This GitHub Action installs gittuf in your workflow. It can be used to verify gittuf policies for your Git repositories.
gittuf-installer is in beta. Feel free to give it a whirl! See here for the current status of gittuf itself.
gittuf-version: Used to specify the version of gittuf to install (default:
0.15.0). In addition to the specific version number, main is also supported
to build off the source repository's main
branch. Note: do not prefix v in the version number.
gittuf-installer currently supports installing gittuf version 0.13.1 and
newer. The last version of gittuf-installer with support for older versions of
gittuf (0.13.0 and older) is 0.10.0. This is due to a change in how gittuf's
release artifacts are signed with Sigstore
Cosign.
Using gittuf-installer 0.11.0 or greater with gittuf versions 0.13.0 or
older will cause the action to fail.