New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Artifact attestation #987

Merged

nitisht merged 3 commits into parseablehq:main from praveen5959:artifact-attestation

Nov 11, 2024

Contributor

praveen5959 commented Nov 11, 2024 •

edited by nitisht

Loading

Description

Updated permissions for build jobs to include id-token: write, contents: read, and attestations: write to enable artifact attestation.
Added a step in each build job (Linux, Windows, Mac) to generate artifact attestation using actions/attest-build-provenance@v1 after the binary is built and renamed.
Ensures build provenance for binaries is included in releases for enhanced security and traceability.

Fixes #772

This PR has:

been tested to ensure log ingestion and log query works.
added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
added documentation for new or modified features or behaviours.

praveen5959 and others added 3 commits

November 11, 2024 10:52


          Add build provenance attestation to release workflow

f714ce6


          Fixed a typo

b0599a7


          Merge branch 'main' into artifact-attestation

7717bc7

nitisht merged commit d361b69 into parseablehq:main

7 of 8 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet