Skip to content

Commit 7f4fdb8

Browse files
authored
chore: Release v1.5.0 (#1693)
Signed-off-by: Ian Lewis <[email protected]>
1 parent ad5c0dd commit 7f4fdb8

File tree

11 files changed

+69
-68
lines changed

11 files changed

+69
-68
lines changed

.github/workflows/builder_docker-based_slsa3.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,7 @@ jobs:
102102
steps:
103103
- name: Generate random 16-byte value (32-char hex encoded)
104104
id: rng
105-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
105+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
106106

107107
# This detects the repository and ref of the reusable workflow.
108108
# For pull request, this gets the head repository and head SHA.
@@ -117,7 +117,7 @@ jobs:
117117
steps:
118118
- name: Detect the builder ref
119119
id: detect
120-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
120+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
121121

122122
###################################################################
123123
# #
@@ -154,7 +154,7 @@ jobs:
154154
steps:
155155
- name: Generate builder binary
156156
id: generate
157-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
157+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
158158
with:
159159
repository: "${{ needs.detect-env.outputs.repository }}"
160160
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -187,7 +187,7 @@ jobs:
187187
steps:
188188
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
189189
- name: Checkout builder repository
190-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
190+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
191191
with:
192192
repository: "${{ needs.detect-env.outputs.repository }}"
193193
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -259,7 +259,7 @@ jobs:
259259
needs: [rng, detect-env, generate-builder]
260260
steps:
261261
- name: Checkout builder repository
262-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
262+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
263263
with:
264264
repository: "${{ needs.detect-env.outputs.repository }}"
265265
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -367,7 +367,7 @@ jobs:
367367
provenance-name: "${{ env.OUTPUT_FOLDER }}-${{ needs.rng.outputs.value }}"
368368
steps:
369369
- name: Checkout builder repository
370-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
370+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
371371
with:
372372
repository: "${{ needs.detect-env.outputs.repository }}"
373373
ref: "${{ needs.detect-env.outputs.ref }}"

.github/workflows/builder_go_slsa3.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ jobs:
8787
steps:
8888
- name: Generate random 16-byte value (32-char hex encoded)
8989
id: rng
90-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
90+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
9191

9292
detect-env:
9393
outputs:
@@ -99,7 +99,7 @@ jobs:
9999
steps:
100100
- name: Detect the builder ref
101101
id: detect
102-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
102+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
103103

104104
###################################################################
105105
# #
@@ -114,7 +114,7 @@ jobs:
114114
steps:
115115
- name: Generate builder binary
116116
id: generate
117-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
117+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
118118
with:
119119
repository: "${{ needs.detect-env.outputs.repository }}"
120120
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -148,7 +148,7 @@ jobs:
148148
needs: [builder, rng, detect-env]
149149
steps:
150150
- name: Checkout builder repository
151-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
151+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
152152
with:
153153
repository: "${{ needs.detect-env.outputs.repository }}"
154154
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -194,7 +194,7 @@ jobs:
194194
needs: [builder, build-dry, rng, detect-env]
195195
steps:
196196
- name: Checkout builder repository
197-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
197+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
198198
with:
199199
repository: "${{ needs.detect-env.outputs.repository }}"
200200
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -274,7 +274,7 @@ jobs:
274274
go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
275275
steps:
276276
- name: Checkout builder repository
277-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
277+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
278278
with:
279279
repository: "${{ needs.detect-env.outputs.repository }}"
280280
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -332,7 +332,7 @@ jobs:
332332
if: inputs.upload-assets == true
333333
steps:
334334
- name: Checkout builder repository
335-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
335+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
336336
with:
337337
repository: "${{ needs.detect-env.outputs.repository }}"
338338
ref: "${{ needs.detect-env.outputs.ref }}"

.github/workflows/delegator_generic_slsa3.yml

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ jobs:
7777
steps:
7878
- name: Generate random 16-byte value (32-char hex encoded)
7979
id: rng
80-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
80+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
8181

8282
# verify-token verifies the slsa token.
8383
verify-token:
@@ -91,15 +91,15 @@ jobs:
9191
steps:
9292
- name: Verify token with test action
9393
id: verify
94-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
94+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
9595
with:
9696
slsa-workflow-recipient: "delegator_generic_slsa3.yml"
9797
slsa-unverified-token: ${{ inputs.slsa-token }}
9898
output-predicate: ${{ env.SLSA_PREDICATE_FILE }}
9999

