actions/publish-immutable-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
193 Commits 13 Branches 5 Tags
node24
Commit Graph
86 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Conor SloanandGitHub 49e905350a Merge pull request #185 from actions/conorsloan/remove-unnecessary-token-permission 
Remove attestation write permissions from release workflow
 2024-08-29 14:56:01 +01:00
Conor SloanandGitHub 3a0ab30032 Update README.md 
Remove reference to unnecessary permission
 2024-08-29 13:45:22 +01:00
Conor SloanandGitHub 84bfe2de2e Remove attestation write permissions from release workflow 
This isn't needed now that we're storing attestations in GHCR.
 2024-08-29 13:43:50 +01:00
Conor SloanandGitHub 578de6e124 Merge pull request #183 from actions/conorsloan/update-version-in-readme 
Update README.md
 2024-08-28 14:05:18 +01:00
Conor SloanandGitHub e03465965b Update README.md 2024-08-28 14:02:38 +01:00
Conor SloanandGitHub e3f16e22ab Merge pull request #182 from actions/conorsloan/check-for-uncommitted-changes 
Fail if local changes made to the checked out action content
 2024-08-28 13:56:41 +01:00
Conor Sloan 1255bb0a54 error if local changes made to the checked out action content 2024-08-28 13:22:37 +01:00
Conor SloanandGitHub 4aeb3f6341 Merge pull request #181 from actions/conorsloan/fixup-runtime-security 
Secure actions execution context
 2024-08-28 12:39:22 +01:00
Conor Sloan 86a49c7f6a secure actions execution context 2024-08-28 12:10:13 +01:00
Conor SloanandGitHub 8a96626c28 Merge pull request #179 from actions/conorsloan/upload-attestations-to-ghcr 
Upload attestations to GHCR instead of Attestations API
 2024-08-27 21:27:41 +01:00
Conor Sloan 36e729c5aa grab attestation media type and predicate type from attestation bundle 2024-08-27 20:52:44 +01:00
Conor Sloan 432126c06c change value of package type for referrer index 2024-08-23 13:42:27 +01:00
Conor Sloan 3555a7ef80 update dist 2024-08-23 13:33:13 +01:00
Conor Sloan 1b9faf628d add retries and fix up tests 2024-08-23 13:17:07 +01:00
Conor Sloan 72b670f356 add tests for index upload 2024-08-23 11:06:03 +01:00
Conor Sloan e308348d01 fix up ghcr client tests and remove config from action package layers 2024-08-23 10:56:04 +01:00
Conor Sloan e53d6ca2a2 reinstate main tests 2024-08-23 10:00:06 +01:00
Conor Sloan da1f4d6352 reverse the upload order 2024-08-22 20:30:50 +01:00
Conor Sloan 028b950050 experimental: manually generate and upload all manifests 2024-08-22 20:00:30 +01:00
Conor Sloan bafa38ff94 refactor ghcr client for reusable upload functions 2024-08-22 18:40:02 +01:00
Conor Sloan e44432d3e5 add new OCI manifests for attestations 2024-08-22 18:13:15 +01:00
Conor Sloan c11354f432 upload attestation and referrer index before artifact 
This avoids race conditions when the artifact is read but its attestation doesn't exist
 2024-08-22 16:10:12 +01:00
Conor Sloan 1f725c56d6 upload attestation to GHCR instead of attestations API 2024-08-22 14:10:50 +01:00
Conor SloanandGitHub f213f0c945 Merge pull request #175 from actions/conorsloan/update-attest-package 
Update @actions/attest dependency and send Attestations API header
 2024-08-21 16:03:33 +01:00
Conor Sloan 8c9931350a update attest dep and send IA header 2024-08-21 11:11:46 +01:00
Conor SloanandGitHub 7af620c09c Merge pull request #164 from actions/conorsloan/fix-readme-example-permissions 
Update README.md
 2024-08-12 18:06:57 +01:00
Conor Sloan 3cc27d51e4 Update README.md 
Fix permissions in example workflow
