Skip to content

chore: bump github.com/in-toto/go-witness from 0.3.1 to 0.4.0 #490

chore: bump github.com/in-toto/go-witness from 0.3.1 to 0.4.0

chore: bump github.com/in-toto/go-witness from 0.3.1 to 0.4.0 #490

Workflow file for this run

# Copyright 2023 The Archivista Contributors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
permissions:
contents: read # This is required for actions/checkout
name: pipeline
on:
push:
tags:
- v*
branches:
- main
pull_request:
jobs:
fmt:
uses: ./.github/workflows/witness.yml
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
with:
pull_request: ${{ github.event_name == 'pull_request' }}
step: static-analysis
attestations: "github"
command: go fmt ./...
static_analysis:
uses: ./.github/workflows/witness.yml
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
with:
pull_request: ${{ github.event_name == 'pull_request' }}
step: static-analysis
attestations: "github"
command: go vet ./...
tests:
needs: [fmt, static_analysis]
uses: ./.github/workflows/witness.yml
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
with:
pull_request: ${{ github.event_name == 'pull_request' }}
step: "tests"
attestations: "github"
command: |
make clean
make test
release:
needs: tests
permissions:
id-token: write
contents: write
packages: write
runs-on: ubuntu-latest
if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
steps:
- name: Harden Runner
uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
with:
egress-policy: audit
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
with:
go-version: 1.21.x
- name: Login to GitHub Container Registry
uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Download GoReleaser
run: go install github.com/goreleaser/goreleaser@v1.23.0
- name: Run GoReleaser
uses: testifysec/witness-run-action@2ae7f93c013ccf24b8ff52b4f042b32ca95ec7b8
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
with:
step: "build"
attestations: "github"
command: goreleaser release --clean