Skip to content

Commit

Permalink
skip provenance
Browse files Browse the repository at this point in the history
Signed-off-by: Michael Crenshaw <[email protected]>
  • Loading branch information
crenshaw-dev committed May 7, 2024
1 parent 04aeb97 commit c129641
Showing 1 changed file with 16 additions and 16 deletions.
32 changes: 16 additions & 16 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -30,26 +30,26 @@ jobs:
quay_username: ${{ secrets.RELEASE_QUAY_USERNAME }}
quay_password: ${{ secrets.RELEASE_QUAY_TOKEN }}

argocd-image-provenance:
needs: [argocd-image]
permissions:
actions: read # for detecting the Github Actions environment.
id-token: write # for creating OIDC tokens for signing.
packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues)
# Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
if: github.repository == 'crenshaw-dev/argo-cd'
uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
with:
image: quay.io/argoproj/argocd
digest: ${{ needs.argocd-image.outputs.image-digest }}
secrets:
registry-username: ${{ secrets.RELEASE_QUAY_USERNAME }}
registry-password: ${{ secrets.RELEASE_QUAY_TOKEN }}
# argocd-image-provenance:
# needs: [argocd-image]
# permissions:
# actions: read # for detecting the Github Actions environment.
# id-token: write # for creating OIDC tokens for signing.
# packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues)
# # Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
# if: github.repository == 'crenshaw-dev/argo-cd'
# uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
# with:
# image: quay.io/argoproj/argocd
# digest: ${{ needs.argocd-image.outputs.image-digest }}
# secrets:
# registry-username: ${{ secrets.RELEASE_QUAY_USERNAME }}
# registry-password: ${{ secrets.RELEASE_QUAY_TOKEN }}

goreleaser:
needs:
- argocd-image
- argocd-image-provenance
# - argocd-image-provenance
permissions:
contents: write # used for uploading assets
if: github.repository == 'crenshaw-dev/argo-cd'
Expand Down

0 comments on commit c129641

Please sign in to comment.