Skip to content

Commit 02134cf

Browse files
ianlewisianlewis
authored
Code freeze for v1.4.0-rc.1 (#1285)
Code freeze for v1.4.0-rc.1 Signed-off-by: Ian Lewis <[email protected]>
1 parent 18a7d07 commit 02134cf

6 files changed

Lines changed: 27 additions & 20 deletions

File tree

‎.github/workflows/builder_go_slsa3.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ jobs:
7676
steps:
7777
- name: Generate random 16-byte value (32-char hex encoded)
7878
id: rng
79-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
79+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.4.0-rc.1
8080

8181
detect-env:
8282
outputs:
@@ -88,7 +88,7 @@ jobs:
8888
steps:
8989
- name: Detect the builder ref
9090
id: detect
91-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@main
91+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@v1.4.0-rc.1
9292

9393
###################################################################
9494
# #
@@ -103,7 +103,7 @@ jobs:
103103
steps:
104104
- name: Generate builder binary
105105
id: generate
106-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
106+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.4.0-rc.1
107107
with:
108108
repository: "${{ needs.detect-env.outputs.repository }}"
109109
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -137,7 +137,7 @@ jobs:
137137
needs: [builder, rng, detect-env]
138138
steps:
139139
- name: Checkout builder repository
140-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
140+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
141141
with:
142142
repository: "${{ needs.detect-env.outputs.repository }}"
143143
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -183,7 +183,7 @@ jobs:
183183
needs: [builder, build-dry, rng, detect-env]
184184
steps:
185185
- name: Checkout builder repository
186-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
186+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
187187
with:
188188
repository: "${{ needs.detect-env.outputs.repository }}"
189189
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -263,7 +263,7 @@ jobs:
263263
go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
264264
steps:
265265
- name: Checkout builder repository
266-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
266+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
267267
with:
268268
repository: "${{ needs.detect-env.outputs.repository }}"
269269
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -321,7 +321,7 @@ jobs:
321321
if: startsWith(github.ref, 'refs/tags/') && inputs.upload-assets == true
322322
steps:
323323
- name: Checkout builder repository
324-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
324+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
325325
with:
326326
repository: "${{ needs.detect-env.outputs.repository }}"
327327
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/builder_nodejs_slsa3.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -136,7 +136,7 @@ jobs:
136136
steps:
137137
- name: Generate random 16-byte value (32-char hex encoded)
138138
id: rng
139-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@main
139+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@v1.4.0-rc.1
140140

141141
detect-env:
142142
outputs:
@@ -148,7 +148,7 @@ jobs:
148148
steps:
149149
- name: Detect the builder ref
150150
id: detect
151-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@main
151+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@v1.4.0-rc.1
152152

153153
###################################################################
154154
# #
@@ -163,7 +163,7 @@ jobs:
163163
steps:
164164
- name: Generate builder
165165
id: generate
166-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
166+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.4.0-rc.1
167167
with:
168168
repository: "${{ needs.detect-env.outputs.repository }}"
169169
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -194,7 +194,7 @@ jobs:
194194
needs: [builder, rng, detect-env]
195195
steps:
196196
- name: Checkout builder repository
197-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
197+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
198198
with:
199199
repository: "${{ needs.detect-env.outputs.repository }}"
200200
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -242,7 +242,7 @@ jobs:
242242
needs: [builder, build, rng, detect-env]
243243
steps:
244244
- name: Checkout builder repository
245-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
245+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
246246
with:
247247
repository: "${{ needs.detect-env.outputs.repository }}"
248248
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -293,7 +293,7 @@ jobs:
293293
provenances: ${{ steps.sign-prov.outputs.provenances }}
294294
steps:
295295
- name: Checkout builder repository
296-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
296+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
297297
with:
298298
repository: "${{ needs.detect-env.outputs.repository }}"
299299
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -340,7 +340,7 @@ jobs:
340340
needs: [build, provenance, detect-env]
341341
steps:
342342
- name: Checkout builder repository
343-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
343+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
344344
with:
345345
repository: "${{ needs.detect-env.outputs.repository }}"
346346
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/generator_container_slsa3.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464
steps:
6565
- name: Detect the generator ref
6666
id: detect
67-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@main
67+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@v1.4.0-rc.1
6868

6969
# generator builds the generator binary and runs it to generate SLSA
7070
# provenance.
@@ -84,7 +84,7 @@ jobs:
8484
packages: write # Needed to login and upload attestations to ghcr.io.
8585
steps:
8686
- name: Generate builder
87-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
87+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.4.0-rc.1
8888
with:
8989
repository: "${{ needs.detect-env.outputs.repository }}"
9090
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/generator_generic_slsa3.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ jobs:
7676
steps:
7777
- name: Detect the generator ref
7878
id: detect
79-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@main
79+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@v1.4.0-rc.1
8080

8181
# generator builds the generator binary and runs it to generate SLSA
8282
# provenance.
@@ -99,7 +99,7 @@ jobs:
9999
actions: read # Needed to read workflow info.
100100
steps:
101101
- name: Generate builder
102-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@main
102+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@v1.4.0-rc.1
103103
with:
104104
repository: "${{ needs.detect-env.outputs.repository }}"
105105
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -161,7 +161,7 @@ jobs:
161161
if: startsWith(github.ref, 'refs/tags/') && inputs.upload-assets == true
162162
steps:
163163
- name: Checkout builder repository
164-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@main
164+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout@v1.4.0-rc.1
165165
with:
166166
repository: "${{ needs.detect-env.outputs.repository }}"
167167
ref: "${{ needs.detect-env.outputs.ref }}"

‎.github/workflows/pre-submit.actions.yml‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -113,7 +113,9 @@ jobs:
113113
BODY: "${{ github.event.pull_request.body }}"
114114
run: |
115115
# match the first instance of a line with 'label:release vX.Y.Z' with only leading or trailing whitespace.
116-
RELEASE_TAG=$(echo "$BODY" | grep -oe '^[[:space:]]*#label:release[[:space:]]*v[0-9]\+\.[0-9]\+\.[0-9]\+\(-rc\.[0-9]\+\)\?[[:space:]]*$' | head -n1 | sed -n 's/^#label:release\s*//p')
116+
set -euo pipefail
117+
# NOTE: grep is not matching if there is a trailing '$' in the pattern for some reason...
118+
RELEASE_TAG=$(echo "$BODY" | grep -oe '^[[:blank:]]*#label:release[[:blank:]]*v[0-9]\+\.[0-9]\+\.[0-9]\+\(-rc\.[0-9]\+\)\?[[:blank:]]*' | head -n1 | sed -n 's/^[[:blank:]]*#label:release[[:blank:]]*\([^[:blank:]]*\)[[:blank:]]*/\1/p')
117119
RELEASE_TAG=${RELEASE_TAG} ./__THIS_REPO__/.github/workflows/scripts/pre-release/references.sh
118120
119121
secure-project-checkout-go:

‎.github/workflows/scripts/pre-release/references.sh‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,11 @@ echo "patch: $patch"
2121
echo "rc: $rc"
2222
cd -
2323

24+
if [ "$RELEASE_TAG" == "" ]; then
25+
echo "Release tag is empty: \"$RELEASE_TAG\""
26+
exit 1
27+
fi
28+
2429
# Verify internal Actions are referenced by the release tag.
2530
cd __THIS_REPO__
2631
results=$(

0 commit comments

Comments
 (0)