From 01c0a27a84f098fe0ed43ce889774b62eeab1e30 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Jun 2023 17:56:03 +0200 Subject: [PATCH] Bump home-assistant/builder from 2023.06.0 to 2023.06.1 (#91) * Bump home-assistant/builder from 2023.06.0 to 2023.06.1 Bumps [home-assistant/builder](https://github.com/home-assistant/builder) from 2023.06.0 to 2023.06.1. - [Release notes](https://github.com/home-assistant/builder/releases) - [Commits](https://github.com/home-assistant/builder/compare/2023.06.0...2023.06.1) --- updated-dependencies: - dependency-name: home-assistant/builder dependency-type: direct:production ... Signed-off-by: dependabot[bot] * Use cosign * ongly ghcr.io --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pascal Vizeli --- .github/workflows/builder.yml | 14 ++++++-------- build.yaml | 6 ++++-- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/builder.yml b/.github/workflows/builder.yml index 443140d..1d0807e 100644 --- a/.github/workflows/builder.yml +++ b/.github/workflows/builder.yml @@ -10,6 +10,10 @@ jobs: build: name: Build landingpage runs-on: ubuntu-latest + permissions: + contents: read + packages: write + id-token: write strategy: matrix: machine: @@ -37,13 +41,6 @@ jobs: - name: Checkout the repository uses: actions/checkout@v3 - - name: Login to DockerHub - if: github.event_name == 'release' - uses: docker/login-action@v2.2.0 - with: - username: ${{ secrets.DOCKERHUB_USERNAME }} - password: ${{ secrets.DOCKERHUB_TOKEN }} - - name: Login to GitHub Container Registry if: github.event_name == 'release' uses: docker/login-action@v2.2.0 @@ -57,12 +54,13 @@ jobs: run: echo "BUILD_ARGS=--test" >> $GITHUB_ENV - name: Build landingpage - uses: home-assistant/builder@2023.06.0 + uses: home-assistant/builder@2023.06.1 with: args: | $BUILD_ARGS \ --target /data \ --no-latest \ + --cosign \ --machine landingpage=${{ matrix.machine }} env: CAS_API_KEY: ${{ secrets.CAS_TOKEN }} diff --git a/build.yaml b/build.yaml index d6494ac..f0da07b 100644 --- a/build.yaml +++ b/build.yaml @@ -1,5 +1,4 @@ -image: homeassistant/{machine}-homeassistant -shadow_repository: ghcr.io/home-assistant +image: ghcr.io/home-assistant/{machine}-homeassistant build_from: aarch64: scratch armv7: scratch @@ -9,6 +8,9 @@ build_from: codenotary: signer: notary@home-assistant.io base_image: notary@home-assistant.io +cosign: + base_identity: https://github.com/home-assistant/docker-base/.* + identity: https://github.com/home-assistant/landingpage/.* labels: io.hass.type: landingpage org.opencontainers.image.source: https://github.com/home-assistant/landingpage