tyler.durden/bottom
1
0
Fork 0
mirror of https://github.com/ClementTsang/bottom.git synced 2025-07-24 22:24:53 +02:00
Code Issues Packages Projects Releases Wiki Activity

ci: try attestations for binaries (#1455)

Browse Source 
* ci: try attestations for binaries

* add additional attestation steps
This commit is contained in:
Clement Tsang 2024-05-03 11:37:16 -04:00 committed by GitHub
parent 2b819a3097
commit d53725bbfc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
.github/workflows/build_releases.yml vendored
View File

@ -27,6 +27,11 @@ env:
COMPLETION_DIR: "target/tmp/bottom/completion/" COMPLETION_DIR: "target/tmp/bottom/completion/"
MANPAGE_DIR: "target/tmp/bottom/manpage/" MANPAGE_DIR: "target/tmp/bottom/manpage/"
permissions:
id-token: write
contents: read
attestations: write
# TODO: Maybe add retry job in case of timeouts? # TODO: Maybe add retry job in case of timeouts?
jobs: jobs:
build-binaries: build-binaries:
@ -177,6 +182,11 @@ jobs:
tar -czvf bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz btm completion tar -czvf bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz btm completion
echo "ASSET=bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz" >> $GITHUB_ENV echo "ASSET=bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz" >> $GITHUB_ENV
- name: Generate artifact attestation for file
uses: actions/attest-build-provenance@v1
with:
subject-path: ${{ env.ASSET }}
- name: Create release directory for artifact, move file - name: Create release directory for artifact, move file
shell: bash shell: bash
run: | run: |
@ -245,6 +255,11 @@ jobs:
cargo wix init cargo wix init
cargo wix cargo wix
- name: Generate artifact attestation for file
uses: actions/attest-build-provenance@v1
with:
subject-path: "bottom_x86_64_installer.msi"
- name: Create release directory for artifact, move files - name: Create release directory for artifact, move files
shell: bash shell: bash
run: | run: |
@ -284,6 +299,11 @@ jobs:
fi fi
python ./scripts/cirrus/build.py "$BRANCH" "release/" "${{ inputs.caller }}" python ./scripts/cirrus/build.py "$BRANCH" "release/" "${{ inputs.caller }}"
- name: Generate artifact attestation for file
uses: actions/attest-build-provenance@v1
with:
subject-path: "release/**/*.tar.gz"
- name: Save release as artifact - name: Save release as artifact
uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0 uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
with: with:
@ -400,6 +420,11 @@ jobs:
sudo chown $USER ./target/${{ matrix.info.target }}/debian/ 2>/dev/null || true sudo chown $USER ./target/${{ matrix.info.target }}/debian/ 2>/dev/null || true
rm -r ./target/${{ matrix.info.target }}/debian/ rm -r ./target/${{ matrix.info.target }}/debian/
- name: Generate artifact attestation for file
uses: actions/attest-build-provenance@v1
with:
subject-path: ${{ steps.verify.outputs.DEB_FILE }}
- name: Create release directory for artifact, move file - name: Create release directory for artifact, move file
shell: bash shell: bash
run: | run: |
@ -485,6 +510,11 @@ jobs:
sudo chown $USER ./target/${{ matrix.info.target }}/generate-rpm/ 2>/dev/null || true sudo chown $USER ./target/${{ matrix.info.target }}/generate-rpm/ 2>/dev/null || true
rm -r ./target/${{ matrix.info.target }}/generate-rpm/ rm -r ./target/${{ matrix.info.target }}/generate-rpm/
- name: Generate artifact attestation for file
uses: actions/attest-build-provenance@v1
with:
subject-path: ${{ steps.verify.outputs.RPM_FILE }}
- name: Create release directory for artifact, move file - name: Create release directory for artifact, move file
shell: bash shell: bash
run: | run: |