Skip to content

Bump actions/setup-go from 5.0.2 to 5.1.0 in the all group #247

Bump actions/setup-go from 5.0.2 to 5.1.0 in the all group

Bump actions/setup-go from 5.0.2 to 5.1.0 in the all group #247

Workflow file for this run

# Copyright 2023 The OpenVEX Authors
# SPDX-License-Identifier: Apache-2.0
name: Snapshot
on:
push:
branches:
- 'main'
pull_request:
jobs:
snapshot:
runs-on: ubuntu-latest
steps:
- name: Check out code onto GOPATH
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
with:
go-version: '1.23'
check-latest: true
- name: Install GoReleaser
uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
with:
install-only: true
- name: Install bom
uses: kubernetes-sigs/release-actions/setup-bom@a69972745f85aab4ba5d6c681e2a0e7f73eaff2b # v0.3.0
- name: Run Snapshot
run: make snapshot
- name: check binary
run: |
./dist/vexctl-linux-amd64 version
attestation:
runs-on: ubuntu-latest
permissions:
contents: read
needs:
- snapshot
steps:
- name: Check out code onto GOPATH
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Install tejolote
uses: kubernetes-sigs/release-actions/setup-tejolote@a69972745f85aab4ba5d6c681e2a0e7f73eaff2b # v0.3.0
- run: |
tejolote attest github://openvex/vexctl/"${GITHUB_RUN_ID}" --output vexctl.intoto.json
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
with:
name: vexctl.intoto.json
path: ./vexctl.intoto.json