Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Attest artifacts #679

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

martincostello
Copy link
Member

@martincostello martincostello commented May 12, 2024

  • Attest the binaries and packages from the build artifacts.
  • Generate an SBOM from the build, and attach it to any releases.

Attest the binaries and packages from the build artifacts.
@martincostello martincostello added enhancement dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 12, 2024
@martincostello martincostello added this to the v5.0.2 milestone May 12, 2024
@martincostello martincostello requested a review from a team as a code owner May 12, 2024 10:38
Copy link

codecov bot commented May 12, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 83.82%. Comparing base (c92247e) to head (849ae77).
Report is 9 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #679      +/-   ##
==========================================
+ Coverage   83.38%   83.82%   +0.44%     
==========================================
  Files          28       28              
  Lines         674      674              
  Branches      151      151              
==========================================
+ Hits          562      565       +3     
+ Misses         68       67       -1     
+ Partials       44       42       -2     
Flag Coverage Δ
linux 83.23% <ø> (+0.44%) ⬆️
macos 82.64% <ø> (-0.45%) ⬇️
windows 82.34% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Needs to be bin for binaries, not publish.
Generate an SBOM from the build output.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file enhancement github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant