github/electron
1
1
Fork 0
mirror of https://github.com/electron/electron.git synced 2026-02-19 03:14:51 -05:00
Code Issues Packages Projects Releases Wiki Activity

build: fixup attestation for release assets (#49732)

Browse Source 
* build: fixup attestation for release assets

* Generate artifact attestation for generated artifacts

* set id-token for attestation

* Add artifact-metadata permission for attestation

* add permissions for testing attestations

* Revert "add permissions for testing attestations"

This reverts commit 0284bed175.

* Revert "set id-token for attestation"

This reverts commit 69a1b13a18.

* Revert "Generate artifact attestation for generated artifacts"

This reverts commit ee0536eceb.
This commit is contained in:
John Kleinschmidt
2026-02-11 07:17:59 -05:00
committed by GitHub
parent 52061b4c28
commit 0284b9afcc
6 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
script/copy-pipeline-segment-publish.js
View File

@@ -12,6 +12,7 @@ const baseContents = fs.readFileSync(base, 'utf-8');
const parsedBase = yaml.parse(baseContents);
parsedBase.jobs.build.permissions = {
'artifact-metadata': 'write',
attestations: 'write',
contents: 'read',
'id-token': 'write'

2
script/release/uploaders/upload.py
View File

@@ -376,7 +376,7 @@ def upload_io_to_github(release, filename, filepath, version):
github_output.write(",")
else:
github_output.write('UPLOADED_PATHS=')
github_output.write(os.path.join(filepath, filename))
github_output.write(filepath)
def upload_sha256_checksum(version, file_path, key_prefix=None):
checksum_path = f'{file_path}.sha256sum'