Conor Sloan c1f237b012 Generate provenance attestation before performing upload to ghcr ...

This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.

2024-08-07 17:13:39 +01:00

..

api-client.test.ts

get visibility when grabbing repo information

2024-04-15 12:03:02 +01:00

config.test.ts

only write attestation for non-private repos

2024-04-15 12:26:26 +01:00

fs-helper.test.ts

move checking of git checkout out of parse logic

2024-04-15 15:43:26 +01:00

ghcr-client.test.ts

re-integrate toolkit code to main action

2024-03-25 17:44:45 +00:00

index.test.ts

initial mvp version

2024-02-02 12:52:31 -05:00

main.test.ts

Generate provenance attestation before performing upload to ghcr

2024-08-07 17:13:39 +01:00

oci-container.test.ts

Generate provenance attestation before performing upload to ghcr

2024-08-07 17:13:39 +01:00