8585 steps :
8686 - name : Generate random 16-byte value (32-char hex encoded)
8787 id : rng
88- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 88+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 8989
9090 # verify-token verifies the slsa token.
9191 verify-token :
@@ -101,15 +101,15 @@ jobs:
101101 steps :
102102 - name : Verify token
103103 id : verify
104- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 104+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 105105 with :
106106 slsa-workflow-recipient : " delegator_generic_slsa3.yml"
107107 slsa-unverified-token : ${{ inputs.slsa-token }}
108108 output-predicate : ${{ env.SLSA_PREDICATE_FILE }}
109109
110110 - name : Upload predicate
111111 id : upload
112- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 112+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 113113 with :
114114 name : " ${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
115115 path : ${{ env.SLSA_PREDICATE_FILE }}
@@ -120,7 +120,7 @@ jobs:
120120 runs-on : ubuntu-latest
121121 steps :
122122 - name : Check private repos
123- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 123+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 124124 with :
125125 error_message : " Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
126126 override : ${{ fromJson(needs.verify-token.outputs.slsa-verified-token).builder.rekor_log_public }}
@@ -147,7 +147,7 @@ jobs:
147147 echo "$RUNNER: $RUNNER"
148148
149149 - name : Checkout the tool repository
150- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 150+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 151151 with :
152152 repository : ${{ needs.verify-token.outputs.tool-repository }}
153153 ref : ${{ needs.verify-token.outputs.tool-ref }}
@@ -171,7 +171,7 @@ jobs:
171171 tree
172172
173173 - name : Checkout the project repository
174- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 174+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 175175 with :
176176 fetch-depth : ${{ toJson(needs.verify-token.outputs.slsa-verified-token).source.checkout.fetch_depth }}
177177
@@ -212,7 +212,7 @@ jobs:
212212
213213 - name : Upload artifact layout file
214214 id : upload
215- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 215+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 216216 with :
217217 name : " ${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
218218 path : " ${{ env.SLSA_ARTIFACTS_FILE }}"
@@ -228,14 +228,14 @@ jobs:
228228 runs-on : ubuntu-latest
229229 steps :
230230 - name : Download the artifact layout file
231- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 231+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 232232 with :
233233 name : " ${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
234234 path : " ${{ env.SLSA_ARTIFACTS_FILE }}"
235235 sha256 : ${{ needs.build-artifacts-ubuntu.outputs.artifacts-layout-sha256 }}
236236
237237 - name : Download the predicate file
238- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 238+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 239239 with :
240240 name : " ${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
241241 path : ${{ env.SLSA_PREDICATE_FILE }}
@@ -265,7 +265,7 @@ jobs:
265265
266266 - name : Generate attestations
267267 id : attestations
268- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 268+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 269269 with :
270270 slsa-layout-file : ${{ env.SLSA_ARTIFACTS_FILE }}
271271 predicate-type : ${{ steps.predicate-type.outputs.predicate-type }}
@@ -274,14 +274,14 @@ jobs:
274274
275275 - name : Sign attestations
276276 id : sign
277- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 277+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 278278 with :
279279 attestations : attestations
280280 output-folder : " ${{ needs.rng.outputs.value }}-slsa-attestations"
281281
282282 - name : Upload attestations
283283 id : upload
284- uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] -rc.3 284+ uses :
slsa-framework/slsa-github-generator/.github/actions/[email protected] 285285 with :
286286 name : " ${{ needs.rng.outputs.value }}-slsa-attestations"
287287 path : " ${{ needs.rng.outputs.value }}-slsa-attestations"
0 commit comments