100100
- name: Upload predicate
101101
id: upload
102-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
102+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
103103
with:
104104
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
105105
path: ${{ env.SLSA_PREDICATE_FILE }}
@@ -110,7 +110,7 @@ jobs:
110110
runs-on: ubuntu-latest
111111
steps:
112112
- name: Check private repos
113-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
113+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
114114
with:
115115
error_message: "Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
116116
override: ${{ fromJson(needs.verify-token.outputs.slsa-verified-token).builder.rekor_log_public }}
@@ -138,7 +138,7 @@ jobs:
138138
echo "$RUNNER: $RUNNER"
139139
140140
- name: Checkout the tool repository
141-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
141+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
142142
with:
143143
repository: ${{ needs.verify-token.outputs.tool-repository }}
144144
ref: ${{ needs.verify-token.outputs.tool-ref }}
@@ -162,7 +162,7 @@ jobs:
162162
tree
163163
164164
- name: Checkout the project repository
165-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
165+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
166166

167167
# NOTE: This calls the Action defined in the slsa-token.
168168
- name: Build artifacts
@@ -188,7 +188,7 @@ jobs:
188188
189189
- name: Upload artifact layout file
190190
id: upload
191-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
191+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
192192
with:
193193
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
194194
path: "${{ env.SLSA_ARTIFACTS_FILE }}"
@@ -203,14 +203,14 @@ jobs:
203203
runs-on: ubuntu-latest
204204
steps:
205205
- name: Download the artifact layout file
206-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
206+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
207207
with:
208208
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
209209
path: "${{ env.SLSA_ARTIFACTS_FILE }}"
210210
sha256: ${{ needs.build-artifacts-ubuntu.outputs.artifacts-layout-sha256 }}
211211

212212
- name: Download the predicate file
213-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
213+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
214214
with:
215215
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
216216
path: ${{ env.SLSA_PREDICATE_FILE }}
@@ -223,7 +223,7 @@ jobs:
223223
224224
- name: Generate attestations
225225
id: attestations
226-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
226+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
227227
with:
228228
slsa-layout-file: ${{ env.SLSA_ARTIFACTS_FILE }}
229229
predicate-type: "https://slsa.dev/provenance/v1.0?draft"
@@ -232,7 +232,7 @@ jobs:
232232

233233
- name: Sign attestations
234234
id: sign
235-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
235+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
236236
with:
237237
attestations: attestations
238238
output-folder: "${{ needs.rng.outputs.value }}-slsa-attestations"

.github/workflows/e2e.create-docker_based-predicate.schedule.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
steps:
2828
- name: Detect the builder ref
2929
id: detect
30-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
30+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
3131
- name: Create predicate
3232
id: predicate
3333
uses: ./.github/actions/create-docker_based-predicate

.github/workflows/generator_container_slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ jobs:
9494
- name: Detect the generator ref
9595
id: detect
9696
continue-on-error: true
97-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
97+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
9898

9999
- name: Final outcome
100100
id: final
@@ -125,7 +125,7 @@ jobs:
125125
- name: Generate builder
126126
id: generate-builder
127127
continue-on-error: true
128-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
128+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
129129
with:
130130
repository: "${{ needs.detect-env.outputs.repository }}"
131131
ref: "${{ needs.detect-env.outputs.ref }}"

.github/workflows/generator_generic_slsa3.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -110,7 +110,7 @@ jobs:
110110
- name: Detect the generator ref
111111
id: detect
112112
continue-on-error: true
113-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
113+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
114114

115115
- name: Final outcome
116116
id: final
@@ -143,7 +143,7 @@ jobs:
143143
- name: Generate builder
144144
id: generate-builder
145145
continue-on-error: true
146-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
146+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
147147
with:
148148
repository: "${{ needs.detect-env.outputs.repository }}"
149149
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -217,7 +217,7 @@ jobs:
217217
- name: Checkout builder repository
218218
id: checkout-builder
219219
continue-on-error: true
220-
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]-rc.0
220+
uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
221221
with:
222222
repository: "${{ needs.detect-env.outputs.repository }}"
223223
ref: "${{ needs.detect-env.outputs.ref }}"

CHANGELOG.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
<!-- toc -->
44

5-
- [Next Release](#next-release)
5+
- [v1.5.0](#v150)
66
- [Summary of changes](#summary-of-changes)
77
- [Go builder](#go-builder)
88
- [New Features](#new-features)
@@ -61,7 +61,7 @@
6161

