fix: added input check for install-packages on npm audit signatures

anolilab · Jul 3, 2024 · b6c86f9 · b6c86f9
1 parent 98e8e6e
commit b6c86f9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/step/setup/action.yml b/step/setup/action.yml
@@ -175,7 +175,7 @@ runs:
 
         - name: "Verify the integrity of provenance attestations and registry signatures for installed dependencies"
           shell: "bash"
-          if: "inputs.run-signatures-audit == 'true'"
+          if: "inputs.run-signatures-audit == 'true' && inputs.install-packages == 'true'"
           run: "npm audit signatures"
 
         - name: "Install Bun for tests"