forked from cubefs/cubefs
-
Notifications
You must be signed in to change notification settings - Fork 2
121 lines (114 loc) · 4.72 KB
/
slsa-releaser.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
name: SLSA Releaser
on:
workflow_dispatch:
permissions:
contents: read
jobs:
args:
runs-on: ubuntu-latest
outputs:
build-time: ${{ steps.ldflags.outputs.build-time }}
commit-id: ${{ steps.ldflags.outputs.commit-id }}
version: ${{ steps.ldflags.outputs.version }}
branch-name: ${{ steps.ldflags.outputs.branch-name }}
steps:
- id: checkout
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
with:
fetch-depth: 0
- id: setupgo
uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.4.0
with:
go-version: 1.17
- id: ldflags
run: |
echo "build-time=$(date +%Y%m%d%H%M)" >> "$GITHUB_OUTPUT"
echo "commit-id=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
echo "version=$(git describe --abbrev=0 --tags)" >> "$GITHUB_OUTPUT"
echo "branch-name=$(git rev-parse --abbrev-ref HEAD)" >> "$GITHUB_OUTPUT"
echo "abc-ext" > file.file
# Trusted builders
authtool-linux-amd64:
permissions:
id-token: write
contents: write
actions: read
needs: args
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830
with:
config-file: .github/slsa/slsa-authtool-linux-amd64.yml
go-version: 1.17
evaluated-envs: "BUILD_TIME:${{needs.args.outputs.build-time}}, COMMIT_ID:${{needs.args.outputs.commit-id}}, VERSION:${{needs.args.outputs.version}}, BRANCH_NAME:${{needs.args.outputs.branch-name}}"
compile-builder: true
# Trusted builders
show-abc-ext:
permissions:
id-token: write
contents: write
actions: read
needs: args
steps:
- id: ldflags
run: |
go version
cat file.file
# bcache-linux-amd64:
# permissions:
# id-token: write
# contents: write
# actions: read
# needs: args
# uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830
# with:
# config-file: .github/slsa/slsa-bcache-linux-amd64.yml
# go-version: 1.17
# evaluated-envs: "BUILD_TIME:${{needs.args.outputs.build-time}}, COMMIT_ID:${{needs.args.outputs.commit-id}}, VERSION:${{needs.args.outputs.version}}, BRANCH_NAME:${{needs.args.outputs.branch-name}}"
# compile-builder: true
# client-linux-amd64:
# permissions:
# id-token: write
# contents: write
# actions: read
# needs: args
# uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830
# with:
# config-file: .github/slsa/slsa-client-linux-amd64.yml
# go-version: 1.17
# evaluated-envs: "BUILD_TIME:${{needs.args.outputs.build-time}}, COMMIT_ID:${{needs.args.outputs.commit-id}}, VERSION:${{needs.args.outputs.version}}, BRANCH_NAME:${{needs.args.outputs.branch-name}}"
# compile-builder: true
# fdstore-linux-amd64:
# permissions:
# id-token: write
# contents: write
# actions: read
# needs: args
# uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830
# with:
# config-file: .github/slsa/slsa-fdstore-linux-amd64.yml
# go-version: 1.17
# evaluated-envs: "BUILD_TIME:${{needs.args.outputs.build-time}}, COMMIT_ID:${{needs.args.outputs.commit-id}}, VERSION:${{needs.args.outputs.version}}, BRANCH_NAME:${{needs.args.outputs.branch-name}}"
# compile-builder: true
# fsck-linux-amd64:
# permissions:
# id-token: write
# contents: write
# actions: read
# needs: args
# uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830
# with:
# config-file: .github/slsa/slsa-fsck-linux-amd64.yml
# go-version: 1.17
# evaluated-envs: "BUILD_TIME:${{needs.args.outputs.build-time}}, COMMIT_ID:${{needs.args.outputs.commit-id}}, VERSION:${{needs.args.outputs.version}}, BRANCH_NAME:${{needs.args.outputs.branch-name}}"
# compile-builder: true
# preload-linux-amd64:
# permissions:
# id-token: write
# contents: write
# actions: read
# needs: args
# uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830
# with:
# config-file: .github/slsa/slsa-preload-linux-amd64.yml
# go-version: 1.17
# evaluated-envs: "BUILD_TIME:${{needs.args.outputs.build-time}}, COMMIT_ID:${{needs.args.outputs.commit-id}}, VERSION:${{needs.args.outputs.version}}, BRANCH_NAME:${{needs.args.outputs.branch-name}}"
# compile-builder: true