ci: update workflows (#1064)

- add build attestation for api image - add build attestation for cleanup image - add build attestation for dashboard image - add build attestation for symbolicator-android image
measure-sh · Aug 19, 2024 · c527dd5 · c527dd5
1 parent 47b57aa
commit c527dd5
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 32 deletions.
diff --git a/.github/workflows/api.yml b/.github/workflows/api.yml
@@ -114,14 +114,12 @@ jobs:
             org.opencontainers.image.description=Measure API Server
             org.opencontainers.image.licenses=Apache-2.0
 
-      # Disable artifact attestation till repo is public
-      # as this is a paid feature in GitHub.
-      # - name: Generate artifact attestation
-      #   uses: actions/attest-build-provenance@v1
-      #   with:
-      #     subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-      #     subject-digest: ${{ steps.push.outputs.digest }}
-      #     push-to-registry: true
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true
 
   deploy:
     name: Deploy to fly.io

diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
@@ -114,11 +114,9 @@ jobs:
             org.opencontainers.image.description=Measure Cleanup Server
             org.opencontainers.image.licenses=Apache-2.0
 
-      # Disable artifact attestation till repo is public
-      # as this is a paid feature in GitHub.
-      # - name: Generate artifact attestation
-      #   uses: actions/attest-build-provenance@v1
-      #   with:
-      #     subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-      #     subject-digest: ${{ steps.push.outputs.digest }}
-      #     push-to-registry: true
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true
diff --git a/.github/workflows/dashboard.yml b/.github/workflows/dashboard.yml
@@ -81,11 +81,9 @@ jobs:
             org.opencontainers.image.description=Measure Dashboard App
             org.opencontainers.image.licenses=Apache-2.0
 
-      # Disable artifact attestation till repo is public
-      # as this is a paid feature in GitHub.
-      # - name: Generate artifact attestation
-      #   uses: actions/attest-build-provenance@v1
-      #   with:
-      #     subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-      #     subject-digest: ${{ steps.push.outputs.digest }}
-      #     push-to-registry: true
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true
diff --git a/.github/workflows/symbolicator-android.yml b/.github/workflows/symbolicator-android.yml
@@ -103,11 +103,9 @@ jobs:
             org.opencontainers.image.description=Measure Symbolicator for Android
             org.opencontainers.image.licenses=Apache-2.0
 
-      # Disable artifact attestation till repo is public
-      # as this is a paid feature in GitHub.
-      # - name: Generate artifact attestation
-      #   uses: actions/attest-build-provenance@v1
-      #   with:
-      #     subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-      #     subject-digest: ${{ steps.push.outputs.digest }}
-      #     push-to-registry: true
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true