feat(stefanprodan/timoni): SLSA provenance (#32048)

aquaproj · Feb 12, 2025 · 6991ee5 · 6991ee5
1 parent e66e261
commit 6991ee5
Show file tree

Hide file tree

Showing 3 changed files with 104 additions and 26 deletions.
diff --git a/pkgs/stefanprodan/timoni/pkg.yaml b/pkgs/stefanprodan/timoni/pkg.yaml
@@ -1,2 +1,6 @@
 packages:
   - name: stefanprodan/timoni@v0.24.0
+  - name: stefanprodan/timoni
+    version: v0.9.0
+  - name: stefanprodan/timoni
+    version: v0.7.0
diff --git a/pkgs/stefanprodan/timoni/registry.yaml b/pkgs/stefanprodan/timoni/registry.yaml
@@ -4,16 +4,53 @@ packages:
     repo_owner: stefanprodan
     repo_name: timoni
     description: Timoni is a package manager for Kubernetes, powered by CUE and inspired by Helm
-    asset: timoni_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
-    format: tar.gz
-    overrides:
-      - goos: windows
-        format: zip
-    supported_envs:
-      - darwin
-      - linux
-      - amd64
-    checksum:
-      type: github_release
-      asset: timoni_{{trimV .Version}}_checksums.txt
-      algorithm: sha256
+    version_constraint: "false"
+    version_overrides:
+      - version_constraint: semver("< 0.7.1")
+        asset: timoni_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        overrides:
+          - goos: windows
+            format: zip
+        supported_envs:
+          - darwin
+          - linux
+          - amd64
+        checksum:
+          type: github_release
+          asset: timoni_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+      - version_constraint: semver("< 0.10.0")
+        asset: timoni_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        overrides:
+          - goos: windows
+            format: zip
+        supported_envs:
+          - darwin
+          - linux
+          - amd64
+        checksum:
+          type: github_release
+          asset: timoni_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+        slsa_provenance:
+          type: github_release
+          asset: multiple.intoto.jsonl
+      - version_constraint: "true"
+        asset: timoni_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        overrides:
+          - goos: windows
+            format: zip
+        supported_envs:
+          - darwin
+          - linux
+          - amd64
+        checksum:
+          type: github_release
+          asset: timoni_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+        slsa_provenance:
+          type: github_release
+          asset: timoni_{{trimV .Version}}_provenance.intoto.jsonl
diff --git a/registry.yaml b/registry.yaml