Skip to content

Commit faa37a0

Browse files
authored
build: slight renaming of provenance output to meet best practice (#241)
Adding `-provenance` suffix to make the provenance artifacts clearer to consumers. Additionally, renaming `macos-` prefix to `mac-` to match the prefix of the mac build artifacts, per guidance from https://slsa.dev/spec/v1.0/distributing-provenance#relationship-between-artifacts-and-attestations
1 parent e12664f commit faa37a0

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

.github/workflows/manual-sdk-release-artifacts.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,4 +69,4 @@ jobs:
6969
base64-subjects: "${{ needs.release-sdk.outputs[format('hashes-{0}', matrix.os)] }}"
7070
upload-assets: true
7171
upload-tag-name: ${{ inputs.tag }}
72-
provenance-name: ${{ format('{0}-multiple.intoto.jsonl', matrix.os) }}
72+
provenance-name: ${{ format('{0}-multiple-provenance.intoto.jsonl', matrix.os) }}

.github/workflows/release-please.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,4 +57,4 @@ jobs:
5757
base64-subjects: "${{ needs.release-client.outputs[format('hashes-{0}', matrix.os)] }}"
5858
upload-assets: true
5959
upload-tag-name: ${{ needs.release-please.outputs.package-client-tag }}
60-
provenance-name: ${{ format('{0}-multiple.intoto.jsonl', matrix.os) }}
60+
provenance-name: ${{ format('{0}-multiple-provenance.intoto.jsonl', matrix.os) }}

0 commit comments

Comments
 (0)