-
Notifications
You must be signed in to change notification settings - Fork 9.1k
Create generator-generic-ossf-slsa3-publish.yml #19608
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
| @@ -0,0 +1,66 @@ | |||
| # This workflow uses actions that are not certified by GitHub. | |||
Check failure
Code scanning / check-spelling
Check File Path Error
| @@ -0,0 +1,66 @@ | |||
| # This workflow uses actions that are not certified by GitHub. | |||
Check failure
Code scanning / check-spelling
Check File Path Error
| # separate terms of service, privacy policy, and support | ||
| # documentation. | ||
|
|
||
| # This workflow lets you generate SLSA provenance file for your project. |
Check failure
Code scanning / check-spelling
Unrecognized Spelling Error
|
|
||
| # This workflow lets you generate SLSA provenance file for your project. | ||
| # The generation satisfies level 3 for the provenance requirements - see https://slsa.dev/spec/v0.1/requirements | ||
| # The project is an initiative of the OpenSSF (openssf.org) and is developed at |
Check failure
Code scanning / check-spelling
Unrecognized Spelling Error
| # The project is an initiative of the OpenSSF (openssf.org) and is developed at | ||
| # https://github.com/slsa-framework/slsa-github-generator. | ||
| # The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier. | ||
| # For more information about SLSA and how it improves the supply-chain, visit slsa.dev. |
Check failure
Code scanning / check-spelling
Unrecognized Spelling Error
| actions: read # To read the workflow path. | ||
| id-token: write # To sign the provenance. | ||
| contents: write # To add assets to a release. | ||
| uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 |
Check failure
Code scanning / check-spelling
Unrecognized Spelling Error
| actions: read # To read the workflow path. | ||
| id-token: write # To sign the provenance. | ||
| contents: write # To add assets to a release. | ||
| uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 |
Check failure
Code scanning / check-spelling
Unrecognized Spelling Error
| actions: read # To read the workflow path. | ||
| id-token: write # To sign the provenance. | ||
| contents: write # To add assets to a release. | ||
| uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 |
Check failure
Code scanning / check-spelling
Unrecognized Spelling Error
| - name: Generate subject for provenance | ||
| id: hash | ||
| run: | | ||
| set -euo pipefail |
Check warning
Code scanning / check-spelling
Candidate Pattern Warning
| actions: read # To read the workflow path. | ||
| id-token: write # To sign the provenance. | ||
| contents: write # To add assets to a release. | ||
| uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 |
Check warning
Code scanning / check-spelling
Candidate Pattern Warning
@check-spelling-bot Report🔴 Please reviewSee the 📂 files view, the 📜action log, or 📝 job summary for details.Unrecognized words (5)euo To accept these unrecognized words as correct, you could run the following commands... in a clone of the git@github.com:psanogo/terminal.git repository curl -s -S -L 'https://raw.githubusercontent.com/check-spelling/check-spelling/v0.0.25/apply.pl' |
perl - 'https://github.com/microsoft/terminal/actions/runs/19903833340/attempts/1' &&
git commit -m 'Update check-spelling metadata'Pattern suggestions ✂️ (2)You could add these patterns to Alternatively, if a pattern suggestion doesn't make sense for this project, add a Errors, Warnings, and Notices ❌ (3)See the 📂 files view, the 📜action log, or 📝 job summary for details.
See ❌ Event descriptions for more information. ✏️ Contributor please read thisBy default the command suggestion will generate a file named based on your commit. That's generally ok as long as you add the file to your commit. Someone can reorganize it later. If the listed items are:
See the 🔬 You can test your commits without appending to a PR by creating a new branch with that extra change and pushing it to your fork. The check-spelling action will run in response to your push -- it doesn't require an open pull request. By using such a branch, you can limit the number of typos your peers see you make. 😉 If the flagged items are 🤯 false positivesIf items relate to a ...
|
Summary of the Pull Request
References and Relevant Issues
Detailed Description of the Pull Request / Additional comments
Validation Steps Performed
PR Checklist