-
Notifications
You must be signed in to change notification settings - Fork 11
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps-dev): use same versions for artifact upload and download Actions #433
chore(deps-dev): use same versions for artifact upload and download Actions #433
Conversation
…ctions Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
.github/workflows/release.yml
Outdated
@@ -66,13 +66,13 @@ jobs: | |||
# Store the hash in a file, which is uploaded as a workflow artifact. | |||
sha256sum $ARTIFACTS | base64 -w0 > artifacts-sha256 | |||
- name: Upload build artifacts | |||
uses: actions/upload-artifact@v4.0.0 | |||
uses: actions/upload-artifact@v3 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we use an exact version?
uses: actions/upload-artifact@v3 | |
uses: actions/upload-artifact@v3.0.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done, See commit 71069d1.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please,change the upload-artifact
version also in gradle.yml
. I would like to have the same version for every workflow.
.github/workflows/release.yml
Outdated
with: | ||
name: gradle-build-outputs | ||
path: build/repo/${{ steps.publish.outputs.group }}/*/${{ steps.publish.outputs.version }}/* | ||
retention-days: 5 | ||
- name: Upload artifacts-sha256 | ||
uses: actions/upload-artifact@v4.0.0 | ||
uses: actions/upload-artifact@v3 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we use an exact version?
uses: actions/upload-artifact@v3 | |
uses: actions/upload-artifact@v3.0.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
@sdelamo Looks like the provenance action
generator_generic_slsa3.yml
is not compatible withactions/download-artifact@v4
yet. We need to make sure these two Actions andactions/upload-artifact
are all compatible.This PR reverts
actions/download-artifact
to v3 for now until the next version ofgenerator_generic_slsa3.yml
that will be compatible withactions/download-artifact@v4
is released. See this relevant issue.