File tree 5 files changed +44
-3
lines changed
5 files changed +44
-3
lines changed Original file line number Diff line number Diff line change 10
10
11
11
runs-on : ubuntu-latest
12
12
13
+ permissions :
14
+ attestations : write
15
+ id-token : write
16
+
13
17
strategy :
14
18
fail-fast : false
15
19
matrix :
@@ -127,6 +131,12 @@ jobs:
127
131
dart run grinder pkg-standalone-${{ matrix.target }}
128
132
EOF
129
133
134
+ - name : Generate artifact attestation
135
+ if : github.ref_type == 'tag'
136
+ uses : actions/attest-build-provenance@v2
137
+ with :
138
+ subject-path : build/*.tar.gz
139
+
130
140
- name : Upload Artifact
131
141
uses : actions/upload-artifact@v4
132
142
with :
Original file line number Diff line number Diff line change 10
10
11
11
runs-on : ${{ matrix.runner }}
12
12
13
+ permissions :
14
+ attestations : write
15
+ id-token : write
16
+
13
17
strategy :
14
18
fail-fast : false
15
19
matrix :
28
32
- name : Build
29
33
run : dart run grinder pkg-standalone-macos-${{ matrix.arch }}
30
34
35
+ - name : Generate artifact attestation
36
+ if : github.ref_type == 'tag'
37
+ uses : actions/attest-build-provenance@v2
38
+ with :
39
+ subject-path : build/*.tar.gz
40
+
31
41
- name : Upload Artifact
32
42
uses : actions/upload-artifact@v4
33
43
with :
Original file line number Diff line number Diff line change 10
10
11
11
runs-on : ${{ matrix.runner }}
12
12
13
+ permissions :
14
+ attestations : write
15
+ id-token : write
16
+
13
17
strategy :
14
18
fail-fast : false
15
19
matrix :
30
34
- name : Build
31
35
run : dart run grinder pkg-standalone-windows-${{ matrix.arch }}
32
36
37
+ - name : Generate artifact attestation
38
+ if : github.ref_type == 'tag'
39
+ uses : actions/attest-build-provenance@v2
40
+ with :
41
+ subject-path : build/*.zip
42
+
33
43
- name : Upload Artifact
34
44
uses : actions/upload-artifact@v4
35
45
with :
Original file line number Diff line number Diff line change 15
15
name : Double-check
16
16
runs-on : ubuntu-latest
17
17
needs : [test]
18
- if : " startsWith( github.ref, 'refs/tags/') && github.event.repository.fork == false"
18
+ if : " github.ref_type == 'tag' && github.event.repository.fork == false"
19
19
20
20
steps :
21
21
- uses : actions/checkout@v4
@@ -27,14 +27,16 @@ jobs:
27
27
28
28
test_vendor :
29
29
needs : [double_check]
30
- if : " startsWith( github.ref, 'refs/tags/') && github.event.repository.fork == false"
30
+ if : " github.ref_type == 'tag' && github.event.repository.fork == false"
31
31
uses : ./.github/workflows/test-vendor.yml
32
32
secrets : inherit
33
33
34
34
release :
35
35
needs : [test_vendor]
36
- if : " startsWith( github.ref, 'refs/tags/') && github.event.repository.fork == false"
36
+ if : " github.ref_type == 'tag' && github.event.repository.fork == false"
37
37
permissions :
38
+ attestations : write
38
39
contents : write
40
+ id-token : write
39
41
uses : ./.github/workflows/release.yml
40
42
secrets : inherit
Original file line number Diff line number Diff line change 5
5
6
6
jobs :
7
7
build_linux :
8
+ permissions :
9
+ attestations : write
10
+ id-token : write
8
11
uses : ./.github/workflows/build-linux.yml
9
12
secrets : inherit
10
13
11
14
build_macos :
15
+ permissions :
16
+ attestations : write
17
+ id-token : write
12
18
uses : ./.github/workflows/build-macos.yml
13
19
secrets : inherit
14
20
15
21
build_windows :
22
+ permissions :
23
+ attestations : write
24
+ id-token : write
16
25
uses : ./.github/workflows/build-windows.yml
17
26
secrets : inherit
18
27
You can’t perform that action at this time.
0 commit comments