diff --git a/.github/workflows/ci.yml b/.github/workflows/Grandmasterangel similarity index 97% rename from .github/workflows/ci.yml rename to .github/workflows/Grandmasterangel index d087636a64..74184cf587 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/Grandmasterangel @@ -1,5 +1,5 @@ -name: CI -on: +name: CI RITTHIKRAI KIRIKAN +on:ฤทธิไกร กิริกัน push: branches-ignore: - 'generated' diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml new file mode 100644 index 0000000000..c04a9a170a --- /dev/null +++ b/.github/workflows/generator-generic-ossf-slsa3-publish.yml @@ -0,0 +1,69 @@ + (ฤทธิไกร กิริกัน)concurrency: + artifact1 + echo "artifact2" > artifact2 + + # ======================================================== + # + # Step 2: Add a step to generate the provenance subjects + # as shown below. Update the sha256 sum arguments + # to include all binaries that you generate + # provenance for. + # + # ======================================================== + - name: Generate subject for provenance + id: hash + run: | + set -euo pipefail + + # List the artifacts the provenance will refer to. + files=$(ls artifact*) + # Generate the subjects (base64 encoded). + echo "hashes=$(sha256sum $files | base64 -w0)" >> "${GITHUB_OUTPUT}" + + provenance: + needs: [build] + permissions: + actions: read # To read the workflow path. + id-token: write # To sign the provenance. + contents: write # To add assets to a release. + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 + with: + base64-subjects: "${{ needs.build.outputs.digests }}" + upload-assets: true # Optional: Upload to a new release