From ddd00ea88baebe2ddb0a03d30b755ea85d3628b6 Mon Sep 17 00:00:00 2001
From: Colin Douglas <colin@chainguard.dev>
Date: Fri, 3 Oct 2025 16:59:57 -0700
Subject: [PATCH] add install-only input parameter to skip authentication

Signed-off-by: Colin Douglas <colin@chainguard.dev>
---
 action.yaml | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/action.yaml b/action.yaml
index 4523ecf..b69946b 100644
--- a/action.yaml
+++ b/action.yaml
@@ -70,6 +70,14 @@ inputs:
     required: false
     default: apk.cgr.dev
 
+  install-only:
+    description: |
+      Only download the chainctl binary for the appropriate environment.
+      Do not authenticate. It is the responsibility of callers to later
+      call `chainctl auth login`.
+    required: false
+    default: false
+
 runs:
   using: "composite"
 
@@ -113,7 +121,7 @@ runs:
 
     - name: Authenticate with Chainguard (assumed identity)
       shell: bash
-      if: ${{ inputs.identity != '' }}
+      if: ${{ inputs.identity != '' && !inputs.install-only }}
       env:
         CHAINCTL_DEBUG: "true"
         VERBOSITY: ${{ inputs.verbosity }}
@@ -152,7 +160,7 @@ runs:
 
     - name: Authenticate with Chainguard (DEPRECATED invite-code)
       shell: bash
-      if: ${{ inputs.invite-code != '' }}
+      if: ${{ inputs.invite-code != '' && !inputs.install-only }}
       env:
         CHAINGUARD_INVITE_CODE: ${{ inputs.invite-code }}
         CHAINCTL_DEBUG: "true"