 2024-08-12 14:12:39 +01:00
Conor SloanandGitHub e039e1d6b7 Merge pull request #163 from actions/conorsloan/create-codeowners 
Create CODEOWNERS
 2024-08-12 11:40:40 +01:00
Conor SloanandGitHub 11f5dcdbc3 Create CODEOWNERS 2024-08-12 10:15:17 +01:00
Conor SloanandGitHub 91044eb688 Merge pull request #162 from actions/conorsloan/update-deps 
Update dependency versions
 2024-08-12 10:03:13 +01:00
Conor Sloan cf53527ffc update dep versions 2024-08-12 09:56:19 +01:00
Conor SloanandGitHub f58dd8f0ed Merge pull request #161 from actions/conorsloan/fix-self-publishing-workflow-permissions 
Update permissions on self-publishing workflow
 2024-08-12 09:56:01 +01:00
Conor Sloan a959dfafba replace contents: write with attestations: write in release 2024-08-12 09:53:52 +01:00
Conor SloanandGitHub a61106e002 Merge pull request #159 from actions/conorsloan/never-skip-attestation-write 
always set skipWrite to false when generating attestations
 2024-08-12 09:53:41 +01:00
Conor Sloan 90d59724e7 always set skipWrite to false when generating attestations 2024-08-12 09:51:04 +01:00
Conor SloanandGitHub 1a8d07a497 Merge pull request #94 from actions/dependabot/github_actions/super-linter/super-linter-6 
Bump super-linter/super-linter from 5 to 6
 2024-08-12 09:50:39 +01:00
Conor Sloan 50c672a353 dont ignore tests in eslint 2024-08-10 11:24:48 +01:00
Conor Sloan 0fd4266160 replace default style with validate env var 
See https://github.com/super-linter/super-linter/blob/main/docs/upgrade-guide.md#javascript_default_style-and-typescript_default_style
 2024-08-10 11:24:48 +01:00
Conor Sloan e58130f44d move permissions to top level 2024-08-10 11:24:48 +01:00
Conor Sloan 229ed04906 ignore tests in eslinter 2024-08-10 11:24:48 +01:00
Conor Sloan 766a6934c5 fix codeql permissions 2024-08-10 11:24:48 +01:00
Conor Sloan b40fcfc004 attempt 1 to fix linter issues 2024-08-10 11:24:48 +01:00
Conor SloanandGitHub b8bd8fe389 Merge pull request #158 from actions/conorsloan/send-auth-to-ghcr-lookup-endpoint 
Send auth token to fetch container registry URL API endpoint
 2024-08-09 15:45:58 +01:00
Conor Sloan ffcb1087c4 send auth token to get container registry url endpoint 2024-08-09 14:49:07 +01:00
Conor SloanandGitHub f7d49cfdd1 Merge pull request #157 from actions/conorsloan/dump-response-body-on-unexpected-ghcr-response 
Include information from GHCR response bodies in error reporting
 2024-08-08 16:48:54 +01:00
Conor Sloan bebbbc6eee parse GHCR error format for errors 2024-08-08 14:07:54 +01:00
Conor Sloan 2bbf08d922 print response body when an http request to ghcr returns unexpected status 2024-08-08 11:45:25 +01:00
Conor SloanandGitHub 2bc8c192b1 Merge pull request #156 from actions/conorsloan/attest-before-publish 
Generate provenance attestation before performing upload to ghcr
 2024-08-07 21:48:38 +01:00
Conor Sloan c1f237b012 Generate provenance attestation before performing upload to ghcr 
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
 2024-08-07 17:13:39 +01:00
Conor SloanandGitHub cf36a13357 Merge pull request #144 from actions/conorsloan/minor-readme-update 
Update README.md
 2024-07-30 17:56:27 +01:00
Conor SloanandGitHub d0e1c8dd23 Update README.md 2024-07-30 17:48:02 +01:00
Conor SloanandGitHub a67b4b908a Merge pull request #143 from actions/conorsloan/add-readme-disclaimer 
add disclaimer to readme
 2024-07-30 17:39:05 +01:00
Conor SloanandGitHub 3a114e3b75 Update README.md 2024-07-30 17:25:31 +01:00
