git.iko.soy/parseable-macos
on master help sign in
Add GitHub artifact attestations to build workflow (#51)
51e7265iko
.github/workflows/build.yml+28
compare with master
unifiedsplit
@@ -9,6 +9,10 @@ on:
9jobs:
9jobs:
10 build:
10 build:
11 runs-on: macos-15
11 runs-on: macos-15
12+ permissions:
13+ id-token: write
14+ attestations: write
15+ contents: read
12 strategy:
16 strategy:
13 matrix:
17 matrix:
14 include:
18 include:
@@ -69,6 +73,11 @@ jobs:
69 exit 1
73 exit 1
70 fi
74 fi
71
75
76+ - name: Attest artifact
77+ uses: actions/attest-build-provenance@v2
78+ with:
79+ subject-path: ParseableViewer-${{ matrix.arch }}.zip
80+
72 - name: Upload artifact
81 - name: Upload artifact
73 uses: actions/upload-artifact@v4
82 uses: actions/upload-artifact@v4
74 with:
83 with:
@@ -78,6 +87,10 @@ jobs:
78 create-universal:
87 create-universal:
79 needs: build
88 needs: build
80 runs-on: macos-15
89 runs-on: macos-15
90+ permissions:
91+ id-token: write
92+ attestations: write
93+ contents: read
81 steps:
94 steps:
82 - name: Checkout
95 - name: Checkout
83 uses: actions/checkout@v4
96 uses: actions/checkout@v4
@@ -125,6 +138,11 @@ jobs:
125 cd universal_app
138 cd universal_app
126 zip -r -y "../ParseableViewer-universal.zip" "Parseable Viewer.app"
139 zip -r -y "../ParseableViewer-universal.zip" "Parseable Viewer.app"
127
140
141+ - name: Attest universal artifact
142+ uses: actions/attest-build-provenance@v2
143+ with:
144+ subject-path: ParseableViewer-universal.zip
145+
128 - name: Upload universal artifact
146 - name: Upload universal artifact
129 uses: actions/upload-artifact@v4
147 uses: actions/upload-artifact@v4
130 with:
148 with:
@@ -140,6 +158,8 @@ jobs:
140 if: github.event_name == 'push'
158 if: github.event_name == 'push'
141 permissions:
159 permissions:
142 contents: write
160 contents: write
161+ id-token: write
162+ attestations: write
143 steps:
163 steps:
144 - name: Checkout
164 - name: Checkout
145 uses: actions/checkout@v4
165 uses: actions/checkout@v4
@@ -155,6 +175,14 @@ jobs:
155 with:
175 with:
156 path: artifacts
176 path: artifacts
157
177
178+ - name: Attest release artifacts
179+ uses: actions/attest-build-provenance@v2
180+ with:
181+ subject-path: |
182+ artifacts/ParseableViewer-arm64/ParseableViewer-arm64.zip
183+ artifacts/ParseableViewer-x86_64/ParseableViewer-x86_64.zip
184+ artifacts/ParseableViewer-universal/ParseableViewer-universal.zip
185+
158 - name: Create release
186 - name: Create release
159 uses: softprops/action-gh-release@v2
187 uses: softprops/action-gh-release@v2
160 with:
188 with: