mirror of
https://github.com/ClementTsang/bottom.git
synced 2025-07-23 13:45:12 +02:00
ci: try attestations for binaries (#1455)
* ci: try attestations for binaries * add additional attestation steps
This commit is contained in:
parent
2b819a3097
commit
d53725bbfc
30
.github/workflows/build_releases.yml
vendored
30
.github/workflows/build_releases.yml
vendored
@ -27,6 +27,11 @@ env:
|
|||||||
COMPLETION_DIR: "target/tmp/bottom/completion/"
|
COMPLETION_DIR: "target/tmp/bottom/completion/"
|
||||||
MANPAGE_DIR: "target/tmp/bottom/manpage/"
|
MANPAGE_DIR: "target/tmp/bottom/manpage/"
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
id-token: write
|
||||||
|
contents: read
|
||||||
|
attestations: write
|
||||||
|
|
||||||
# TODO: Maybe add retry job in case of timeouts?
|
# TODO: Maybe add retry job in case of timeouts?
|
||||||
jobs:
|
jobs:
|
||||||
build-binaries:
|
build-binaries:
|
||||||
@ -177,6 +182,11 @@ jobs:
|
|||||||
tar -czvf bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz btm completion
|
tar -czvf bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz btm completion
|
||||||
echo "ASSET=bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz" >> $GITHUB_ENV
|
echo "ASSET=bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz" >> $GITHUB_ENV
|
||||||
|
|
||||||
|
- name: Generate artifact attestation for file
|
||||||
|
uses: actions/attest-build-provenance@v1
|
||||||
|
with:
|
||||||
|
subject-path: ${{ env.ASSET }}
|
||||||
|
|
||||||
- name: Create release directory for artifact, move file
|
- name: Create release directory for artifact, move file
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
@ -245,6 +255,11 @@ jobs:
|
|||||||
cargo wix init
|
cargo wix init
|
||||||
cargo wix
|
cargo wix
|
||||||
|
|
||||||
|
- name: Generate artifact attestation for file
|
||||||
|
uses: actions/attest-build-provenance@v1
|
||||||
|
with:
|
||||||
|
subject-path: "bottom_x86_64_installer.msi"
|
||||||
|
|
||||||
- name: Create release directory for artifact, move files
|
- name: Create release directory for artifact, move files
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
@ -284,6 +299,11 @@ jobs:
|
|||||||
fi
|
fi
|
||||||
python ./scripts/cirrus/build.py "$BRANCH" "release/" "${{ inputs.caller }}"
|
python ./scripts/cirrus/build.py "$BRANCH" "release/" "${{ inputs.caller }}"
|
||||||
|
|
||||||
|
- name: Generate artifact attestation for file
|
||||||
|
uses: actions/attest-build-provenance@v1
|
||||||
|
with:
|
||||||
|
subject-path: "release/**/*.tar.gz"
|
||||||
|
|
||||||
- name: Save release as artifact
|
- name: Save release as artifact
|
||||||
uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
|
uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
|
||||||
with:
|
with:
|
||||||
@ -400,6 +420,11 @@ jobs:
|
|||||||
sudo chown $USER ./target/${{ matrix.info.target }}/debian/ 2>/dev/null || true
|
sudo chown $USER ./target/${{ matrix.info.target }}/debian/ 2>/dev/null || true
|
||||||
rm -r ./target/${{ matrix.info.target }}/debian/
|
rm -r ./target/${{ matrix.info.target }}/debian/
|
||||||
|
|
||||||
|
- name: Generate artifact attestation for file
|
||||||
|
uses: actions/attest-build-provenance@v1
|
||||||
|
with:
|
||||||
|
subject-path: ${{ steps.verify.outputs.DEB_FILE }}
|
||||||
|
|
||||||
- name: Create release directory for artifact, move file
|
- name: Create release directory for artifact, move file
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
@ -485,6 +510,11 @@ jobs:
|
|||||||
sudo chown $USER ./target/${{ matrix.info.target }}/generate-rpm/ 2>/dev/null || true
|
sudo chown $USER ./target/${{ matrix.info.target }}/generate-rpm/ 2>/dev/null || true
|
||||||
rm -r ./target/${{ matrix.info.target }}/generate-rpm/
|
rm -r ./target/${{ matrix.info.target }}/generate-rpm/
|
||||||
|
|
||||||
|
- name: Generate artifact attestation for file
|
||||||
|
uses: actions/attest-build-provenance@v1
|
||||||
|
with:
|
||||||
|
subject-path: ${{ steps.verify.outputs.RPM_FILE }}
|
||||||
|
|
||||||
- name: Create release directory for artifact, move file
|
- name: Create release directory for artifact, move file
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
|
Loading…
x
Reference in New Issue
Block a user