-
Notifications
You must be signed in to change notification settings - Fork 199
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'development' of https://github.com/GAEAlimited/gsc20-pr…
…otocol into development
- Loading branch information
Showing
4 changed files
with
78 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -4,4 +4,4 @@ updates: | |
directory: / | ||
schedule: | ||
interval: monthly | ||
target-branch: "development" | ||
target-branch: "development" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,58 @@ | ||
name: 'Attest Build Provenance' | ||
description: 'Generate provenance attestations for build artifacts' | ||
author: 'GitHub' | ||
branding: | ||
color: 'blue' | ||
icon: 'lock' | ||
|
||
inputs: | ||
subject-path: | ||
description: > | ||
Path to the artifact serving as the subject of the attestation. Must | ||
specify exactly one of "subject-path" or "subject-digest". May contain a | ||
glob pattern or list of paths (total subject count cannot exceed 2500). | ||
required: false | ||
subject-digest: | ||
description: > | ||
Digest of the subject for which provenance will be generated. Must be in | ||
the form "algorithm:hex_digest" (e.g. "sha256:abc123..."). Must specify | ||
exactly one of "subject-path" or "subject-digest". | ||
required: false | ||
subject-name: | ||
description: > | ||
Subject name as it should appear in the provenance statement. Required | ||
unless "subject-path" is specified, in which case it will be inferred from | ||
the path. | ||
push-to-registry: | ||
description: > | ||
Whether to push the provenance statement to the image registry. Requires | ||
that the "subject-name" parameter specify the fully-qualified image name | ||
and that the "subject-digest" parameter be specified. Defaults to false. | ||
default: false | ||
required: false | ||
github-token: | ||
description: > | ||
The GitHub token used to make authenticated API requests. | ||
default: ${{ github.token }} | ||
required: false | ||
|
||
outputs: | ||
bundle-path: | ||
description: 'The path to the file containing the attestation bundle(s).' | ||
value: ${{ steps.attest.outputs.bundle-path }} | ||
|
||
runs: | ||
using: 'composite' | ||
steps: | ||
- uses: actions/attest-build-provenance/predicate@46e4ff8b824dc6ae13c8f92c8ba69907e2d39b4e # [email protected] | ||
id: generate-build-provenance-predicate | ||
- uses: actions/attest@8afbcf6e5e31a04f9ef7ca7ee40a0d91e263da5a # v1.3.2 | ||
id: attest | ||
with: | ||
subject-path: ${{ inputs.subject-path }} | ||
subject-digest: ${{ inputs.subject-digest }} | ||
subject-name: ${{ inputs.subject-name }} | ||
predicate-type: ${{ steps.generate-build-provenance-predicate.outputs.predicate-type }} | ||
predicate: ${{ steps.generate-build-provenance-predicate.outputs.predicate }} | ||
push-to-registry: ${{ inputs.push-to-registry }} | ||
github-token: ${{ inputs.github-token }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -2886,9 +2886,9 @@ | |
"@octokit/openapi-types" "^12.11.0" | ||
|
||
"@openzeppelin/contracts@^4.8.1": | ||
version "4.8.1" | ||
resolved "https://registry.yarnpkg.com/@openzeppelin/contracts/-/contracts-4.8.1.tgz#709cfc4bbb3ca9f4460d60101f15dac6b7a2d5e4" | ||
integrity sha512-xQ6eUZl+RDyb/FiZe1h+U7qr/f4p/SrTSQcTPH2bjur3C5DbuW/zFgCU/b1P/xcIaEqJep+9ju4xDRi3rmChdQ== | ||
version "4.9.3" | ||
resolved "https://registry.yarnpkg.com/@openzeppelin/contracts/-/contracts-4.9.3.tgz#00d7a8cf35a475b160b3f0293a6403c511099364" | ||
integrity sha512-He3LieZ1pP2TNt5JbkPA4PNT9WC3gOTOlDcFGJW4Le4QKqwmiNJCRt44APfxMxvq7OugU/cqYuPcSBzOw38DAg== | ||
|
||
"@sindresorhus/slugify@^0.8.0": | ||
version "0.8.0" | ||
|
@@ -5511,9 +5511,9 @@ decimal.js@^10.2.0: | |
integrity sha512-Nv6ENEzyPQ6AItkGwLE2PGKinZZ9g59vSh2BeH6NqPu0OTKZ5ruJsVqh/orbAnqXc9pBbgXAIrc2EyaCj8NpGg== | ||
|
||
decode-uri-component@^0.2.0: | ||
version "0.2.0" | ||
resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.0.tgz#eb3913333458775cb84cd1a1fae062106bb87545" | ||
integrity sha512-hjf+xovcEn31w/EUYdTXQh/8smFL/dzYjohQGEIgjyNavaJfBY2p5F527Bo1VPATxv0VYTUC2bOcXvqFwk78Og== | ||
version "0.2.2" | ||
resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.2.tgz#e69dbe25d37941171dd540e024c444cd5188e1e9" | ||
integrity sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ== | ||
|
||
decompress-response@^4.2.0: | ||
version "4.2.1" | ||
|
@@ -6978,9 +6978,9 @@ flush-write-stream@^1.0.0: | |
readable-stream "^2.3.6" | ||
|
||
follow-redirects@^1.12.1: | ||
version "1.15.1" | ||
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.1.tgz#0ca6a452306c9b276e4d3127483e29575e207ad5" | ||
integrity sha512-yLAMQs+k0b2m7cVxpS1VKJVvoz7SS9Td1zss3XRwXj+ZDH00RJgnuLx7E44wx02kQLrdM3aOOy+FpzS7+8OizA== | ||
version "1.15.4" | ||
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.4.tgz#cdc7d308bf6493126b17ea2191ea0ccf3e535adf" | ||
integrity sha512-Cr4D/5wlrb0z9dgERpUL3LrmPKVDsETIJhaCMeDfuFYcqa5bldGV6wBsAN6X/vxlXQtFBMrXdXxdL8CbDTGniw== | ||
|
||
for-each@^0.3.3, for-each@~0.3.3: | ||
version "0.3.3" | ||
|
@@ -7165,9 +7165,9 @@ get-caller-file@^2.0.1, get-caller-file@^2.0.5: | |
integrity sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg== | ||
|
||
get-func-name@^2.0.0: | ||
version "2.0.0" | ||
resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.0.tgz#ead774abee72e20409433a066366023dd6887a41" | ||
integrity sha512-Hm0ixYtaSZ/V7C8FJrtZIuBBI+iSgL+1Aq82zSu8VQNB4S3Gk8e7Qs3VwBDJAhmRZcFqkl3tQu36g/Foh5I5ig== | ||
version "2.0.2" | ||
resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.2.tgz#0d7cf20cd13fda808669ffa88f4ffc7a3943fc41" | ||
integrity sha512-8vXOvuE167CtIc3OyItco7N/dpRtBbYOsPsXCz7X/PMnlGjYjSGuZJgM1Y7mmew7BKf9BqvLX2tnOVy1BBUsxQ== | ||
|
||
get-intrinsic@^1.0.2, get-intrinsic@^1.1.0, get-intrinsic@^1.1.1: | ||
version "1.1.2" | ||
|
@@ -13250,9 +13250,9 @@ [email protected]: | |
stack-trace "0.0.x" | ||
|
||
word-wrap@^1.2.3, word-wrap@~1.2.3: | ||
version "1.2.3" | ||
resolved "https://registry.yarnpkg.com/word-wrap/-/word-wrap-1.2.3.tgz#610636f6b1f703891bd34771ccb17fb93b47079c" | ||
integrity sha512-Hz/mrNwitNRh/HUAtM/VT/5VH+ygD6DV7mYKZAtHOrbs8U7lvPS6xf7EJKMF0uW1KJCl0H701g3ZGus+muE5vQ== | ||
version "1.2.5" | ||
resolved "https://registry.yarnpkg.com/word-wrap/-/word-wrap-1.2.5.tgz#d2c45c6dd4fbce621a66f136cbe328afd0410b34" | ||
integrity sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA== | ||
|
||
wordwrap@^1.0.0: | ||
version "1.0.0" | ||
|
@@ -13440,9 +13440,9 @@ yallist@^4.0.0: | |
integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A== | ||
|
||
yaml@^2.1.3: | ||
version "2.2.1" | ||
resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.2.1.tgz#3014bf0482dcd15147aa8e56109ce8632cd60ce4" | ||
integrity sha512-e0WHiYql7+9wr4cWMx3TVQrNwejKaEe7/rHNmQmqRjazfOP5W8PB6Jpebb5o6fIapbz9o9+2ipcaTM2ZwDI6lw== | ||
version "2.3.4" | ||
resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.3.4.tgz#53fc1d514be80aabf386dc6001eb29bf3b7523b2" | ||
integrity sha512-8aAvwVUSHpfEqTQ4w/KMlf3HcRdt50E5ODIQJBw1fQ5RL34xabzxtUlzTXVqc4rkZsPbvrXKWnABCD7kWSmocA== | ||
|
||
[email protected], yargs-parser@^13.1.0, yargs-parser@^13.1.2: | ||
version "13.1.2" | ||
|