Generate build provenace attestations

This commit is contained in:
Chocobo1 2024-06-04 16:08:27 +08:00
parent 8aa6c444c3
commit e22cd79e57
No known key found for this signature in database
GPG Key ID: 210D9C873253A68C
3 changed files with 22 additions and 1 deletions

View File

@ -6,6 +6,8 @@ on:
workflow_dispatch: # allow trigger it manually
permissions:
attestations: write
id-token: write
packages: write
jobs:
@ -86,6 +88,11 @@ jobs:
name: qbittorrent-nox_alpha_${{ steps.set-variables.outputs.PLATFORM_NAME }}
path: qbittorrent-nox_alpha_${{ steps.set-variables.outputs.PLATFORM_NAME }}
- name: Generate build provenace attestations
uses: actions/attest-build-provenance@v1
with:
subject-path: qbittorrent-nox_alpha_${{ steps.set-variables.outputs.PLATFORM_NAME }}
- name: Login to Docker Hub
uses: docker/login-action@v3
with:

View File

@ -2,7 +2,9 @@ name: CI
on: [pull_request, push]
permissions: {}
permissions:
attestations: write
id-token: write
concurrency:
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
@ -84,3 +86,8 @@ jobs:
with:
name: qbittorrent-nox_devel_${{ steps.set-variables.outputs.PLATFORM_NAME }}
path: qbittorrent-nox_devel_${{ steps.set-variables.outputs.PLATFORM_NAME }}
- name: Generate build provenace attestations
uses: actions/attest-build-provenance@v1
with:
subject-path: qbittorrent-nox_devel_${{ steps.set-variables.outputs.PLATFORM_NAME }}

View File

@ -4,6 +4,8 @@ on:
workflow_dispatch: # trigger it manually
permissions:
attestations: write
id-token: write
packages: write
env:
@ -103,6 +105,11 @@ jobs:
name: qbittorrent-nox_${{ env.QBT_VERSION }}_${{ steps.set-variables.outputs.PLATFORM_NAME }}
path: qbittorrent-nox_${{ env.QBT_VERSION }}_${{ steps.set-variables.outputs.PLATFORM_NAME }}
- name: Generate build provenace attestations
uses: actions/attest-build-provenance@v1
with:
subject-path: qbittorrent-nox_${{ env.QBT_VERSION }}_${{ steps.set-variables.outputs.PLATFORM_NAME }}
- name: Login to Docker Hub
uses: docker/login-action@v3
with: