Conor Sloan
c1f237b012
Generate provenance attestation before performing upload to ghcr
...
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
2024-08-07 17:13:39 +01:00
ddivad195
113eb50eb5
re-integrate toolkit code to main action
2024-03-25 17:44:45 +00:00
Conor Sloan
54d9a343c3
Move from composite to regular node action.
...
This involves generating the attestation in the code using the new attest library in the actions toolkit.
2024-03-01 16:45:32 +00:00
Conor Sloan and Edwin Sirko
1f47b19ed3
Tying up loose ends ( #54 )
...
* various qol updates to publish action
* review comments and run bundle
2024-02-02 13:02:14 -05:00
boxofyellow and Edwin Sirko
5e2391735e
tests
2024-02-02 12:58:40 -05:00
Conor Sloan and Edwin Sirko
4ac7dfc3cb
update deps, linting, test cases, etc.
2024-02-02 12:55:29 -05:00
Conor Sloan and Edwin Sirko
d057826061
initial mvp version
2024-02-02 12:52:31 -05:00
Conor Sloan