attest build provenance

shogo82148 · Jul 1, 2024 · 295029e · 295029e
1 parent c47c2fe
commit 295029e
Show file tree

Hide file tree

Showing 10 changed files with 70 additions and 0 deletions.
diff --git a/.github/workflows/build-redis-2.8.yml b/.github/workflows/build-redis-2.8.yml
@@ -42,6 +42,10 @@ jobs:
           - "2.8.2"
           - "2.8.1"
           - "2.8.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -71,3 +75,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-3.0.yml b/.github/workflows/build-redis-3.0.yml
@@ -25,6 +25,10 @@ jobs:
           - "3.0.2"
           - "3.0.1"
           - "3.0.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -54,3 +58,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-3.2.yml b/.github/workflows/build-redis-3.2.yml
@@ -31,6 +31,10 @@ jobs:
           - "3.2.2"
           - "3.2.1"
           - "3.2.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -60,3 +64,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-4.0.yml b/.github/workflows/build-redis-4.0.yml
@@ -32,6 +32,10 @@ jobs:
           - "4.0.2"
           - "4.0.1"
           - "4.0.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -61,3 +65,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-5.0.yml b/.github/workflows/build-redis-5.0.yml
@@ -32,6 +32,10 @@ jobs:
           - "5.0.2"
           - "5.0.1"
           - "5.0.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -61,3 +65,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-6.0.yml b/.github/workflows/build-redis-6.0.yml
@@ -38,6 +38,10 @@ jobs:
           - "6.0.2"
           - "6.0.1"
           - "6.0.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -67,3 +71,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-6.2.yml b/.github/workflows/build-redis-6.2.yml
@@ -32,6 +32,10 @@ jobs:
           - "6.2.2"
           - "6.2.1"
           - "6.2.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -61,3 +65,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-7.0.yml b/.github/workflows/build-redis-7.0.yml
@@ -33,6 +33,10 @@ jobs:
           - "7.0.2"
           - "7.0.1"
           - "7.0.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -62,3 +66,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-redis-7.2.yml b/.github/workflows/build-redis-7.2.yml
@@ -23,6 +23,10 @@ jobs:
           - "7.2.2"
           - "7.2.1"
           - "7.2.0"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -52,3 +56,6 @@ jobs:
         env:
           REDIS_VERSION: ${{ matrix.redis }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd
diff --git a/.github/workflows/build-valkey-7.2.yml b/.github/workflows/build-valkey-7.2.yml
@@ -18,6 +18,10 @@ jobs:
           - macos-12
         valkey:
           - "7.2.5"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
       - name: build
@@ -47,3 +51,6 @@ jobs:
         env:
           VALKEY_VERSION: ${{ matrix.valkey }}
           GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ runner.temp }}/*.tar.zstd