2001
From: Marco Lecheler <marco.lecheler@mercedes-benz.com>
Date: Tue, 31 Oct 2023 13:36:40 +0100
Subject: [PATCH] chore: disable cosign installation when verify blob disabled

As from cpanato suggested the installation of cosign should be skipped.

Signed-off-by: Marco Lecheler <marco.lecheler@mercedes-benz.com>
---
 action.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/action.yml b/action.yml
index 9a02fc4..c338678 100644
--- a/action.yml
+++ b/action.yml
@@ -24,6 +24,7 @@ runs:
   using: composite
   steps:
     - uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
+      if: ${{ inputs.verify_blob != 'false' }}
     - run: |
         cd $GITHUB_ACTION_PATH \
         && ./ct.sh \