Skip to content

Commit 8688b4a

Browse files
ianlewisianlewis
authored
chore: Release v1.6.0-rc.0 (#1924)
#label:release v1.6.0-rc.0 Signed-off-by: Ian Lewis <ianlewis@google.com>
1 parent 3bdba8d commit 8688b4a

File tree

13 files changed

+43
-43
lines changed

13 files changed

+43
-43
lines changed

‎.github/actions/generate-builder/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ runs:
4242
using: "composite"
4343
steps:
4444
- name: Checkout builder repository
45-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
45+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
4646
with:
4747
repository: ${{ inputs.repository }}
4848
ref: ${{ inputs.ref }}

‎.github/actions/secure-download-artifact/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ runs:
5858

5959
- name: Compute the hash
6060
id: compute
61-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@main
61+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@v1.6.0-rc.0
6262
with:
6363
path: "${{ inputs.path }}"
6464

‎.github/actions/secure-download-folder/action.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ runs:
1717
steps:
1818
- name: Compute a random value
1919
id: rng
20-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
20+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.0
2121

2222
- name: Download the artifact
2323
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
@@ -27,7 +27,7 @@ runs:
2727

2828
- name: Compute the hash
2929
id: compute
30-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@main
30+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@v1.6.0-rc.0
3131
with:
3232
path: "${{ steps.rng.outputs.random }}/folder.tgz"
3333

‎.github/actions/secure-upload-artifact/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ runs:
1818
steps:
1919
- name: Compute binary hash
2020
id: compute-digest
21-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@main
21+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@v1.6.0-rc.0
2222
with:
2323
path: "${{ inputs.path }}"
2424

‎.github/actions/secure-upload-folder/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ runs:
4646
4747
- name: Upload the artifact
4848
id: upload
49-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@main
49+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@v1.6.0-rc.0
5050
with:
5151
name: "${{ inputs.name }}"
5252
path: "${{ steps.create.outputs.tarball-path }}"

‎.github/workflows/builder_docker-based_slsa3.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -153,7 +153,7 @@ jobs:
153153
steps:
154154
- name: Generate random 16-byte value (32-char hex encoded)
155155
id: rng
156-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
156+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.0
157157

158158
# This detects the repository and ref of the reusable workflow.
159159
# For pull request, this gets the referenced slsa-github-generator workflow.
@@ -168,7 +168,7 @@ jobs:
168168
steps:
169169
- name: Detect the builder ref
170170
id: detect
171-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@main
171+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@v1.6.0-rc.0
172172

173173
###################################################################
174174
# #
@@ -185,7 +185,7 @@ jobs:
185185
steps:
186186
- name: Generate builder binary
187187
id: generate
188-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
188+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.6.0-rc.0
189189
with:
190190
repository: "${{ needs.detect-env.outputs.repository }}"
191191
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -218,7 +218,7 @@ jobs:
218218
steps:
219219
- uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
220220
- name: Checkout builder repository
221-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
221+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
222222
with:
223223
repository: "${{ needs.detect-env.outputs.repository }}"
224224
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -346,7 +346,7 @@ jobs:
346346
347347
348348
- name: Checkout builder repository
349-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
349+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
350350
with:
351351
repository: "${{ needs.detect-env.outputs.repository }}"
352352
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -474,7 +474,7 @@ jobs:
474474
provenance-sha256: ${{ steps.upload-signed.outputs.sha256 }}
475475
steps:
476476
- name: Checkout builder repository
477-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
477+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
478478
with:
479479
repository: "${{ needs.detect-env.outputs.repository }}"
480480
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -564,7 +564,7 @@ jobs:
564564
if: inputs.upload-assets && (startsWith(github.ref, 'refs/tags/') || inputs.upload-tag-name != '')
565565
steps:
566566
- name: Checkout builder repository
567-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
567+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
568568
with:
569569
repository: "${{ needs.detect-env.outputs.repository }}"
570570
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/builder_go_slsa3.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -100,7 +100,7 @@ jobs:
100100
steps:
101101
- name: Generate random 16-byte value (32-char hex encoded)
102102
id: rng
103-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
103+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.0
104104

105105
detect-env:
106106
outputs:
@@ -112,7 +112,7 @@ jobs:
112112
steps:
113113
- name: Detect the builder ref
114114
id: detect
115-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@main
115+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@v1.6.0-rc.0
116116

117117
###################################################################
118118
# #
@@ -127,7 +127,7 @@ jobs:
127127
steps:
128128
- name: Generate builder binary
129129
id: generate
130-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
130+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.6.0-rc.0
131131
with:
132132
repository: "${{ needs.detect-env.outputs.repository }}"
133133
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -161,7 +161,7 @@ jobs:
161161
needs: [builder, rng, detect-env]
162162
steps:
163163
- name: Checkout builder repository
164-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
164+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
165165
with:
166166
repository: "${{ needs.detect-env.outputs.repository }}"
167167
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -207,7 +207,7 @@ jobs:
207207
needs: [builder, build-dry, rng, detect-env]
208208
steps:
209209
- name: Checkout builder repository
210-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
210+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
211211
with:
212212
repository: "${{ needs.detect-env.outputs.repository }}"
213213
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -287,7 +287,7 @@ jobs:
287287
go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
288288
steps:
289289
- name: Checkout builder repository
290-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
290+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
291291
with:
292292
repository: "${{ needs.detect-env.outputs.repository }}"
293293
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -345,7 +345,7 @@ jobs:
345345
if: inputs.upload-assets && (startsWith(github.ref, 'refs/tags/') || inputs.upload-tag-name != '')
346346
steps:
347347
- name: Checkout builder repository
348-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
348+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
349349
with:
350350
repository: "${{ needs.detect-env.outputs.repository }}"
351351
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/builder_nodejs_slsa3.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ jobs:
6767
steps:
6868
- name: Generate the token
6969
id: generate
70-
uses: slsa-framework/slsa-github-generator/actions/delegator/setup-token@main
70+
uses: slsa-framework/slsa-github-generator/actions/delegator/setup-token@v1.6.0-rc.0
7171
with:
7272
slsa-workflow-recipient: "delegator_generic_slsa3.yml"
7373
slsa-rekor-log-public: ${{ inputs.rekor-log-public }}
@@ -83,7 +83,7 @@ jobs:
8383
id-token: write # For signing.
8484
contents: write # For asset uploads.
8585
packages: write # For publishing to GitHub packages.
86-
uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_generic_slsa3.yml@main
86+
uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_generic_slsa3.yml@v1.6.0-rc.0
8787
with:
8888
slsa-token: ${{ needs.slsa-setup.outputs.slsa-token }}
8989

