36e729c5aa
grab attestation media type and predicate type from attestation bundle
2024-08-27 20:52:44 +01:00
432126c06c
change value of package type for referrer index
2024-08-23 13:42:27 +01:00
1b9faf628d
add retries and fix up tests
2024-08-23 13:17:07 +01:00
e308348d01
fix up ghcr client tests and remove config from action package layers
2024-08-23 10:56:04 +01:00
e44432d3e5
add new OCI manifests for attestations
2024-08-22 18:13:15 +01:00
c1f237b012
Generate provenance attestation before performing upload to ghcr
...
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
2024-08-07 17:13:39 +01:00
113eb50eb5
re-integrate toolkit code to main action
2024-03-25 17:44:45 +00:00
54d9a343c3
Move from composite to regular node action.
...
This involves generating the attestation in the code using the new attest library in the actions toolkit.
2024-03-01 16:45:32 +00:00
1f47b19ed3
Tying up loose ends ( #54 )
...
* various qol updates to publish action
* review comments and run bundle
2024-02-02 13:02:14 -05:00
5e2391735e
tests
2024-02-02 12:58:40 -05:00
4ac7dfc3cb
update deps, linting, test cases, etc.
2024-02-02 12:55:29 -05:00
d057826061
initial mvp version
2024-02-02 12:52:31 -05:00
Conor Sloan