actions/docker-attest-build-provenance
1
0
Fork 0
mirror of https://github.com/actions/attest-build-provenance.git synced 2025-12-19 05:42:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Merge branch 'main' into dependabot/npm_and_yarn/npm-development-d185e289e1

Browse Source
This commit is contained in:
Brian DeHamer 2024-04-22 09:13:06 -07:00 committed by GitHub
commit cbd145074f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/ci.yml vendored
View File

@ -50,7 +50,8 @@ jobs:
name: Test attest-provenance action name: Test attest-provenance action
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
contents: write attestations: write
contents: read
id-token: write id-token: write
steps: steps:

10
README.md
View File

@ -29,11 +29,11 @@ attest:
```yaml ```yaml
permissions: permissions:
id-token: write id-token: write
contents: write # TODO: Update this attestations: write
``` ```
The `id-token` permission gives the action the ability to mint the OIDC token The `id-token` permission gives the action the ability to mint the OIDC token
permission is necessary to persist the attestation. The `contents` permission permission is necessary to persist the attestation. The `attestations` permission
is necessary to persist the attestation. is necessary to persist the attestation.
1. Add the following to your workflow after your artifact has been built: 1. Add the following to your workflow after your artifact has been built:
@ -112,7 +112,8 @@ jobs:
build: build:
permissions: permissions:
id-token: write id-token: write
contents: write contents: read
attestations: write
steps: steps:
- name: Checkout - name: Checkout
@ -166,7 +167,8 @@ jobs:
permissions: permissions:
id-token: write id-token: write
packages: write packages: write
contents: write contents: read
attestations: write
env: env:
REGISTRY: ghcr.io REGISTRY: ghcr.io
IMAGE_NAME: ${{ github.repository }} IMAGE_NAME: ${{ github.repository }}