Skip to content

feat: verify commit-check artifact attestations #53

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 10 commits into from
Apr 3, 2025
Merged

feat: verify commit-check artifact attestations #53

Changes from 8 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
b4f6811
Update action.yml to verify artifact attestations
shenxianpeng Jun 10, 2024
939166d
Update action.yml to add GH_TOKEN
shenxianpeng Jun 10, 2024
40a7a04
Update action.yml
shenxianpeng Jun 10, 2024
a6c849b
Update action.yml
shenxianpeng Jun 10, 2024
2a64446
Update action.yml
shenxianpeng Jun 10, 2024
16a798f
Merge branch 'main' into verify-artifact-attestations
shenxianpeng Oct 31, 2024
4c9e668
Update action.yml
shenxianpeng Oct 31, 2024
76760e7
Merge branch 'main' into verify-artifact-attestations
shenxianpeng Jan 4, 2025
c9a3b05
Merge branch 'main' into verify-artifact-attestations
shenxianpeng Apr 3, 2025
8391131
fix: create virtual env then verify attestations
shenxianpeng Apr 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,9 +51,16 @@ runs:
# https://github.com/pypa/setuptools/issues/3269
export DEB_PYTHON_INSTALL_LAYOUT=deb
fi
# Download artifact
python3 -m pip download -r "$GITHUB_ACTION_PATH/requirements.txt"

# Verifying artifact attestations
gh attestation verify commit_check-*.whl -R commit-check/commit-check

# Install artifact
python3 -m pip install commit_check-*.whl PyGithub-*.whl
python3 -m venv venv
source venv/bin/activate
python3 -m pip install -r "$GITHUB_ACTION_PATH/requirements.txt"
python3 "$GITHUB_ACTION_PATH/main.py"
env:
MESSAGE: ${{ inputs.message }}
Expand Down
Loading