From abbd42be5623ec27d40e5a6873ffa747ef275c04 Mon Sep 17 00:00:00 2001
From: Emil Lerch <emil@lerch.org>
Date: Thu, 10 Jul 2025 14:55:33 -0700
Subject: [PATCH] provide source/signature outputs even if rekor is unused

---
 entrypoint.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/entrypoint.sh b/entrypoint.sh
index 66ea7bd..fda402b 100755
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -43,10 +43,10 @@ while IFS=  read -r f; do
     # echo "INDEX_${i}=$(echo "$output"|cut -d, -f1|cut -d\  -f5)" >> "${GITHUB_OUTPUT}"
     # The parsing, though, is identical
     echo "URL_${i}=$(echo "$output"|cut -d: -f2-|cut -d\  -f2)" >> "${GITHUB_OUTPUT}"
-    echo "SOURCE_${i}=${f}" >> "${GITHUB_OUTPUT}"
-    echo "SIG_${i}=${dest_sig}" >> "${GITHUB_OUTPUT}"
-    i=$((i+1))
   fi
+  echo "SOURCE_${i}=${f}" >> "${GITHUB_OUTPUT}"
+  echo "SIG_${i}=${dest_sig}" >> "${GITHUB_OUTPUT}"
+  i=$((i+1))
 done <<ALLFILES_INPUT
 $all_files
 ALLFILES_INPUT