Skip to content

Commit

Permalink
update
Browse files Browse the repository at this point in the history
Signed-off-by: laurentsimon <laurentsimon@google.com>
  • Loading branch information
laurentsimon committed Jul 19, 2023
1 parent f8edbc8 commit 801573c
Showing 1 changed file with 0 additions and 33 deletions.
33 changes: 0 additions & 33 deletions .github/workflows/builder_example_slsa3.yml
Original file line number Diff line number Diff line change
Expand Up @@ -106,36 +106,3 @@ jobs:
secrets:
secret1: ${{ inputs.password }}
secret2: ${{ inputs.token }}

publish:
needs: [slsa-run]
if: startsWith(github.ref, 'refs/tags/')
permissions:
contents: write # For asset uploads.
runs-on: ubuntu-latest
steps:
- name: Download provenance
uses: slsa-framework/slsa-github-generator/actions/delegator/secure-attestations-download@main
with:
name: ${{ needs.slsa-run.outputs.attestations-download-name }}
sha256: ${{ needs.slsa-run.outputs.attestations-download-sha256 }}

- name: Upload
env:
GH_TOKEN: ${{ github.token }}
OUT: ${{ needs.slsa-run.outputs.attestations-download-name }}
REF: ${{ github.ref }}
run: |
set -euo pipefail
# Get the tag.
tag="$(echo $REF | cut -d '/' -f3-)"
# List attestations.
find "$OUT" -type f | tee ./FILES
# Upload attestations.
while IFS= read -r line; do
file="$line"
gh -R "$GITHUB_REPOSITORY" release upload "$tag" "$file"
done < FILES

0 comments on commit 801573c

Please sign in to comment.