Skip to content

chore: v2.0.0-rc.0: update tags (#3578) #79

chore: v2.0.0-rc.0: update tags (#3578)

chore: v2.0.0-rc.0: update tags (#3578) #79

Workflow file for this run

# Copyright 2023 SLSA Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
name: Builders releaser
on:
# For manual tests.
workflow_dispatch:
inputs:
release-tag:
description: "Release tag to test"
required: true
type: string
push:
tags:
- "*" # triggers only if push new tag version, like `0.8.4` or else
permissions: read-all
jobs:
# Pre-release reference verification.
pre-release-refs:
name: pre release refs verification
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with:
path: __THIS_REPO__
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with:
repository: slsa-framework/example-package
ref: main
path: __EXAMPLE_PACKAGE__
- name: manual release ref
env:
GH_TOKEN: ${{ github.token }}
RELEASE_TAG: "${{ inputs.release-tag }}"
if: github.ref_type != 'tag'
run: ./__THIS_REPO__/.github/workflows/scripts/pre-release/references.sh
- name: new tag release ref
env:
GH_TOKEN: ${{ github.token }}
RELEASE_TAG: "${{ github.ref_name }}"
if: github.ref_type == 'tag'
run: ./__THIS_REPO__/.github/workflows/scripts/pre-release/references.sh
# Generic generator.
container-generator:
needs: [pre-release-refs]
permissions:
id-token: write # For signing.
contents: write # For asset uploads.
actions: read # For the entrypoint.
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v2.0.0-rc.0
with:
go-version: "1.21"
config-file: .github/workflows/configs-container/config-release.yml
compile-builder: true
# Generic generator.
generic-generator:
needs: [pre-release-refs]
permissions:
id-token: write # For signing.
contents: write # For asset uploads.
actions: read # For the entrypoint.
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v2.0.0-rc.0
with:
go-version: "1.21"
config-file: .github/workflows/configs-generic/config-release.yml
compile-builder: true
# Go builder.
go-builder:
needs: [pre-release-refs]
permissions:
id-token: write # For signing.
contents: write # For asset uploads.
actions: read # For the entrypoint.
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v2.0.0-rc.0
with:
go-version: "1.21"
config-file: .github/workflows/configs-go/config-release.yml
compile-builder: true
# Docker builder.
docker-builder:
needs: [pre-release-refs]
permissions:
id-token: write # For signing.
contents: write # For asset uploads.
actions: read # For the entrypoint.
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v2.0.0-rc.0
with:
go-version: "1.21"
config-file: .github/workflows/configs-docker/config-release.yml
compile-builder: true