mirrors/sprout
1
0
Fork 0
mirror of https://github.com/edera-dev/sprout.git synced 2025-12-19 15:40:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(workflows): release workflow should attest all artifacts together

Browse Source
This commit is contained in:
Alex Zenla
2025-11-03 00:06:53 -05:00
parent 3e5d54913c
commit 74b6a8deb3
1 changed files with 3 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
.github/workflows/release.yml vendored
View File

@@ -38,18 +38,13 @@ jobs:
run: | run: |
cargo version cargo version
- name: 'assemble artifacts' - name: 'assemble release artifacts'
run: ./hack/assemble.sh run: ./hack/assemble.sh
- name: 'attest sprout-x86_64.efi artifact' - name: 'attest release artifacts'
uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0 uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
with: with:
subject-path: target/assemble/sprout-x86_64.efi subject-path: target/assemble/*
- name: 'attest sprout-aarch64.efi artifact'
uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
with:
subject-path: target/assemble/sprout-aarch64.efi
- name: 'generate cultivator token' - name: 'generate cultivator token'
uses: actions/create-github-app-token@bf559f85448f9380bcfa2899dbdc01eb5b37be3a # v3.0.0-beta.2 uses: actions/create-github-app-token@bf559f85448f9380bcfa2899dbdc01eb5b37be3a # v3.0.0-beta.2