opensource/fd
3
0
Fork 0
mirror of https://github.com/sharkdp/fd.git synced 2026-08-29 02:32:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: correct attestation subjects

Browse Source 
Use the original files as the source, rather than the file that is
uploaded to the artifact, as that is actually a zip file (what?)

Fixes: #1936
This commit is contained in:
Thayne McCombs
2026-03-24 02:21:40 -06:00
parent d6b44b81b6
commit 5008de5052
1 changed files with 4 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/CICD.yml
+4 -10
View File
@@ -275,19 +275,13 @@ jobs:
unset IS_RELEASE ; if [[ $GITHUB_REF =~ ^refs/tags/v[0-9].* ]]; then IS_RELEASE='true' ; fi
echo "IS_RELEASE=${IS_RELEASE}" >> $GITHUB_OUTPUT
- name: "Attest artifact: tarball"
- name: "Attest artifacts"
uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4
if: steps.is-release.outputs.IS_RELEASE
with:
subject-name: ${{ steps.package.outputs.PKG_NAME }}
subject-digest: sha256:${{ steps.upload-tarball.outputs.artifact-digest }}
- name: "Attest artifact: Debian package"
uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4
if: 'steps.is-release.outputs.IS_RELEASE && steps.debian-package.outputs.DPKG_NAME'
with:
subject-name: ${{ steps.debian-package.outputs.DPKG_NAME }}
subject-digest: sha256:${{ steps.upload-deb.outputs.artifact-digest }}
subject-path: |
${{ steps.package.outputs.PKG_PATH }}
${{ steps.debian-package.outputs.DPKG_PATH }}
- name: Publish archives and packages
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1