File tree Expand file tree Collapse file tree 2 files changed +12
-9
lines changed
Expand file tree Collapse file tree 2 files changed +12
-9
lines changed Original file line number Diff line number Diff line change @@ -319,18 +319,20 @@ jobs:
319319 go-provenance-name : ${{ steps.sign-prov.outputs.signed-provenance-name }}
320320 go-provenance-sha256 : ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
321321 steps :
322- - name : Generate builder
323- id : generate-builder
324- continue-on-error : true
325- uses : slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
322+ - name : Checkout builder repository
323+ uses : slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
326324 with :
327325 repository : " ${{ needs.detect-env.outputs.repository }}"
328326 ref : " ${{ needs.detect-env.outputs.ref }}"
329- go-version : " 1.22"
330- binary : " ${{ env.BUILDER_BINARY }}"
331- compile-builder : " true"
332- directory : " ${{ env.BUILDER_DIR }}"
333- allow-private-repository : ${{ inputs.private-repository }}
327+ path : __BUILDER_CHECKOUT_DIR__
328+
329+ - name : Download builder
330+ uses : ./__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact
331+ with :
332+ name : " ${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
333+ path : " ${{ env.BUILDER_BINARY }}"
334+ sha256 : " ${{ needs.builder.outputs.go-builder-sha256 }}"
335+ set-executable : true
334336
335337 - name : Create and sign provenance
336338 id : sign-prov
Original file line number Diff line number Diff line change @@ -112,6 +112,7 @@ jobs:
112112 uses : ./.github/workflows/builder_go_slsa3.yml
113113 with :
114114 go-version : 1.22
115+ compile-builder : true
115116
116117 go-verify :
117118 needs : generic-provenance
You can’t perform that action at this time.
0 commit comments