1 changed files with 38 additions and 33 deletions
@ -1,38 +1,43 @@ |
|||||||
# This workflow uses actions that are not certified by GitHub. |
name: SLSA Go Releaser |
||||||
# They are provided by a third-party and are governed by |
|
||||||
# separate terms of service, privacy policy, and support |
|
||||||
# documentation. |
|
||||||
|
|
||||||
# This workflow lets you compile your Go project using a SLSA3 compliant builder. |
|
||||||
# This workflow will generate a so-called "provenance" file describing the steps |
|
||||||
# that were performed to generate the final binary. |
|
||||||
# The project is an initiative of the OpenSSF (openssf.org) and is developed at |
|
||||||
# https://github.com/slsa-framework/slsa-github-generator. |
|
||||||
# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier. |
|
||||||
# For more information about SLSA and how it improves the supply-chain, visit slsa.dev. |
|
||||||
|
|
||||||
name: SLSA Go releaser |
|
||||||
on: |
on: |
||||||
workflow_dispatch: |
|
||||||
release: |
release: |
||||||
types: [created] |
types: |
||||||
|
- created |
||||||
permissions: read-all |
|
||||||
|
|
||||||
jobs: |
jobs: |
||||||
# ======================================================================================================================================== |
build_windows: |
||||||
# Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project. |
runs-on: windows-latest |
||||||
# See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file |
|
||||||
#========================================================================================================================================= |
steps: |
||||||
build: |
- name: Checkout Repository |
||||||
permissions: |
uses: actions/checkout@v2 |
||||||
id-token: write # To sign. |
|
||||||
contents: write # To upload release assets. |
- name: Set up Go |
||||||
actions: read # To read workflow path. |
uses: actions/setup-go@v2 |
||||||
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0 |
with: |
||||||
with: |
go-version: 1.19 |
||||||
go-version: 1.19 |
|
||||||
# ============================================================================================================= |
- name: Run SLSA Go Generator (Windows) |
||||||
# Optional: For more options, see https://github.com/slsa-framework/slsa-github-generator#golang-projects |
uses: slsa-framework/slsa-github-generator@v1.4.0 |
||||||
# ============================================================================================================= |
with: |
||||||
|
go-version: 1.19 |
||||||
|
# add any other necessary configuration here |
||||||
|
|
||||||
|
build_linux: |
||||||
|
runs-on: ubuntu-latest |
||||||
|
|
||||||
|
steps: |
||||||
|
- name: Checkout Repository |
||||||
|
uses: actions/checkout@v2 |
||||||
|
|
||||||
|
- name: Set up Go |
||||||
|
uses: actions/setup-go@v2 |
||||||
|
with: |
||||||
|
go-version: 1.19 |
||||||
|
|
||||||
|
- name: Run SLSA Go Generator (Linux) |
||||||
|
uses: slsa-framework/slsa-github-generator@v1.4.0 |
||||||
|
with: |
||||||
|
go-version: 1.19 |
||||||
|
# add any other necessary configuration here |
||||||
|
|||||||
Loading…
Reference in new issue