cf53527ffc
update dep versions
2024-08-12 09:56:19 +01:00
90d59724e7
always set skipWrite to false when generating attestations
2024-08-12 09:51:04 +01:00
ffcb1087c4
send auth token to get container registry url endpoint
2024-08-09 14:49:07 +01:00
bebbbc6eee
parse GHCR error format for errors
2024-08-08 14:07:54 +01:00
2bbf08d922
print response body when an http request to ghcr returns unexpected status
2024-08-08 11:45:25 +01:00
c1f237b012
Generate provenance attestation before performing upload to ghcr
...
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
2024-08-07 17:13:39 +01:00
3d3a333728
remove async in parser
2024-04-15 16:11:50 +01:00
18cf56a126
move checking of git checkout out of parse logic
2024-04-15 15:43:26 +01:00
17c0582657
check github_ref tag and sha are checked out on parse
2024-04-15 13:45:54 +01:00
507635d01b
only write attestation for non-private repos
2024-04-15 12:26:26 +01:00
6dc0f68595
get visibility when grabbing repo information
2024-04-15 12:03:02 +01:00
85d00a6e39
add subdirectories in archives
2024-04-09 17:05:31 +01:00
113eb50eb5
re-integrate toolkit code to main action
2024-03-25 17:44:45 +00:00
761ae0d82e
Bump toolkit to 0.0.7
2024-03-08 05:45:40 -08:00
2fabbad58f
fix semver parsing by removing
2024-03-05 17:09:16 +00:00
05bd356814
fix test
2024-03-05 16:51:22 +00:00
9c9b57d4d4
update dist
2024-03-05 16:35:10 +00:00
54d9a343c3
Move from composite to regular node action.
...
This involves generating the attestation in the code using the new attest library in the actions toolkit.
2024-03-01 16:45:32 +00:00
b42b69f193
cleanup debug logging
2024-02-06 18:27:57 +00:00
1167b03ce8
refactor debug logging
2024-02-06 18:27:55 +00:00
c4d8d934a0
npm bundled
2024-02-06 18:27:01 +00:00
501681319f
replace axios with fetch
2024-02-06 18:25:25 +00:00
f2fb01cf17
run bundle
2024-02-06 16:42:15 +00:00
3f76c4d47c
use GITHUB_WORKSPACE as target dir to package up
2024-02-06 16:34:26 +00:00
9525e839de
handle todos ( #82 )
...
* handle todos
* dist/index.js
2024-02-02 14:59:25 -05:00
b80af95dd0
use runner's RUNNER_TEMP for temp directory ( #75 )
...
* use runner tempdir
* fix tests etc
* feedback
* ran npm install before generating dist
2024-02-02 13:05:08 -05:00
ebbc8c8d58
rebuild dist after dependabot updates
2024-02-02 13:04:37 -05:00
6233cad2a5
fix failing lint and test errors
2024-02-02 13:04:36 -05:00
621cb8210d
only run if environment is not ghes
2024-02-02 13:04:35 -05:00
dfbae910c5
fixed bug with fsExtra.copySync ( #55 )
2024-02-02 13:04:35 -05:00
1f47b19ed3
Tying up loose ends ( #54 )
...
* various qol updates to publish action
* review comments and run bundle
2024-02-02 13:02:14 -05:00
7472b3f822
refactored path calculation
2024-02-02 13:02:14 -05:00
db688d0eea
make sure to populate outputs of the composite action, Disable attestations
2024-02-02 13:00:34 -05:00
5f9b214e33
properly getting CR URL
2024-02-02 12:59:49 -05:00
5e2391735e
tests
2024-02-02 12:58:40 -05:00
c41316d7a8
v0.0.52: fetch CR URL
2024-02-02 12:58:36 -05:00
1fbd6bde21
Refactor into a composite action and integrate with generate-build-provenance action
...
- Refactor the action from a 'node' action to a 'composite' action
- Create and output a sha256 hash of the image manifest
- Update action inputs & outputs
- Integrate with the 'generate-build-provenance' action as part of the composite action
2024-02-02 12:55:36 -05:00
4ac7dfc3cb
update deps, linting, test cases, etc.
2024-02-02 12:55:29 -05:00
d057826061
initial mvp version
2024-02-02 12:52:31 -05:00
Conor Sloan