Skip to content

Update actions/download-artifact digest to 65a9edc #292

Update actions/download-artifact digest to 65a9edc

Update actions/download-artifact digest to 65a9edc #292

Workflow file for this run

name: Validate and Release
on: [push, pull_request]
# Declare default permissions as read only.
permissions: read-all
jobs:
validate:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
- name: Run ShellCheck
uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0
env:
SHELLCHECK_OPTS: -x
with:
ignore_paths: test
- name: Conftest - tests.sh
uses: redhat-cop/github-actions/confbatstest@11f2ce27643eb7c76ac3623cb99d9b08be30d762 # v4
with:
tests: test/tests.sh
- name: Conftest - tests_fail.sh
uses: redhat-cop/github-actions/confbatstest@11f2ce27643eb7c76ac3623cb99d9b08be30d762 # v4
with:
raw: test/tests_fail.sh > tests_fail.log || exit 0
- name: Check failed tests
run: |
if [[ $(grep -c "not ok" tests_fail.log) -ne 9 ]]; then
echo "Expected a fixed number of failed jobs. Failing."
cat tests_fail.log
exit 1
fi
- name: Tar and Generate hashes
shell: bash
id: hash
run: |
tar cvf bats-library.tar load.bash src/
echo "hashes=$(sha256sum bats-library.tar | base64 -w0)" >> "$GITHUB_OUTPUT"
- name: Upload bats-library.tar
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4
with:
name: bats-library.tar
path: bats-library.tar
if-no-files-found: error
retention-days: 5
outputs:
hashes: ${{ steps.hash.outputs.hashes }}
provenance:
needs: [validate]
if: startsWith(github.ref, 'refs/tags/')
permissions:
actions: read
id-token: write
contents: write
uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected] # v1.10.0
with:
base64-subjects: "${{ needs.validate.outputs.hashes }}"
upload-assets: true
release:
needs: [validate, provenance]
runs-on: ubuntu-latest
if: startsWith(github.ref, 'refs/tags/')
permissions:
contents: write
steps:
- name: Download bats-library.tar
uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4
with:
name: bats-library.tar
- name: Upload assets to release
uses: softprops/action-gh-release@9d7c94cfd0a1f3ed45544c887983e9fa900f0564 # v2.0.4
with:
files: |
bats-library.tar