Conor SloanandGitHub 287eff5a0a Update README.md 2024-07-30 17:20:03 +01:00
Conor SloanandGitHub b54ac768df Update README.md 2024-07-30 17:12:06 +01:00
Conor SloanandGitHub 9bd8f2e9c0 Update README.md 2024-07-30 17:03:18 +01:00
Conor SloanandGitHub bc99e92f1f Update README.md 2024-07-30 16:56:30 +01:00
Conor SloanandGitHub 638fb07f1a Update README.md 2024-07-30 16:48:33 +01:00
Conor SloanandGitHub 58addcb0cc Update README.md 2024-07-30 16:36:28 +01:00
Conor Sloan 5c92b3920b add disclaimer 2024-07-30 15:33:26 +01:00
Conor SloanandGitHub d627a3342b Merge pull request #115 from immutable-actions/conorsloan/attestation-finishing-touches 
Attestation finishing touches for staffship
 2024-04-15 16:55:51 +01:00
Conor Sloan 3d3a333728 remove async in parser 2024-04-15 16:11:50 +01:00
Conor Sloan 18cf56a126 move checking of git checkout out of parse logic 2024-04-15 15:43:26 +01:00
Conor Sloan 881fd1c540 fix fs helper git test 2024-04-15 14:03:10 +01:00
Conor Sloan 17c0582657 check github_ref tag and sha are checked out on parse 2024-04-15 13:45:54 +01:00
Conor Sloan 507635d01b only write attestation for non-private repos 2024-04-15 12:26:26 +01:00
Conor Sloan 6dc0f68595 get visibility when grabbing repo information 2024-04-15 12:03:02 +01:00
Conor SloanandGitHub 96609b599a Merge pull request #110 from immutable-actions/add-with-to-self-publish 
Update release.yml
 2024-04-09 21:32:29 +01:00
Conor Sloan d835c26532 Update release.yml 2024-04-09 21:25:35 +01:00
Conor SloanandGitHub cd600c26cd Merge pull request #112 from immutable-actions/ddivad195/update-archive-paths 
add subdirectories in archives
 2024-04-09 19:52:55 +01:00
Conor SloanandGitHub e3a931402a Merge pull request #98 from immutable-actions/conorsloan/remove-composite-action 
Move from composite to regular node action.
 2024-03-04 14:58:34 +00:00
Conor Sloan bc3ee93941 fix actions workflows 2: electric boogaloo 2024-03-01 17:07:20 +00:00
Conor Sloan 3c21f58d1c fix actions workflows 2024-03-01 17:04:43 +00:00
Conor Sloan 54d9a343c3 Move from composite to regular node action. 
This involves generating the attestation in the code using the new attest library in the actions toolkit.
 2024-03-01 16:45:32 +00:00
Conor SloanandGitHub d4e4f829cb Merge pull request #88 from immutable-actions/conorsloan/use-npm-to-run 
kick off action using custom npm script and prefix arg
 2024-02-06 16:48:41 +00:00
Conor Sloan f2fb01cf17 run bundle 2024-02-06 16:42:15 +00:00
Conor Sloan 1105b75f95 update coverage 2024-02-06 16:39:53 +00:00
Conor Sloan 1b0ee34e34 remove manifest from action output printing 2024-02-06 16:34:26 +00:00
Conor Sloan 646d55a089 properly quote the output variables 2024-02-06 16:34:26 +00:00
Conor Sloan a07f7523c0 quote the path when calling npm to avoid backslash issues 2024-02-06 16:34:26 +00:00
Conor Sloan 3f76c4d47c use GITHUB_WORKSPACE as target dir to package up 2024-02-06 16:34:26 +00:00
Conor Sloan b8317831f8 kick off action using custom npm script and prefix arg 
this accepts a prefix path which should be platform-agnostic.
 2024-02-06 16:34:26 +00:00
Conor SloanandEdwin Sirko 1f47b19ed3 Tying up loose ends (#54) 
* various qol updates to publish action

* review comments and run bundle
 2024-02-02 13:02:14 -05:00
Conor SloanandEdwin Sirko 4ac7dfc3cb update deps, linting, test cases, etc. 2024-02-02 12:55:29 -05:00
Conor SloanandEdwin Sirko d057826061 initial mvp version 2024-02-02 12:52:31 -05:00
Conor SloanandGitHub 5d945681fa Initial commit 2023-11-17 19:56:57 +00:00