mirror of
https://github.com/containerd/containerd.git
synced 2026-08-04 15:10:45 +00:00
Merge pull request #11049 from austinvazquez/publish-attestation-with-release-artifacts
Publish attestation as release artifact
This commit is contained in:
12
.github/workflows/release.yml
vendored
12
.github/workflows/release.yml
vendored
@@ -147,6 +147,13 @@ jobs:
|
||||
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
||||
with:
|
||||
path: builds
|
||||
- name: Attest Artifacts
|
||||
id: attest
|
||||
uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4
|
||||
with:
|
||||
subject-path: ./builds/release-tars-**/*.tar.gz
|
||||
- name: Rename attestation artifact
|
||||
run: mv ${{ steps.attest.outputs.bundle-path }} containerd-${{ needs.check.outputs.stringver }}-attestation.intoto.jsonl
|
||||
- name: Create Release
|
||||
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
|
||||
with:
|
||||
@@ -158,8 +165,5 @@ jobs:
|
||||
body_path: ./builds/containerd-release-notes/release-notes.md
|
||||
files: |
|
||||
builds/release-tars-**/*
|
||||
containerd-*-attestation.intoto.jsonl
|
||||
make_latest: false
|
||||
- name: Attest Artifacts
|
||||
uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4
|
||||
with:
|
||||
subject-path: ./builds/release-tars-**/*.tar.gz
|
||||
|
||||
Reference in New Issue
Block a user