New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(@actions/attest) New GHA provenance build type #1745

Merged

bdehamer merged 1 commit into main from bdehamer/attest-provenance

Jun 12, 2024

+12 −9

Contributor

bdehamer commented Jun 5, 2024

Updates the SLSA provenance generator to use the new GH Actions build type:

Updates the buildType value to the new URL (https://slsa-framework.github.io/github-actions-buildtypes/workflow/v1)
Adds the runner_environment field to the github object in the internalParameters collection.
Updates the builder object's id field to use the job_workflow_ref claim


new GHA build provenance

73100a7

Signed-off-by: Brian DeHamer <[email protected]>

bdehamer requested a review from a team as a code owner

June 5, 2024 22:32

kommendorkapten approved these changes

View reviewed changes

bdehamer merged commit 08d6f14 into main

13 of 14 checks passed

bdehamer deleted the bdehamer/attest-provenance branch

June 12, 2024 18:45

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment