Update release job to generate artifacts attestation

Signed-off-by: Vishal Reddy Gurrala <vishalgurrala21@gmail.com>
This commit is contained in:
Vishal Reddy Gurrala 2024-08-03 16:55:25 -05:00
parent 7f707b5e79
commit 337d8c52c5
No known key found for this signature in database
GPG Key ID: 36FD6EF79F691FAE

View File

@ -17,6 +17,8 @@ env:
permissions: # added using https://github.com/step-security/secure-workflows permissions: # added using https://github.com/step-security/secure-workflows
contents: read contents: read
id-token: write
attestations: write
jobs: jobs:
check: check:
@ -131,6 +133,10 @@ jobs:
with: with:
name: release-tars-${{env.PLATFORM_CLEAN}} name: release-tars-${{env.PLATFORM_CLEAN}}
path: src/github.com/containerd/containerd/releases/*.tar.gz* path: src/github.com/containerd/containerd/releases/*.tar.gz*
- name: Attest Artifacts
uses: actions/attest-build-provenance@v1
with:
subject-path: src/github.com/containerd/containerd/releases/release-tars-${{env.PLATFORM_CLEAN}}.tar.gz*
release: release:
name: Create containerd Release name: Create containerd Release