Merge pull request #17 from jhrozek/att_act

rdimitrov · web-flow · commit 93b0682f2fc5 · 2024-05-01T12:41:46.000+03:00
Use newer version of the generate attestation action - no more early access
diff --git a/.github/workflows/build-binary-signed-ghat-malicious.yml b/.github/workflows/build-binary-signed-ghat-malicious.yml
@@ -25,7 +25,7 @@ jobs:
 #          ...
 #
 #      - name: Sign artifact
-#        uses: github-early-access/generate-build-provenance@main
+#        uses: actions/attest-build-provenance@v1.0.0
 #        with:
 #          subject-path: '${{ github.workspace }}/demo-repo-go-binary'
 #
diff --git a/.github/workflows/build-binary-signed-ghat.yml b/.github/workflows/build-binary-signed-ghat.yml
@@ -21,7 +21,7 @@ jobs:
 #          ...
 #
 #      - name: Sign artifact
-#        uses: github-early-access/generate-build-provenance@main
+#        uses: actions/attest-build-provenance@v1.0.0
 #        with:
 #          subject-path: '${{ github.workspace }}/demo-repo-go-binary'
 #
diff --git a/.github/workflows/build-binary-unsigned.yml b/.github/workflows/build-binary-unsigned.yml
@@ -21,7 +21,7 @@ jobs:
 #          ...
 #
 #      - name: Sign artifact
-#        uses: github-early-access/generate-build-provenance@main
+#        uses: actions/attest-build-provenance@v1.0.0
 #        with:
 #          subject-path: '${{ github.workspace }}/demo-repo-go-binary'
 #
diff --git a/.github/workflows/build-image-signed-ghat-malicious.yml b/.github/workflows/build-image-signed-ghat-malicious.yml
@@ -34,7 +34,7 @@ jobs:
           context: .
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}
diff --git a/.github/workflows/build-image-signed-ghat-static-copied.yml b/.github/workflows/build-image-signed-ghat-static-copied.yml
@@ -31,7 +31,7 @@ jobs:
           file : Dockerfile.static
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}
diff --git a/.github/workflows/build-image-signed-ghat-static.yml b/.github/workflows/build-image-signed-ghat-static.yml
@@ -31,7 +31,7 @@ jobs:
           file : Dockerfile.static
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}
diff --git a/.github/workflows/build-image-signed-ghat.yml b/.github/workflows/build-image-signed-ghat.yml
@@ -30,7 +30,7 @@ jobs:
           context: .
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}

Original file line number	Diff line number	Diff line change
`@@ -25,7 +25,7 @@ jobs:`
`25`	`25`	`# ...`
`26`	`26`	`#`
`27`	`27`	`# - name: Sign artifact`
`28`		`-# uses: github-early-access/generate-build-provenance@main`
	`28`	`+# uses: actions/attest-build-provenance@v1.0.0`
`29`	`29`	`# with:`
`30`	`30`	`# subject-path: '${{ github.workspace }}/demo-repo-go-binary'`
`31`	`31`	`#`
Original file line number	Diff line number	Diff line change
`@@ -21,7 +21,7 @@ jobs:`
`21`	`21`	`# ...`
`22`	`22`	`#`
`23`	`23`	`# - name: Sign artifact`
`24`		`-# uses: github-early-access/generate-build-provenance@main`
	`24`	`+# uses: actions/attest-build-provenance@v1.0.0`
`25`	`25`	`# with:`
`26`	`26`	`# subject-path: '${{ github.workspace }}/demo-repo-go-binary'`
`27`	`27`	`#`