git.iko.soy/parseable-android
on master help sign in
Add GitHub artifact attestations for release APKs (#30)
e8385c8iko
.github/workflows/build-release.yml+7
compare with master
unifiedsplit
@@ -12,6 +12,8 @@ concurrency:
12
12
13permissions:
13permissions:
14 contents: write
14 contents: write
15+ id-token: write
16+ attestations: write
15
17
16jobs:
18jobs:
17 build:
19 build:
@@ -60,6 +62,11 @@ jobs:
60 name: parseable-android-release
62 name: parseable-android-release
61 path: app/build/outputs/apk/release/*.apk
63 path: app/build/outputs/apk/release/*.apk
62
64
65+ - name: Attest release APK
66+ uses: actions/attest-build-provenance@v2
67+ with:
68+ subject-path: app/build/outputs/apk/release/*.apk
69+
63 - name: Create Draft Release
70 - name: Create Draft Release
64 if: startsWith(github.ref, 'refs/tags/v')
71 if: startsWith(github.ref, 'refs/tags/v')
65 uses: softprops/action-gh-release@v2
72 uses: softprops/action-gh-release@v2
.github/workflows/ci.yml+7
@@ -79,6 +79,8 @@ jobs:
79 cancel-in-progress: false
79 cancel-in-progress: false
80 permissions:
80 permissions:
81 contents: write
81 contents: write
82+ id-token: write
83+ attestations: write
82
84
83 steps:
85 steps:
84 - name: Checkout code
86 - name: Checkout code
@@ -124,6 +126,11 @@ jobs:
124 mv "$apk" "app/build/outputs/apk/release/parseable-android-${VERSION_NAME}.apk"
126 mv "$apk" "app/build/outputs/apk/release/parseable-android-${VERSION_NAME}.apk"
125 done
127 done
126
128
129+ - name: Attest release APK
130+ uses: actions/attest-build-provenance@v2
131+ with:
132+ subject-path: app/build/outputs/apk/release/*.apk
133+
127 - name: Create release
134 - name: Create release
128 uses: softprops/action-gh-release@v2
135 uses: softprops/action-gh-release@v2
129 with:
136 with: