Add Actionpath and Job to Entrypoint

Closes: #226 Signed-off-by: Jeroen Knoops <jeroen.knoops@philips.com>
philips-labs · Dec 2, 2022 · 25097a8 · 25097a8
1 parent 3df408f
commit 25097a8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/pkg/github/provenance.go b/pkg/github/provenance.go
@@ -37,7 +37,7 @@ func (e *Environment) GenerateProvenanceStatement(ctx context.Context, subjecter
 		// See https://github.com/github/feedback/discussions/4188
 		intoto.WithInvocation(
 			BuildType,
-			e.Context.Workflow,
+			fmt.Sprintf("%s:%s", e.Context.ActionPath, e.Context.Job),
 			nil,
 			event.Inputs,
 			[]intoto.Item{

diff --git a/pkg/github/provenance_test.go b/pkg/github/provenance_test.go
@@ -241,6 +241,8 @@ func TestGenerateProvenance(t *testing.T) {
 		Repository:      "philips-labs/slsa-provenance-action",
 		Event:           []byte(pushGitHubEvent),
 		EventName:       "push",
+		ActionPath:      ".github/workflows/build.yml",
+		Job:             "job-context",
 		SHA:             "849fb987efc0c0fc72e26a38f63f0c00225132be",
 	}
 	materials := []intoto.Item{
@@ -299,6 +301,8 @@ func TestGenerateProvenanceFromGitHubRelease(t *testing.T) {
 		Repository:      "philips-labs/slsa-provenance-action",
 		Event:           []byte(pushGitHubEvent),
 		EventName:       "push",
+		ActionPath:      ".github/workflows/build.yml",
+		Job:             "job-context",
 		SHA:             "849fb987efc0c0fc72e26a38f63f0c00225132be",
 	}
 	materials := []intoto.Item{
@@ -402,7 +406,7 @@ func TestGenerateProvenanceFromGitHubReleaseErrors(t *testing.T) {
 }
 
 func assertInvocation(assert *assert.Assertions, recipe intoto.Invocation) {
-	assert.Equal("", recipe.ConfigSource.EntryPoint)
+	assert.Equal(".github/workflows/build.yml:job-context", recipe.ConfigSource.EntryPoint)
 	assert.Nil(recipe.Environment)
 	assert.Nil(recipe.Parameters)
 }