Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(workflows): Create reusable workflow for GitHub Releases #16

Merged
merged 1 commit into from
May 29, 2024

Conversation

javirln
Copy link
Member

@javirln javirln commented May 29, 2024

This creates a reusable workflow that automatically attest a GitHub release based on its content. It's possible to also pass additional materials to be added to the attestation. Additionally it will try to create a workflow if it does not exist.

By default it will attest:

  • All assets within a GitHub Release
  • The source code in a .tar.gz

Required parameters:

  • API Token: Chainloop API token to perform the attestation
  • Cosign key and password: To sign the final attestation
    Optional parameters:
  • Workflow name: Name of the target workflow to be attested
  • Project: Name of the project
  • Additional materials: Comma separated list of values to be added to the attestation

Closes chainloop-dev/chainloop#844

@javirln javirln self-assigned this May 29, 2024
@javirln javirln requested review from migmartri and jiparis May 29, 2024 14:42
@javirln javirln merged commit 5d3f5ad into main May 29, 2024
@javirln javirln deleted the feat/844 branch May 29, 2024 14:42
javirln added a commit that referenced this pull request May 29, 2024
javirln added a commit that referenced this pull request May 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Make it a reusable workflow, implement it and document it
1 participant