feat(workflows): Reusable workflow to attest GitHub Releases #31
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| # This reusable workflow inspects if the given workflow_name exists on Chainloop. If the Workflow does not exist | |
| # it will create one with an empty contract ready for operators to be filled. Otherwise, if found, it will just | |
| # be ignored and the process will continue. For this to work it's using a pre-created API Token | |
| testing-echo: | |
| name: Echo | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Echo | |
| run: | | |
| echo "Hello, World!" | |
| echo "tag=v0.88.0" >> $GITHUB_OUTPUT | |
| github_release: | |
| name: GitHub Release | |
| uses: ./.github/workflows/chainloop_github_release.yml | |
| needs: testing-echo | |
| with: | |
| project: "chainloop" | |
| workflow_name: "javi-github-release" | |
| additional_materials: "ghcr.io/chainloop-dev/chainloop/control-plane:${{needs.testing-echo.outputs.tag}},ghcr.io/chainloop-dev/chainloop/artifact-cas:${{needs.testing-echo.outputs.tag}}" | |
| secrets: | |
| api_token: ${{ secrets.CHAINLOOP_API_TOKEN }} |