@@ -111,7 +111,7 @@ jobs:
111111
# NOTE: secure-download-artifact ensures that the downloaded file doesn't overwrite an existing file.
112112
- name: Download package
113113
id: package-download
114-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@main
114+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@v1.6.0-rc.0
115115
with:
116116
name: ${{ fromJSON(needs.slsa-run.outputs.build-artifacts-outputs).package-download-name }}
117117
path: ${{ fromJSON(needs.slsa-run.outputs.build-artifacts-outputs).package-filename }}

‎.github/workflows/delegator_generic_slsa3.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ jobs:
7777
steps:
7878
- name: Generate random 16-byte value (32-char hex encoded)
7979
id: rng
80-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
80+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.0
8181

8282
# verify-token verifies the slsa token.
8383
verify-token:
@@ -91,15 +91,15 @@ jobs:
9191
steps:
9292
- name: Verify token with test action
9393
id: verify
94-
uses: slsa-framework/slsa-github-generator/.github/actions/verify-token@main
94+
uses: slsa-framework/slsa-github-generator/.github/actions/verify-token@v1.6.0-rc.0
9595
with:
9696
slsa-workflow-recipient: "delegator_generic_slsa3.yml"
9797
slsa-unverified-token: ${{ inputs.slsa-token }}
9898
output-predicate: ${{ env.SLSA_PREDICATE_FILE }}
9999

100100
- name: Upload predicate
101101
id: upload
102-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@main
102+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@v1.6.0-rc.0
103103
with:
104104
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
105105
path: ${{ env.SLSA_PREDICATE_FILE }}
@@ -110,7 +110,7 @@ jobs:
110110
runs-on: ubuntu-latest
111111
steps:
112112
- name: Check private repos
113-
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@main
113+
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@v1.6.0-rc.0
114114
with:
115115
error_message: "Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
116116
override: ${{ fromJson(needs.verify-token.outputs.slsa-verified-token).builder.rekor_log_public }}
@@ -138,7 +138,7 @@ jobs:
138138
echo "$RUNNER: $RUNNER"
139139
140140
- name: Checkout the tool repository
141-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
141+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.0
142142
with:
143143
repository: ${{ needs.verify-token.outputs.tool-repository }}
144144
ref: ${{ needs.verify-token.outputs.tool-ref }}
@@ -162,7 +162,7 @@ jobs:
162162
tree
163163
164164
- name: Checkout the project repository
165-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-project-checkout@main
165+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-project-checkout@v1.6.0-rc.0
166166

167167
# NOTE: This calls the Action defined in the slsa-token.
168168
- name: Build artifacts
@@ -188,7 +188,7 @@ jobs:
188188
189189
- name: Upload artifact layout file
190190
id: upload
191-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@main
191+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@v1.6.0-rc.0
192192
with:
193193
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
194194
path: "${{ env.SLSA_ARTIFACTS_FILE }}"
@@ -203,14 +203,14 @@ jobs:
203203
runs-on: ubuntu-latest
204204
steps:
205205
- name: Download the artifact layout file
206-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@main
206+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@v1.6.0-rc.0
207207
with:
208208
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
209209
path: "${{ env.SLSA_ARTIFACTS_FILE }}"
210210
sha256: ${{ needs.build-artifacts-ubuntu.outputs.artifacts-layout-sha256 }}
211211

212212
- name: Download the predicate file
213-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@main
213+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@v1.6.0-rc.0
214214
with:
215215
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
216216
path: ${{ env.SLSA_PREDICATE_FILE }}
@@ -240,7 +240,7 @@ jobs:
240240
241241
- name: Generate attestations
242242
id: attestations
243-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-attestations@main
243+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-attestations@v1.6.0-rc.0
244244
with:
245245
slsa-layout-file: ${{ env.SLSA_ARTIFACTS_FILE }}
246246
predicate-type: ${{ steps.predicate-type.outputs.predicate-type }}
@@ -249,7 +249,7 @@ jobs:
249249

250250
- name: Sign attestations
251251
id: sign
252-
uses: slsa-framework/slsa-github-generator/.github/actions/sign-attestations@main
252+
uses: slsa-framework/slsa-github-generator/.github/actions/sign-attestations@v1.6.0-rc.0
253253
with:
254254
attestations: attestations
255255
output-folder: "${{ needs.rng.outputs.value }}-slsa-attestations"

‎.github/workflows/e2e.create-docker_based-predicate.schedule.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
2929
- name: Detect the builder ref
3030
id: detect
31-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@main
31+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@v1.6.0-rc.0
3232
- name: Update the build definition
3333
# We use a build definition hard-coded in testadata. To ensure validation against
3434
# workflow context, we must update the source references.

0 commit comments

Comments
 (0)