Enable debugging also if ACTIONS_STEP_DEBUG==true

ACTIONS_STEP_DEBUG is a standard GitHub Actions flag to
enable debugging output across all actions and workflows.

See: https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/troubleshooting-workflows/enabling-debug-logging#enabling-step-debug-logging

Signed-off-by: Jan Chren ~rindeal <[email protected]>

Author: rindeal

action.py

@@ -37,7 +37,8 @@
 _SUMMARY = Path(_summary_path).open("a")
 
 _RENDER_SUMMARY = os.getenv("GHA_SIGSTORE_PYTHON_SUMMARY", "true") == "true"
-_DEBUG = os.getenv("GHA_SIGSTORE_PYTHON_INTERNAL_BE_CAREFUL_DEBUG", "false") != "false"
+_INTERNAL_DEBUG = os.getenv("GHA_SIGSTORE_PYTHON_INTERNAL_BE_CAREFUL_DEBUG", "false") != "false"
+_GHA_STEP_DEBUG = os.getenv("ACTIONS_STEP_DEBUG", "false") == "true"
 
 _RELEASE_SIGNING_ARTIFACTS = (
     os.getenv("GHA_SIGSTORE_PYTHON_RELEASE_SIGNING_ARTIFACTS", "true") == "true"
@@ -56,8 +57,10 @@ def _summary(msg):
 
 
 def _debug(msg):
-    if _DEBUG:
+    if _INTERNAL_DEBUG:
         print(f"\033[93mDEBUG: {msg}\033[0m", file=sys.stderr)
+    elif _GHA_STEP_DEBUG:
+        print(f"::debug::{msg}", file=sys.stderr)
 
 
 def _log(msg):
@@ -131,7 +134,7 @@ def _fatal_help(msg):
 # to upload these as workflow artifacts after signing.
 signing_artifact_paths = []
 
-if _DEBUG:
+if _INTERNAL_DEBUG or _GHA_STEP_DEBUG:
     sigstore_python_env["SIGSTORE_LOGLEVEL"] = "DEBUG"
 
 identity_token = os.getenv("GHA_SIGSTORE_PYTHON_IDENTITY_TOKEN")

setup/setup.bash

@@ -22,8 +22,10 @@ die() {
 }
 
 debug() {
-  if [[ "${GHA_SIGSTORE_PYTHON_INTERNAL_BE_CAREFUL_DEBUG}" = "true" ]]; then
-    echo -e "\033[93mDEBUG: ${1}\033[0m"
+  if [[ "${GHA_SIGSTORE_PYTHON_INTERNAL_BE_CAREFUL_DEBUG}" == "true" ]]; then
+    echo -e "\033[93mDEBUG: ${1}\033[0m" >&2
+  elif [[ "${ACTIONS_STEP_DEBUG}" == 'true' ]]; then
+    echo "::debug::${*}" >&2
   fi
 }