File tree Expand file tree Collapse file tree 15 files changed +45
-45
lines changed Expand file tree Collapse file tree 15 files changed +45
-45
lines changed Original file line number Diff line number Diff line change 66
66
contents : write # For asset uploads
67
67
packages : write # To write to github packages
68
68
actions : read
69
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1
69
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0
70
70
with :
71
71
artifact : my-artifact
72
72
filename : delegator/e2e.delegator-generic.workflow_dispatch.main.checkout/build.txt
85
85
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
86
86
with :
87
87
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
88
- - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1
88
+ - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v1.11.0
89
89
with :
90
90
name : " ${{ needs.build.outputs.provenance-download-name }}"
91
91
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
95
95
- env :
96
96
BINARY : " ${{ needs.build.outputs.artifact }}"
97
97
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
98
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1 "
98
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0 "
99
99
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
100
100
101
101
if-succeeded :
Original file line number Diff line number Diff line change 59
59
contents : write # For asset uploads
60
60
packages : write # To write to github packages
61
61
actions : read
62
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1
62
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0
63
63
with :
64
64
artifact : my-artifact
65
65
content : " hello world delegator_generic_slsa3"
75
75
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
76
76
with :
77
77
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
78
- - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1
78
+ - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v1.11.0
79
79
with :
80
80
name : " ${{ needs.build.outputs.provenance-download-name }}"
81
81
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
85
85
- env :
86
86
BINARY : " ${{ needs.build.outputs.artifact }}"
87
87
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
88
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1 "
88
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0 "
89
89
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
90
90
91
91
if-succeeded :
Original file line number Diff line number Diff line change 59
59
contents : write # For asset uploads
60
60
packages : write # To write to github packages
61
61
actions : read
62
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1
62
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0
63
63
with :
64
64
artifact : my-artifact
65
65
content : " hello world delegator_generic_slsa3"
75
75
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
76
76
with :
77
77
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
78
- - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1
78
+ - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v1.11.0
79
79
with :
80
80
name : " ${{ needs.build.outputs.provenance-download-name }}"
81
81
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
85
85
- env :
86
86
BINARY : " ${{ needs.build.outputs.artifact }}"
87
87
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
88
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1 "
88
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0 "
89
89
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
90
90
91
91
if-succeeded :
Original file line number Diff line number Diff line change 67
67
contents : write # For asset uploads
68
68
packages : write # To write to github packages
69
69
actions : read
70
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1
70
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0
71
71
with :
72
72
artifact : my-artifact
73
73
# NOTE: we re-use the same build.txt from other tests.
87
87
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
88
88
with :
89
89
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
90
- - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1
90
+ - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v1.11.0
91
91
with :
92
92
name : " ${{ needs.build.outputs.provenance-download-name }}"
93
93
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
97
97
- env :
98
98
BINARY : " ${{ needs.build.outputs.artifact }}"
99
99
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
100
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1 "
100
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0 "
101
101
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
102
102
103
103
if-succeeded :
Original file line number Diff line number Diff line change 60
60
contents : write # For asset uploads
61
61
packages : write # To write to github packages
62
62
actions : read
63
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1
63
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0
64
64
with :
65
65
artifact : my-artifact
66
66
content : " hello world delegator_generic_slsa3"
76
76
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
77
77
with :
78
78
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
79
- - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1
79
+ - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v1.11.0
80
80
with :
81
81
name : " ${{ needs.build.outputs.provenance-download-name }}"
82
82
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
86
86
- env :
87
87
BINARY : " ${{ needs.build.outputs.artifact }}"
88
88
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
89
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1 "
89
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0 "
90
90
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
91
91
92
92
if-succeeded :
Original file line number Diff line number Diff line change 61
61
contents : write # For asset uploads
62
62
packages : write # To write to github packages
63
63
actions : read
64
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1
64
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0
65
65
with :
66
66
artifact : my-artifact
67
67
content : " hello world delegator_generic_slsa3"
77
77
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
78
78
with :
79
79
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
80
- - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1
80
+ - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v1.11.0
81
81
with :
82
82
name : " ${{ needs.build.outputs.provenance-download-name }}"
83
83
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
87
87
- env :
88
88
BINARY : " ${{ needs.build.outputs.artifact }}"
89
89
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
90
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1 "
90
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0 "
91
91
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
92
92
93
93
if-succeeded :
Original file line number Diff line number Diff line change 69
69
contents : write # For asset uploads
70
70
packages : write # To write to github packages
71
71
actions : read
72
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1
72
