Skip to content

Bump the all group with 3 updates #591

Bump the all group with 3 updates

Bump the all group with 3 updates #591

Workflow file for this run

name: Snapshot
on:
push:
branches:
- 'main'
pull_request:
jobs:
snapshot:
runs-on: ubuntu-latest
steps:
- name: Check out code onto GOPATH
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
with:
go-version: '1.23'
check-latest: true
- name: Install GoReleaser
uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
with:
install-only: true
- name: Install bom
uses: kubernetes-sigs/release-actions/setup-bom@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0
- name: Run Snapshot
run: make snapshot
- name: check binary
run: |
./dist/zeitgeist-amd64-linux version
./dist/zeitgeist-remote-amd64-linux version
./dist/buoy-amd64-linux help
attestation:
runs-on: ubuntu-latest
permissions:
contents: read
needs:
- snapshot
steps:
- name: Check out code onto GOPATH
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
with:
fetch-depth: 1
- name: Install tejolote
uses: kubernetes-sigs/release-actions/setup-tejolote@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0
- run: |
tejolote attest github://kubernetes-sigs/zeitgeist/"${GITHUB_RUN_ID}" --output zeitgeist.intoto.json
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
with:
name: zeitgeist.intoto.json
path: ./zeitgeist.intoto.json