🌱 Generate attestation for helm charts (#1117)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m37s
Post / coverage (push) Failing after 37m53s
Post / images (amd64, addon-manager) (push) Failing after 8m7s
Post / images (amd64, placement) (push) Failing after 8m4s
Post / images (amd64, registration) (push) Failing after 7m54s
Post / images (amd64, registration-operator) (push) Failing after 7m54s
Post / images (amd64, work) (push) Failing after 8m6s
Post / images (arm64, addon-manager) (push) Failing after 7m57s
Post / images (arm64, placement) (push) Failing after 7m53s
Post / images (arm64, registration) (push) Failing after 7m49s
Post / images (arm64, registration-operator) (push) Failing after 7m50s
Post / images (arm64, work) (push) Failing after 7m56s
Post / image manifest (addon-manager) (push) Has been skipped
Post / image manifest (placement) (push) Has been skipped
Post / image manifest (registration) (push) Has been skipped
Post / image manifest (registration-operator) (push) Has been skipped
Post / image manifest (work) (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 39s

* Generate attestation for helm charts

Signed-off-by: zhujian <jiazhu@redhat.com>

* Generate attestation for helm charts

Signed-off-by: zhujian <jiazhu@redhat.com>

* only run release action shen pushing tags

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
This commit is contained in:
Jian Zhu
2025-08-07 16:50:58 +08:00
committed by GitHub
parent 4da8678f59
commit 95e6856aab

View File

@@ -4,9 +4,6 @@ permissions:
contents: read
on:
pull_request:
paths:
- .github/workflows/release.yml
push:
tags:
- 'v*.*.*'
@@ -44,18 +41,20 @@ jobs:
needs: [ env ]
permissions:
contents: write
id-token: write
attestations: write
steps:
- name: checkout code
uses: actions/checkout@v4
with:
fetch-depth: 1
path: go/src/open-cluster-management.io/ocm
- name: Set up Python 3.x
- name: set up Python 3.x
uses: actions/setup-python@v5
with:
# Semantic version range syntax or exact version of a Python version
python-version: '3.x'
- name: Install dependencies
- name: install dependencies
run: |
python -m pip install --upgrade pip
pip install PyGithub
@@ -84,3 +83,7 @@ jobs:
generate_release_notes: true
files: |
/home/runner/work/ocm/ocm/go/src/open-cluster-management.io/ocm/release/*.tgz
- name: generate helm charts attestation
uses: actions/attest-build-provenance@v2
with:
subject-path: '/home/runner/work/ocm/ocm/go/src/open-cluster-management.io/ocm/release/*.tgz'