[dependabot]

Bumps cycodelabs/cimon-action from 1.0.2 to 1.0.3.

Release notes

Sourced from cycodelabs/cimon-action's releases.

v1.0.3: Timestamp inputs for key-based signing

Forwards the timestamp inputs to cimon attest generate-and-sign for key-based signing:

• With sign-key and include-timestamp: true, the action passes --include-timestamp=true and, if set, --timestamp-server-url. timestamp-server-url accepts a Sigstore timestamp authority or a standard RFC 3161 service.
• With include-timestamp unset or false, the CLI arguments are unchanged. Keyless forwarding is unchanged.

Timestamping for key-based signing requires cimon v1.0.27 or later; older versions accept these inputs and produce no timestamp. Set fail-on-error: true if a missing timestamp should fail the step.

The README now marks the Sigstore-specific inputs as keyless-only and documents include-timestamp.

Commits

• f6fe31f attest: timestamp inputs for key-based signing, and input documentation fixes...
• See full diff in compare view

[omer-roth]

@dependabot rebase