From 3961dc9c8cb0e31925e45a2273bbdc06412be262 Mon Sep 17 00:00:00 2001 From: Austin Vazquez Date: Sun, 24 Nov 2024 00:08:48 -0700 Subject: [PATCH] Publish attestation as release artifact Signed-off-by: Austin Vazquez --- .github/workflows/release.yml | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6de0a923a640..f044372812c3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -147,6 +147,13 @@ jobs: uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: path: builds + - name: Attest Artifacts + id: attest + uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4 + with: + subject-path: ./builds/release-tars-**/*.tar.gz + - name: Rename attestation artifact + run: mv ${{ steps.attest.outputs.bundle-path }} containerd-${{ needs.check.outputs.stringver }}-attestation.intoto.jsonl - name: Create Release uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0 with: @@ -158,8 +165,5 @@ jobs: body_path: ./builds/containerd-release-notes/release-notes.md files: | builds/release-tars-**/* + containerd-*-attestation.intoto.jsonl make_latest: false - - name: Attest Artifacts - uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4 - with: - subject-path: ./builds/release-tars-**/*.tar.gz