Browse Source

Update go-ossf-slsa3-publish.yml

master
yuriy0803 2 years ago committed by GitHub
parent
commit
0dbfbee767
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 67
      .github/workflows/go-ossf-slsa3-publish.yml

67
.github/workflows/go-ossf-slsa3-publish.yml

@ -1,38 +1,43 @@
# This workflow uses actions that are not certified by GitHub. name: SLSA Go Releaser
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
# This workflow lets you compile your Go project using a SLSA3 compliant builder.
# This workflow will generate a so-called "provenance" file describing the steps
# that were performed to generate the final binary.
# The project is an initiative of the OpenSSF (openssf.org) and is developed at
# https://github.com/slsa-framework/slsa-github-generator.
# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
# For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
name: SLSA Go releaser
on: on:
workflow_dispatch:
release: release:
types: [created] types:
- created
permissions: read-all
jobs: jobs:
# ======================================================================================================================================== build_windows:
# Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project. runs-on: windows-latest
# See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file
#========================================================================================================================================= steps:
build: - name: Checkout Repository
permissions: uses: actions/checkout@v2
id-token: write # To sign.
contents: write # To upload release assets. - name: Set up Go
actions: read # To read workflow path. uses: actions/setup-go@v2
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0 with:
go-version: 1.19
- name: Run SLSA Go Generator (Windows)
uses: slsa-framework/slsa-github-generator@v1.4.0
with: with:
go-version: 1.19 go-version: 1.19
# ============================================================================================================= # add any other necessary configuration here
# Optional: For more options, see https://github.com/slsa-framework/slsa-github-generator#golang-projects
# =============================================================================================================
build_linux:
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@v2
- name: Set up Go
uses: actions/setup-go@v2
with:
go-version: 1.19
- name: Run SLSA Go Generator (Linux)
uses: slsa-framework/slsa-github-generator@v1.4.0
with:
go-version: 1.19
# add any other necessary configuration here

Loading…
Cancel
Save