Skip to content

Commit 8f12c7b

Browse files
ianlewisianlewis
authored
chore: Release v1.6.0-rc.1 (#2050)
Starts release process for v1.6.0-rc.1. Merge the following PRs before this PR. - #2046 - #2047 - #2048 - #2049 #label:release v1.6.0-rc.1 --------- Signed-off-by: Ian Lewis <[email protected]>
1 parent b902145 commit 8f12c7b

File tree

14 files changed

+45
-45
lines changed

14 files changed

+45
-45
lines changed

‎.github/actions/generate-builder/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ runs:
4242
using: "composite"
4343
steps:
4444
- name: Checkout builder repository
45-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
45+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
4646
with:
4747
repository: ${{ inputs.repository }}
4848
ref: ${{ inputs.ref }}

‎.github/actions/secure-download-artifact/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ runs:
5858

5959
- name: Compute the hash
6060
id: compute
61-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@main
61+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@v1.6.0-rc.1
6262
with:
6363
path: "${{ inputs.path }}"
6464

‎.github/actions/secure-download-folder/action.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ runs:
1717
steps:
1818
- name: Compute a random value
1919
id: rng
20-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
20+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.1
2121

2222
- name: Download the artifact
2323
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
@@ -27,7 +27,7 @@ runs:
2727

2828
- name: Compute the hash
2929
id: compute
30-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@main
30+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@v1.6.0-rc.1
3131
with:
3232
path: "${{ steps.rng.outputs.random }}/folder.tgz"
3333

‎.github/actions/secure-upload-artifact/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ runs:
1818
steps:
1919
- name: Compute binary hash
2020
id: compute-digest
21-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@main
21+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@v1.6.0-rc.1
2222
with:
2323
path: "${{ inputs.path }}"
2424

‎.github/actions/secure-upload-folder/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ runs:
4646
4747
- name: Upload the artifact
4848
id: upload
49-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@main
49+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@v1.6.0-rc.1
5050
with:
5151
name: "${{ inputs.name }}"
5252
path: "${{ steps.create.outputs.tarball-path }}"

‎.github/workflows/builder_docker-based_slsa3.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -151,7 +151,7 @@ jobs:
151151
steps:
152152
- name: Generate random 16-byte value (32-char hex encoded)
153153
id: rng
154-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
154+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.1
155155

156156
# This detects the repository and ref of the reusable workflow.
157157
# For pull request, this gets the referenced slsa-github-generator workflow.
@@ -166,7 +166,7 @@ jobs:
166166
steps:
167167
- name: Detect the builder ref
168168
id: detect
169-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@main
169+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@v1.6.0-rc.1
170170

171171
###################################################################
172172
# #
@@ -183,7 +183,7 @@ jobs:
183183
steps:
184184
- name: Generate builder binary
185185
id: generate
186-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
186+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.6.0-rc.1
187187
with:
188188
repository: "${{ needs.detect-env.outputs.repository }}"
189189
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -216,7 +216,7 @@ jobs:
216216
steps:
217217
- uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
218218
- name: Checkout builder repository
219-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
219+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
220220
with:
221221
repository: "${{ needs.detect-env.outputs.repository }}"
222222
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -344,7 +344,7 @@ jobs:
344344
345345
346346
- name: Checkout builder repository
347-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
347+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
348348
with:
349349
repository: "${{ needs.detect-env.outputs.repository }}"
350350
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -472,7 +472,7 @@ jobs:
472472
provenance-sha256: ${{ steps.upload-signed.outputs.sha256 }}
473473
steps:
474474
- name: Checkout builder repository
475-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
475+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
476476
with:
477477
repository: "${{ needs.detect-env.outputs.repository }}"
478478
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -562,7 +562,7 @@ jobs:
562562
if: inputs.upload-assets && (startsWith(github.ref, 'refs/tags/') || inputs.upload-tag-name != '')
563563
steps:
564564
- name: Checkout builder repository
565-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
565+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
566566
with:
567567
repository: "${{ needs.detect-env.outputs.repository }}"
568568
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/builder_go_slsa3.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -100,7 +100,7 @@ jobs:
100100
steps:
101101
- name: Generate random 16-byte value (32-char hex encoded)
102102
id: rng
103-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
103+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.1
104104

105105
detect-env:
106106
outputs:
@@ -112,7 +112,7 @@ jobs:
112112
steps:
113113
- name: Detect the builder ref
114114
id: detect
115-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@main
115+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@v1.6.0-rc.1
116116

117117
###################################################################
118118
# #
@@ -127,7 +127,7 @@ jobs:
127127
steps:
128128
- name: Generate builder binary
129129
id: generate
130-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
130+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.6.0-rc.1
131131
with:
132132
repository: "${{ needs.detect-env.outputs.repository }}"
133133
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -161,7 +161,7 @@ jobs:
161161
needs: [builder, rng, detect-env]
162162
steps:
163163
- name: Checkout builder repository
164-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
164+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
165165
with:
166166
repository: "${{ needs.detect-env.outputs.repository }}"
167167
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -207,7 +207,7 @@ jobs:
207207
needs: [builder, build-dry, rng, detect-env]
208208
steps:
209209
- name: Checkout builder repository
210-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
210+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
211211
with:
212212
repository: "${{ needs.detect-env.outputs.repository }}"
213213
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -287,7 +287,7 @@ jobs:
287287
go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
288288
steps:
289289
- name: Checkout builder repository
290-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
290+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
291291
with:
292292
repository: "${{ needs.detect-env.outputs.repository }}"
293293
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -345,7 +345,7 @@ jobs:
345345
if: inputs.upload-assets && (startsWith(github.ref, 'refs/tags/') || inputs.upload-tag-name != '')
346346
steps:
347347
- name: Checkout builder repository
348-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
348+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
349349
with:
350350
repository: "${{ needs.detect-env.outputs.repository }}"
351351
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/builder_nodejs_slsa3.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -106,7 +106,7 @@ jobs:
106106
steps:
107107
- name: Generate the token
108108
id: generate
109-
uses: slsa-framework/slsa-github-generator/actions/delegator/setup-token@main
109+
uses: slsa-framework/slsa-github-generator/actions/delegator/setup-token@v1.6.0-rc.1
110110
with:
111111
slsa-workflow-recipient: "delegator_generic_slsa3.yml"
112112
slsa-rekor-log-public: ${{ inputs.rekor-log-public }}
@@ -122,7 +122,7 @@ jobs:
122122
id-token: write # For signing.
123123
contents: write # For asset uploads.
124124
packages: write # For publishing to GitHub packages.
125-
uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_generic_slsa3.yml@main
125+
uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_generic_slsa3.yml@v1.6.0-rc.1
126126
with:
127127
slsa-token: ${{ needs.slsa-setup.outputs.slsa-token }}
128128

@@ -156,7 +156,7 @@ jobs:
156156
# NOTE: secure-download-artifact ensures that the downloaded file doesn't overwrite an existing file.
157157
- name: Download package
158158
id: package-download
159-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@main
159+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@v1.6.0-rc.1
160160
with:
161161
name: ${{ fromJSON(needs.slsa-run.outputs.build-artifacts-outputs).package-download-name }}
162162
path: ${{ fromJSON(needs.slsa-run.outputs.build-artifacts-outputs).package-filename }}

‎.github/workflows/delegator_generic_slsa3.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ jobs:
7777
steps:
7878
- name: Generate random 16-byte value (32-char hex encoded)
7979
id: rng
80-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
80+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.6.0-rc.1
8181

