|
|
@ -24,7 +24,7 @@ jobs:
|
|
|
|
- name: Unshallow
|
|
|
|
- name: Unshallow
|
|
|
|
run: git fetch --prune --unshallow
|
|
|
|
run: git fetch --prune --unshallow
|
|
|
|
- name: Setup Go
|
|
|
|
- name: Setup Go
|
|
|
|
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
|
|
|
|
uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
go-version: 1.20.x
|
|
|
|
go-version: 1.20.x
|
|
|
|
cache: false
|
|
|
|
cache: false
|
|
|
@ -176,7 +176,7 @@ jobs:
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
contents: write # for uploading attestations to GitHub releases.
|
|
|
|
contents: write # for uploading attestations to GitHub releases.
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.7.0
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.8.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
provenance-name: "provenance.intoto.jsonl"
|
|
|
|
provenance-name: "provenance.intoto.jsonl"
|
|
|
|
base64-subjects: "${{ needs.release-flux-cli.outputs.hashes }}"
|
|
|
|
base64-subjects: "${{ needs.release-flux-cli.outputs.hashes }}"
|
|
|
@ -188,7 +188,7 @@ jobs:
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.7.0
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.8.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
image: ${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
image: ${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
@ -202,7 +202,7 @@ jobs:
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
actions: read # for detecting the Github Actions environment.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
id-token: write # for creating OIDC tokens for signing.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
packages: write # for uploading attestations.
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.7.0
|
|
|
|
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.8.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
image: ghcr.io/${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
image: ghcr.io/${{ needs.release-flux-cli.outputs.image_url }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
|
digest: ${{ needs.release-flux-cli.outputs.image_digest }}
|
|
|
|