66 COSIGN_EXPERIMENTAL : 1
77 REGISTRY : ghcr.io
88 IMAGE_NAME : ${{ github.repository }}
9- VERSION : 0.7.0
9+ VERSION : 0.7.1
1010
1111jobs :
1212 build :
@@ -20,15 +20,15 @@ jobs:
2020 image-digest : ${{ steps.image-info.outputs.image_digest }}
2121 steps :
2222 - name : Checkout source code
23- uses : actions/checkout@v3.1 .0
23+ uses : actions/checkout@v3.3 .0
2424
2525 - name : Set up Carvel
2626 uses : vmware-tanzu/carvel-setup-action@v1.2.0
2727 with :
2828 token : ${{ secrets.GITHUB_TOKEN }}
2929
3030 - name : Log into container registry
31- uses : redhat-actions/podman-login@v1.4
31+ uses : redhat-actions/podman-login@v1.5
3232 with :
3333 username : ${{ github.actor }}
3434 password : ${{ secrets.GITHUB_TOKEN }}
9191 uses : sigstore/cosign-installer@v2.8.1
9292
9393 - name : Log into container registry
94- uses : redhat-actions/podman-login@v1.4
94+ uses : redhat-actions/podman-login@v1.5
9595 with :
9696 username : ${{ github.actor }}
9797 password : ${{ secrets.GITHUB_TOKEN }}
@@ -114,48 +114,3 @@ jobs:
114114 registry-username : ${{ github.actor }}
115115 secrets :
116116 registry-password : ${{ secrets.GITHUB_TOKEN }}
117-
118- # provenance:
119- # name: Provenance
120- # runs-on: ubuntu-22.04
121- # needs: [build,sign]
122- # permissions:
123- # packages: write
124- # id-token: write
125- # env:
126- # IMAGE_RELEASE: ${{ needs.build.outputs.image-release }}
127- # PROVENANCE_FILE: provenance.att
128- # steps:
129- # - name: Install Cosign
130- # uses: sigstore/cosign-installer@v2.8.1
131-
132- # - name: Log into container registry
133- # uses: redhat-actions/podman-login@v1.4
134- # with:
135- # username: ${{ github.actor }}
136- # password: ${{ secrets.GITHUB_TOKEN }}
137- # registry: ${{ env.REGISTRY }}
138-
139- # - name: Extract digest
140- # run: |
141- # digest=$(echo ${IMAGE_RELEASE} | cut -d "@" -f2)
142- # echo "IMAGE_DIGEST=${digest}" >> $GITHUB_ENV
143-
144- # - name: Generate provenance
145- # uses: philips-labs/slsa-provenance-action@v0.7.2
146- # with:
147- # command: generate
148- # subcommand: container
149- # arguments: --repository ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} --tags ${{ env.VERSION }} --digest ${{ env.IMAGE_DIGEST }} --output-path ${{ env.PROVENANCE_FILE }}
150- # env:
151- # COSIGN_EXPERIMENTAL: 0
152-
153- # - name: Attach provenance
154- # run: |
155- # jq '.predicate' "${PROVENANCE_FILE}" > provenance-predicate.att
156- # cosign attest --predicate provenance-predicate.att --type slsaprovenance "${IMAGE_RELEASE}"
157-
158- # - uses: actions/upload-artifact@v3.1.1
159- # with:
160- # name: provenance.att
161- # path: ${{ env.PROVENANCE_FILE }}
0 commit comments