8282
# verify-token verifies the slsa token.
8383
verify-token:
@@ -91,15 +91,15 @@ jobs:
9191
steps:
9292
- name: Verify token
9393
id: verify
94-
uses: slsa-framework/slsa-github-generator/.github/actions/verify-token@main
94+
uses: slsa-framework/slsa-github-generator/.github/actions/verify-token@v1.6.0-rc.1
9595
with:
9696
slsa-workflow-recipient: "delegator_generic_slsa3.yml"
9797
slsa-unverified-token: ${{ inputs.slsa-token }}
9898
output-predicate: ${{ env.SLSA_PREDICATE_FILE }}
9999

100100
- name: Upload predicate
101101
id: upload
102-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@main
102+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@v1.6.0-rc.1
103103
with:
104104
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
105105
path: ${{ env.SLSA_PREDICATE_FILE }}
@@ -110,7 +110,7 @@ jobs:
110110
runs-on: ubuntu-latest
111111
steps:
112112
- name: Check private repos
113-
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@main
113+
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@v1.6.0-rc.1
114114
with:
115115
error_message: "Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
116116
override: ${{ fromJson(needs.verify-token.outputs.slsa-verified-token).builder.rekor_log_public }}
@@ -138,7 +138,7 @@ jobs:
138138
echo "$RUNNER: $RUNNER"
139139
140140
- name: Checkout the tool repository
141-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
141+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.6.0-rc.1
142142
with:
143143
repository: ${{ needs.verify-token.outputs.tool-repository }}
144144
ref: ${{ needs.verify-token.outputs.tool-ref }}
@@ -162,7 +162,7 @@ jobs:
162162
tree
163163
164164
- name: Checkout the project repository
165-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-project-checkout@main
165+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-project-checkout@v1.6.0-rc.1
166166

167167
# NOTE: This calls the Action defined in the slsa-token.
168168
- name: Build artifacts
@@ -188,7 +188,7 @@ jobs:
188188
189189
- name: Upload artifact layout file
190190
id: upload
191-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@main
191+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@v1.6.0-rc.1
192192
with:
193193
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
194194
path: "${{ env.SLSA_ARTIFACTS_FILE }}"
@@ -203,14 +203,14 @@ jobs:
203203
runs-on: ubuntu-latest
204204
steps:
205205
- name: Download the artifact layout file
206-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@main
206+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@v1.6.0-rc.1
207207
with:
208208
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_ARTIFACTS_FILE }}"
209209
path: "${{ env.SLSA_ARTIFACTS_FILE }}"
210210
sha256: ${{ needs.build-artifacts-ubuntu.outputs.artifacts-layout-sha256 }}
211211

212212
- name: Download the predicate file
213-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@main
213+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@v1.6.0-rc.1
214214
with:
215215
name: "${{ needs.rng.outputs.value }}-${{ env.SLSA_PREDICATE_FILE }}"
216216
path: ${{ env.SLSA_PREDICATE_FILE }}
@@ -240,7 +240,7 @@ jobs:
240240
241241
- name: Generate attestations
242242
id: attestations
243-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-attestations@main
243+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-attestations@v1.6.0-rc.1
244244
with:
245245
slsa-layout-file: ${{ env.SLSA_ARTIFACTS_FILE }}
246246
predicate-type: ${{ steps.predicate-type.outputs.predicate-type }}
@@ -249,7 +249,7 @@ jobs:
249249

250250
- name: Sign attestations
251251
id: sign
252-
uses: slsa-framework/slsa-github-generator/.github/actions/sign-attestations@main
252+
uses: slsa-framework/slsa-github-generator/.github/actions/sign-attestations@v1.6.0-rc.1
253253
with:
254254
attestations: attestations
255255
output-folder: "${{ needs.rng.outputs.value }}-slsa-attestations"

‎.github/workflows/e2e.create-docker_based-predicate.schedule.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
2929
- name: Detect the builder ref
3030
id: detect
31-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@main
31+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@v1.6.0-rc.1
3232
- name: Update the build definition
3333
# We use a build definition hard-coded in testadata. To ensure validation against
3434
# workflow context, we must update the source references.

0 commit comments

Comments
 (0)