1. Packages
  2. Buildkite
  3. API Docs
  4. Pipeline
  5. getSignedSteps
Viewing docs for Buildkite v3.2.0
published on Monday, Feb 23, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-buildkite

buildkite.Pipeline.getSignedSteps

buildkite logo
Viewing docs for Buildkite v3.2.0
published on Monday, Feb 23, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-buildkite

    Use this data source to sign pipeline steps with a JWKS key. You will need to have the corresponding verification key present on the agents that run this the steps in this pipeline. You can then use these steps in a buildkite.Pipeline.Pipeline resource.

    See RFC 7517 for more information about the JWKS format.

    See the Buildkite documentation for more info about signed pipelines.

    Note that the PS512 and ES512 signature algorithms are nondeterministic and will result in the signature changing on each run. Use EdDSA to avoid drift.

    Using getSignedSteps

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getSignedSteps(args: GetSignedStepsArgs, opts?: InvokeOptions): Promise<GetSignedStepsResult>
function getSignedStepsOutput(args: GetSignedStepsOutputArgs, opts?: InvokeOptions): Output<GetSignedStepsResult>
    def get_signed_steps(jwks: Optional[str] = None,
                     jwks_file: Optional[str] = None,
                     jwks_key_id: Optional[str] = None,
                     repository: Optional[str] = None,
                     unsigned_steps: Optional[str] = None,
                     opts: Optional[InvokeOptions] = None) -> GetSignedStepsResult
def get_signed_steps_output(jwks: Optional[pulumi.Input[str]] = None,
                     jwks_file: Optional[pulumi.Input[str]] = None,
                     jwks_key_id: Optional[pulumi.Input[str]] = None,
                     repository: Optional[pulumi.Input[str]] = None,
                     unsigned_steps: Optional[pulumi.Input[str]] = None,
                     opts: Optional[InvokeOptions] = None) -> Output[GetSignedStepsResult]
    func GetSignedSteps(ctx *Context, args *GetSignedStepsArgs, opts ...InvokeOption) (*GetSignedStepsResult, error)
func GetSignedStepsOutput(ctx *Context, args *GetSignedStepsOutputArgs, opts ...InvokeOption) GetSignedStepsResultOutput

    > Note: This function is named GetSignedSteps in the Go SDK.

    public static class GetSignedSteps 
{
    public static Task<GetSignedStepsResult> InvokeAsync(GetSignedStepsArgs args, InvokeOptions? opts = null)
    public static Output<GetSignedStepsResult> Invoke(GetSignedStepsInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetSignedStepsResult> getSignedSteps(GetSignedStepsArgs args, InvokeOptions options)
public static Output<GetSignedStepsResult> getSignedSteps(GetSignedStepsArgs args, InvokeOptions options)

    fn::invoke:
  function: buildkite:Pipeline/getSignedSteps:getSignedSteps
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Repository string
    The repository that will be checked out in a build of the pipeline.
    UnsignedSteps string
    The steps to sign in YAML format.
    Jwks string
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    JwksFile string
    JwksKeyId string
    Repository string
    The repository that will be checked out in a build of the pipeline.
    UnsignedSteps string
    The steps to sign in YAML format.
    Jwks string
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    JwksFile string
    JwksKeyId string
    repository String
    The repository that will be checked out in a build of the pipeline.
    unsignedSteps String
    The steps to sign in YAML format.
    jwks String
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwksFile String
    jwksKeyId String
    repository string
    The repository that will be checked out in a build of the pipeline.
    unsignedSteps string
    The steps to sign in YAML format.
    jwks string
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwksFile string
    jwksKeyId string
    repository str
    The repository that will be checked out in a build of the pipeline.
    unsigned_steps str
    The steps to sign in YAML format.
    jwks str
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwks_file str
    jwks_key_id str
    repository String
    The repository that will be checked out in a build of the pipeline.
    unsignedSteps String
    The steps to sign in YAML format.
    jwks String
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwksFile String
    jwksKeyId String

    getSignedSteps Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Repository string
    The repository that will be checked out in a build of the pipeline.
    Steps string
    UnsignedSteps string
    The steps to sign in YAML format.
    Jwks string
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    JwksFile string
    JwksKeyId string
    Id string
    The provider-assigned unique ID for this managed resource.
    Repository string
    The repository that will be checked out in a build of the pipeline.
    Steps string
    UnsignedSteps string
    The steps to sign in YAML format.
    Jwks string
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    JwksFile string
    JwksKeyId string
    id String
    The provider-assigned unique ID for this managed resource.
    repository String
    The repository that will be checked out in a build of the pipeline.
    steps String
    unsignedSteps String
    The steps to sign in YAML format.
    jwks String
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwksFile String
    jwksKeyId String
    id string
    The provider-assigned unique ID for this managed resource.
    repository string
    The repository that will be checked out in a build of the pipeline.
    steps string
    unsignedSteps string
    The steps to sign in YAML format.
    jwks string
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwksFile string
    jwksKeyId string
    id str
    The provider-assigned unique ID for this managed resource.
    repository str
    The repository that will be checked out in a build of the pipeline.
    steps str
    unsigned_steps str
    The steps to sign in YAML format.
    jwks str
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwks_file str
    jwks_key_id str
    id String
    The provider-assigned unique ID for this managed resource.
    repository String
    The repository that will be checked out in a build of the pipeline.
    steps String
    unsignedSteps String
    The steps to sign in YAML format.
    jwks String
    The JSON Web Key Set (JWKS) to use for signing. All double-quotes in the JSON object must be escaped \". If jwks_key_id is not specified, and the set contains exactly one key, that key will be used.
    jwksFile String
    jwksKeyId String

    Package Details

    Repository
    buildkite pulumiverse/pulumi-buildkite
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the buildkite Terraform Provider.
    buildkite logo
    Viewing docs for Buildkite v3.2.0
    published on Monday, Feb 23, 2026 by Pulumiverse
    Schema (JSON)
    pulumiverse/pulumi-buildkite
      Try Pulumi Cloud free. Your team will thank you.