Skip to content

Commit 808005e

Browse files
author
Val Brodsky
committed
Still fixing
1 parent 29f7129 commit 808005e

File tree

2 files changed

+25
-22
lines changed

2 files changed

+25
-22
lines changed

.github/actions/provenance/action.yml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
name: Labelbox Python SDK Provenance Generation
2+
3+
inputs:
4+
subjects:
5+
required: true
6+
type: string
7+
runs:
8+
using: "composite"
9+
steps:
10+
- name: upload
11+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
12+
with:
13+
base64-subjects: "${{ inputs.subjects }}"
14+
upload-assets: true
15+
upload-tag-name: v.6.0.0 # Tag from the initiation of the workflow

.github/workflows/lbox-publish.yml

Lines changed: 10 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ jobs:
4545
runs-on: ubuntu-latest
4646
needs: ['path-filter', 'test-build']
4747
outputs:
48-
hashes: ${{ steps.hash.outputs.hashes }}
48+
hashes: ${{ steps.hash.outputs.hashes_lbox-clients }}
4949
strategy:
5050
fail-fast: false
5151
matrix:
@@ -71,36 +71,24 @@ jobs:
7171
- name: "Generate hashes"
7272
id: hash
7373
run: |
74-
cd dist && echo "hashes-${{matrix.package}}=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
74+
cd dist && echo "hashes_${{ matrix.package }}=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
75+
echo "hashes_${{ matrix.package }}=$(sha256sum * | base64 -w0)"
7576
- uses: actions/upload-artifact@v4
7677
with:
7778
name: build-${{ matrix.package }}
7879
path: ./dist
7980
provenance_python:
80-
needs: [path-filter, build]
81-
runs-on: ubuntu-latest
82-
strategy:
83-
fail-fast: false
84-
matrix:
85-
include: ${{ fromJSON(needs.path-filter.outputs.package-matrix) }}
81+
needs: [build]
8682
permissions:
8783
actions: read
8884
contents: write
8985
id-token: write # Needed to access the workflow's OIDC identity.
90-
steps:
91-
- name: Use hashes output
92-
id: use-hashes
93-
run: |
94-
HASH_VAR="hashes-${{ matrix.package }}"
95-
echo "HASH_VAR=$HASH_VAR" >> $GITHUB_ENV
96-
echo "Using hash: ${{ env.HASH_VAR }}"
97-
- uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
98-
with:
99-
private-repository: true
100-
base64-subjects: "${{ env.HASH_VAR }}"
101-
upload-assets: true
102-
upload-tag-name: v.6.0.0 # Tag from the initiation of the workflow
103-
86+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
87+
with:
88+
base64-subjects: "${{ needs.build.outputs.hashes }}"
89+
upload-assets: true
90+
upload-tag-name: v.6.0.0 # Tag from the initiation of the workflow
91+
10492
test-build:
10593
needs: ['path-filter']
10694
if: ${{ needs.path-filter.outputs.lbox == 'true' }}

0 commit comments

Comments
 (0)