6262
<!-- tocstop -->
6363

64-
# Next Release
64+
# v1.5.0
6565

6666
<!-- Information on the next release will be added here. -->
6767

@@ -71,27 +71,27 @@
7171

7272
#### New Features
7373

74-
- A new [`upload-tag-name`](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#workflow-inputs) input was added to allow users to specify the tag name for the release when `upload-assets` is set to `true`.
75-
- The environment variables included in provenance output were changed to include only those variables that are specified by the user in the [slsa-goreleaser.yml configuration file](https://github.com/slsa-framework/slsa-github-generator/tree/main/internal/builders/go#configuration-file) in order to improve reproducibility. See [#822](https://github.com/slsa-framework/slsa-github-generator/issues/822) for more information and background.
74+
- A new [`upload-tag-name`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/generic/README.md#workflow-inputs) input was added to allow users to specify the tag name for the release when `upload-assets` is set to `true`.
75+
- The environment variables included in provenance output were changed to include only those variables that are specified by the user in the [slsa-goreleaser.yml configuration file](https://github.com/slsa-framework/slsa-github-generator/tree/v1.5.0/internal/builders/go#configuration-file) in order to improve reproducibility. See [#822](https://github.com/slsa-framework/slsa-github-generator/issues/822) for more information and background.
7676

7777
### Generic generator
7878

7979
#### New Features
8080

81-
- A new boolean [`continue-on-error`](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#workflow-inputs) input was added which, when set to `true`, prevents the workflow from failing when a step fails. If set to true, the result of the reusable workflow will be return in the [`outcome`](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#workflow-outputs) output.
82-
- A new [`upload-tag-name`](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#workflow-inputs) input was added to allow users to specify the tag name for the release when `upload-assets` is set to `true`.
81+
- A new boolean [`continue-on-error`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/generic/README.md#workflow-inputs) input was added which, when set to `true`, prevents the workflow from failing when a step fails. If set to true, the result of the reusable workflow will be return in the [`outcome`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/generic/README.md#workflow-outputs) output.
82+
- A new [`upload-tag-name`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/generic/README.md#workflow-inputs) input was added to allow users to specify the tag name for the release when `upload-assets` is set to `true`.
8383

8484
### Container generator
8585

8686
#### New Features
8787

88-
- A new boolean [`continue-on-error`](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#workflow-inputs) input was added which, when set to `true`, prevents the workflow from failing when a step fails. If set to true, the result of the reusable workflow will be return in the [`outcome`](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#workflow-outputs) output.
89-
- A new [`repository-username`](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#workflow-inputs) secret input was added to allow users to pass their repository username that is stored in a [Github Actions encrypted secret](https://docs.github.com/en/actions/security-guides/encrypted-secrets). This secret input should only be used for high-entropy registry username values such as AWS Access Key.
90-
- Support was added for authenticating with [Google Artifact Registry](https://cloud.google.com/artifact-registry) and [Google Container Registry](https://cloud.google.com/container-registry) using [Workload Identity Federation](https://cloud.google.com/iam/docs/workload-identity-federation). Users can use this new feature by using the [`gcp-workload-identity-provider` and `gcp-service-account` inputs](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#workflow-inputs)
88+
- A new boolean [`continue-on-error`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/container/README.md#workflow-inputs) input was added which, when set to `true`, prevents the workflow from failing when a step fails. If set to true, the result of the reusable workflow will be return in the [`outcome`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/container/README.md#workflow-outputs) output.
89+
- A new [`repository-username`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/container/README.md#workflow-inputs) secret input was added to allow users to pass their repository username that is stored in a [Github Actions encrypted secret](https://docs.github.com/en/actions/security-guides/encrypted-secrets). This secret input should only be used for high-entropy registry username values such as AWS Access Key.
90+
- Support was added for authenticating with [Google Artifact Registry](https://cloud.google.com/artifact-registry) and [Google Container Registry](https://cloud.google.com/container-registry) using [Workload Identity Federation](https://cloud.google.com/iam/docs/workload-identity-federation). Users can use this new feature by using the [`gcp-workload-identity-provider` and `gcp-service-account` inputs](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/container/README.md#workflow-inputs)
9191

9292
## Changelog since v1.4.0
9393

94-
https://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...main
94+
https://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...v1.5.0
9595

9696
# v1.4.0
9797

SECURITY.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,7 @@ The following versions are currently supported and receive security updates.
2929

3030
| Version | Supported |
3131
| ------- | ------------------ |
32+
| 1.5.x | :white_check_mark: |
3233
| 1.4.x | :white_check_mark: |
3334
| <=1.2.x | :x: |
3435

0 commit comments

Comments
 (0)