A composite action computes a digest in a step with id: hash. A consumer needs steps.scan.outputs.digest after using the action with id: scan. Which two configurations expose the value correctly? Select 2.

1. Have the hash step write digest to GITHUB_OUTPUT.
2. Declare outputs.digest.value in the action metadata as ${{ steps.hash.outputs.digest }}.
3. Expose it only as an environment variable in an unrelated later workflow job.
4. Write the digest only to GITHUB_STEP_SUMMARY.
5. Read needs.hash.outputs.digest from the consumer without defining a job named hash.