Skip to content

Add provenance steps for release #3083

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 10 commits into from
Dec 8, 2024
Merged

Add provenance steps for release #3083

merged 10 commits into from
Dec 8, 2024

Conversation

sanketsudake
Copy link
Member

@sanketsudake sanketsudake commented Dec 8, 2024 •
edited
Loading

Description

  • Add provenance for fission binaries checksums etc.
  • Enable SBOM with goreleaser

Which issue(s) this PR fixes:

Fixes #

Testing

Checklist:

  • I ran tests as well as code linting locally to verify my changes.
  • I have done manual verification of my changes, changes working as expected.
  • I have added new tests to cover my changes.
  • My changes follow contributing guidelines of Fission.
  • I have signed all of my commits.

@sanketsudake
Add provenance steps for release
9870f65
@sanketsudake
Update release workflow
5abf00f 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
Fix branch filters
7b631a7 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
Cleanup release code
df15406 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
Fix attestation steps
314bf97 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
Add SBOM and disable image provenance
1b42784 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
Disable image provenance
0392ff0 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
fix sbom install
aa807d3 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
Add sboms to goreleaser
00d7972 
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
@sanketsudake
Update SLSA version to v2.0.0
bb7ac12
@sanketsudake sanketsudake merged commit 38779b9 into main Dec 8, 2024
9 checks passed
@sanketsudake sanketsudake deleted the release-provenance branch January 1, 2025 16:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@soharab-ic soharab-ic soharab-ic approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@sanketsudake @soharab-ic