Skip to content

chore(cicd): bump slsa-framework/slsa-github-generator from 1.9.0 to 1.9.1 #110

chore(cicd): bump slsa-framework/slsa-github-generator from 1.9.0 to 1.9.1

chore(cicd): bump slsa-framework/slsa-github-generator from 1.9.0 to 1.9.1 #110

Workflow file for this run

name: build
on:
pull_request:
jobs:
goreleaser:
runs-on: ubuntu-latest
steps:
-
name: Checkout
uses: actions/checkout@v4
-
name: Unshallow
run: git fetch --prune --unshallow
-
id: vars
run: |
goVersion=$(grep '^FROM go' .github/go/Dockerfile | cut -d ' ' -f 2 | cut -d ':' -f 2)
echo ::set-output name=go_version::${goVersion}
echo "Using Go version ${goVersion}"
-
name: Set up Go
uses: actions/setup-go@v5
with:
go-version: ${{ steps.vars.outputs.go_version }}
-
name: Install syft
run: |
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
-
name: Build
uses: goreleaser/goreleaser-action@v5.0.0
with:
version: latest
args: build --snapshot --config=.github/goreleaser.yml --clean
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
name: Scan dependencies
uses: anchore/sbom-action@v0
with:
dependency-snapshot: true