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0
73
73
with :
74
74
artifact : my-artifact
75
75
filename : delegator/e2e.delegator-generic.workflow_dispatch.branch1.checkout/build.txt
88
88
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
89
89
with :
90
90
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
91
- - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1
91
+ - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v1.11.0
92
92
with :
93
93
name : " ${{ needs.build.outputs.provenance-download-name }}"
94
94
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
98
98
- env :
99
99
BINARY : " ${{ needs.build.outputs.artifact }}"
100
100
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
101
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1 "
101
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0 "
102
102
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
103
103
104
104
if-succeeded :
Original file line number Diff line number Diff line change 61
61
contents : write # For asset uploads
62
62
packages : write # To write to github packages
63
63
actions : read
64
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1
64
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0
65
65
with :
66
66
artifact : my-artifact
67
67
content : " hello world delegator_generic_slsa3"
77
77
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
78
78
with :
79
79
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
80
- - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1
80
+ - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v1.11.0
81
81
with :
82
82
name : " ${{ needs.build.outputs.provenance-download-name }}"
83
83
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
87
87
- env :
88
88
BINARY : " ${{ needs.build.outputs.artifact }}"
89
89
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
90
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1 "
90
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0 "
91
91
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
92
92
93
93
if-succeeded :
Original file line number Diff line number Diff line change 68
68
contents : write # For asset uploads
69
69
packages : write # To write to github packages
70
70
actions : read
71
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1
71
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0
72
72
with :
73
73
artifact : my-artifact
74
74
filename : delegator/e2e.delegator-generic.workflow_dispatch.main.checkout/build.txt
87
87
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
88
88
with :
89
89
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
90
- - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1
90
+ - uses : slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v1.11.0
91
91
with :
92
92
name : " ${{ needs.build.outputs.provenance-download-name }}"
93
93
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
97
97
- env :
98
98
BINARY : " ${{ needs.build.outputs.artifact }}"
99
99
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
100
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v0.0.1 "
100
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms-checkout_slsa3.yml@v1.11.0 "
101
101
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
102
102
103
103
if-succeeded :
Original file line number Diff line number Diff line change 61
61
contents : write # For asset uploads
62
62
packages : write # To write to github packages
63
63
actions : read
64
- uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1
64
+ uses : slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0
65
65
with :
66
66
artifact : my-artifact
67
67
content : " hello world delegator_generic_slsa3"
77
77
- uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
78
78
with :
79
79
name : " ${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
80
- - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1
80
+ - uses : slsa-framework/example-trw/high-perms/actions/download/attestation@v1.11.0
81
81
with :
82
82
name : " ${{ needs.build.outputs.provenance-download-name }}"
83
83
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
87
87
- env :
88
88
BINARY : " ${{ needs.build.outputs.artifact }}"
89
89
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
90
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v0.0.1 "
90
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml@v1.11.0 "
91
91
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
92
92
93
93
if-succeeded :
Original file line number Diff line number Diff line change 58
58
id-token : write # For signing
59
59
contents : write # For asset uploads
60
60
actions : read
61
- uses : slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v0.0.1
61
+ uses : slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v1.11.0
62
62
with :
63
63
artifact : my-artifact
64
64
content : " hello world delegator_generic_slsa3"
76
76
name : " ${{ needs.build.outputs.artifact-download-name }}" # NOTE: This is randomized 'my-artifact'.
77
77
sha256 : " ${{ needs.build.outputs.artifact-download-sha256 }}"
78
78
path : " ."
79
- - uses : slsa-framework/example-trw/low-perms/actions/download/attestation@v0.0.1
79
+ - uses : slsa-framework/example-trw/low-perms/actions/download/attestation@v1.11.0
80
80
with :
81
81
name : " ${{ needs.build.outputs.provenance-download-name }}"
82
82
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
92
92
- env :
93
93
BINARY : " ${{ needs.build.outputs.artifact }}"
94
94
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
95
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v0.0.1 "
95
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v1.11.0 "
96
96
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
97
97
98
98
if-succeeded :
Original file line number Diff line number Diff line change 56
56
id-token : write # For signing
57
57
contents : write # For asset uploads
58
58
actions : read
59
- uses : slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v0.0.1
59
+ uses : slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v1.11.0
60
60
with :
61
61
artifact : my-artifact
62
62
content : " hello world delegator_generic_slsa3"
74
74
name : " ${{ needs.build.outputs.artifact-download-name }}" # NOTE: This is randomized 'my-artifact'.
75
75
sha256 : " ${{ needs.build.outputs.artifact-download-sha256 }}"
76
76
path : " ."
77
- - uses : slsa-framework/example-trw/low-perms/actions/download/attestation@v0.0.1
77
+ - uses : slsa-framework/example-trw/low-perms/actions/download/attestation@v1.11.0
78
78
with :
79
79
name : " ${{ needs.build.outputs.provenance-download-name }}"
80
80
sha256 : " ${{ needs.build.outputs.provenance-download-sha256 }}"
90
90
- env :
91
91
BINARY : " ${{ needs.build.outputs.artifact }}"
92
92
PROVENANCE : " ${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.artifact }}.build.slsa" # This is defined by the builder.
93
- BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v0.0.1 "
93
+ BUILDER_ID : " https://github.com/slsa-framework/example-trw/.github/workflows/builder_low-perms_slsa3.yml@v1.11.0 "
94
94
run : ./.github/workflows/scripts/e2e.delegator.default.verify.sh
95
95
96
96
if-succeeded :
You can’t perform that action at this time.
0 commit comments