Skip to content

Commit 1526416

Browse files
compile builder
Signed-off-by: Ramon Petgrave <[email protected]> Signed-off-by: Ramon Petgrave <[email protected]>
1 parent 4f20057 commit 1526416

File tree

2 files changed

+12
-9
lines changed

2 files changed

+12
-9
lines changed

.github/workflows/builder_go_slsa3.yml

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -319,18 +319,20 @@ jobs:
319319
go-provenance-name: ${{ steps.sign-prov.outputs.signed-provenance-name }}
320320
go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
321321
steps:
322-
- name: Generate builder
323-
id: generate-builder
324-
continue-on-error: true
325-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
322+
- name: Checkout builder repository
323+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
326324
with:
327325
repository: "${{ needs.detect-env.outputs.repository }}"
328326
ref: "${{ needs.detect-env.outputs.ref }}"
329-
go-version: "1.22"
330-
binary: "${{ env.BUILDER_BINARY }}"
331-
compile-builder: "true"
332-
directory: "${{ env.BUILDER_DIR }}"
333-
allow-private-repository: ${{ inputs.private-repository }}
327+
path: __BUILDER_CHECKOUT_DIR__
328+
329+
- name: Download builder
330+
uses: ./__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact
331+
with:
332+
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
333+
path: "${{ env.BUILDER_BINARY }}"
334+
sha256: "${{ needs.builder.outputs.go-builder-sha256 }}"
335+
set-executable: true
334336

335337
- name: Create and sign provenance
336338
id: sign-prov

.github/workflows/debug.generic-generator.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,7 @@ jobs:
112112
uses: ./.github/workflows/builder_go_slsa3.yml
113113
with:
114114
go-version: 1.22
115+
compile-builder: true
115116

116117
go-verify:
117118
needs: generic-provenance

0 commit comments

Comments
 (0)