|
|
@ -176,7 +176,7 @@ jobs:
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
contents: write # for uploading attestations to GitHub releases.
|
|
|
|
contents: write # for uploading attestations to GitHub releases.
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.7.0
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.8.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
provenance-name: "provenance.intoto.jsonl"
|
|
|
|
provenance-name: "provenance.intoto.jsonl"
|
|
|
|
base64-subjects: "${{ needs.release-flux-cli.outputs.hashes }}"
|
|
|
|
base64-subjects: "${{ needs.release-flux-cli.outputs.hashes }}"
|
|
|
@ -188,7 +188,7 @@ jobs:
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.7.0
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.8.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
image: ${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
image: ${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
@ -202,7 +202,7 @@ jobs:
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.7.0
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.8.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
image: ghcr.io/${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
image: ghcr.io/${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
|