Commit Graph

33 Commits

Author SHA1 Message Date
Conor Sloan bebbbc6eee parse GHCR error format for errors 2024-08-08 14:07:54 +01:00
Conor Sloan 2bbf08d922 print response body when an http request to ghcr returns unexpected status 2024-08-08 11:45:25 +01:00
Conor Sloan c1f237b012 Generate provenance attestation before performing upload to ghcr
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
2024-08-07 17:13:39 +01:00
Conor Sloan 3d3a333728 remove async in parser 2024-04-15 16:11:50 +01:00
Conor Sloan 18cf56a126 move checking of git checkout out of parse logic 2024-04-15 15:43:26 +01:00
Conor Sloan 17c0582657 check github_ref tag and sha are checked out on parse 2024-04-15 13:45:54 +01:00
Conor Sloan 507635d01b only write attestation for non-private repos 2024-04-15 12:26:26 +01:00
Conor Sloan 6dc0f68595 get visibility when grabbing repo information 2024-04-15 12:03:02 +01:00
ddivad195 85d00a6e39 add subdirectories in archives 2024-04-09 17:05:31 +01:00
ddivad195 113eb50eb5 re-integrate toolkit code to main action 2024-03-25 17:44:45 +00:00
ddivad195 2fabbad58f fix semver parsing by removing 2024-03-05 17:09:16 +00:00
ddivad195 05bd356814 fix test 2024-03-05 16:51:22 +00:00
ddivad195 1529e43c68 fix isEnterprise check 2024-03-05 16:31:13 +00:00
Conor Sloan 54d9a343c3 Move from composite to regular node action.
This involves generating the attestation in the code using the new attest library in the actions toolkit.
2024-03-01 16:45:32 +00:00
ddivad195 b42b69f193 cleanup debug logging 2024-02-06 18:27:57 +00:00
ddivad195 1167b03ce8 refactor debug logging 2024-02-06 18:27:55 +00:00
ddivad195 38b91834f7 replace axios with fetch 2024-02-06 18:25:25 +00:00
Conor Sloan 3f76c4d47c use GITHUB_WORKSPACE as target dir to package up 2024-02-06 16:34:26 +00:00
Edwin Sirko 9525e839de handle todos (#82)
* handle todos

* dist/index.js
2024-02-02 14:59:25 -05:00
Edwin Sirko b80af95dd0 use runner's RUNNER_TEMP for temp directory (#75)
* use runner tempdir

* fix tests etc

* feedback

* ran npm install before generating dist
2024-02-02 13:05:08 -05:00
ddivad195 6233cad2a5 fix failing lint and test errors 2024-02-02 13:04:36 -05:00
David Daly 621cb8210d only run if environment is not ghes 2024-02-02 13:04:35 -05:00
Edwin Sirko dfbae910c5 fixed bug with fsExtra.copySync (#55) 2024-02-02 13:04:35 -05:00
Conor Sloan 1f47b19ed3 Tying up loose ends (#54)
* various qol updates to publish action

* review comments and run bundle
2024-02-02 13:02:14 -05:00
Edwin Sirko 7472b3f822 refactored path calculation 2024-02-02 13:02:14 -05:00
ddivad195 cb62dd8450 remove console log of path 2024-02-02 13:00:34 -05:00
boxofyellow db688d0eea make sure to populate outputs of the composite action, Disable attestations 2024-02-02 13:00:34 -05:00
Edwin Sirko 5f9b214e33 properly getting CR URL 2024-02-02 12:59:49 -05:00
boxofyellow 5e2391735e tests 2024-02-02 12:58:40 -05:00
Edwin Sirko c41316d7a8 v0.0.52: fetch CR URL 2024-02-02 12:58:36 -05:00
David Daly 1fbd6bde21 Refactor into a composite action and integrate with generate-build-provenance action
- Refactor the action from a 'node' action to a 'composite' action
- Create and output a sha256 hash of the image manifest
- Update action inputs & outputs
- Integrate with the 'generate-build-provenance' action as part of the composite action
2024-02-02 12:55:36 -05:00
Conor Sloan 4ac7dfc3cb update deps, linting, test cases, etc. 2024-02-02 12:55:29 -05:00
Conor Sloan d057826061 initial mvp version 2024-02-02 12:52:31 -05:00