actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

comments

Browse Source
This commit is contained in:
laurentsimon
2022-08-11 13:32:40 +00:00
parent 30f1eecad1
commit aec987bfb5
2 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ci/generator-generic-ossf-slsa3-publish.yml
+7 -5
View File
@@ -3,9 +3,8 @@
# separate terms of service, privacy policy, and support # separate terms of service, privacy policy, and support
# documentation. # documentation.
# This workflow lets you compile your Go project using a SLSA3 compliant builder # This workflow lets you generate SLSA provenance file for your project.
# This workflow will generate a so-called "provenance" file describing the steps # The generation satisfies level 3 for the provenance requirements - see https://slsa.dev/spec/v0.1/requirements
# that were performed to generate the final binary.
# The project is an initiative of the OpenSSF (openssf.org) and is developed at # The project is an initiative of the OpenSSF (openssf.org) and is developed at
# https://github.com/slsa-framework/slsa-github-generator. # https://github.com/slsa-framework/slsa-github-generator.
# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier. # The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
@@ -26,7 +25,7 @@ jobs:
digests: ${{ steps.hash.outputs.digests }} digests: ${{ steps.hash.outputs.digests }}
steps: steps:
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3 uses: actions/checkout@v3
# ======================================================== # ========================================================
# #
@@ -52,7 +51,10 @@ jobs:
run: | run: |
set -euo pipefail set -euo pipefail
echo "::set-output name=digests::$(sha256sum artifact1 artifact2 | base64 -w0)" # List the artifacts the provenance will refer to.
files=$(ls artifact*)
# Generate the subjects (base64 encoded).
echo "::set-output name=digests::$(sha256sum $files | base64 -w0)"
provenance: provenance:
needs: [build] needs: [build]
ci/properties/generator-generic-ossf-slsa3-publish.properties.json
+2 -2
View File
@@ -2,6 +2,6 @@
"name": "SLSA Generic generator", "name": "SLSA Generic generator",
"creator": "Open Source Security Foundation (OpenSSF)", "creator": "Open Source Security Foundation (OpenSSF)",
"description": "Generate SLSA3 provenance for your existing release workflows", "description": "Generate SLSA3 provenance for your existing release workflows",
"iconName": "go-ossf-slsa3-publish", "iconName": "generator-generic-ossf-slsa3-publish",
"categories": ["Continuous integration"] "categories": ["Continuous integration", "Go", "Elixir", "Erlang", "PHP", "Haskell", "Rust", "Java", "Scala", "Gradle", "Maven", "Python", "C", "C++", "TypeScript", "JavaScript", "npm", "Ruby", "HTML", "Composer", "Makefile", "Ada"]
} }