github.com/drellem2/pogo@v0.0.0-20240503070746-2c2b76da329a/.github/workflows/go-ossf-slsa3-publish.yml (about)

     1  # This workflow uses actions that are not certified by GitHub.
     2  # They are provided by a third-party and are governed by
     3  # separate terms of service, privacy policy, and support
     4  # documentation.
     5  
     6  # This workflow lets you compile your Go project using a SLSA3 compliant builder.
     7  # This workflow will generate a so-called "provenance" file describing the steps
     8  # that were performed to generate the final binary.
     9  # The project is an initiative of the OpenSSF (openssf.org) and is developed at
    10  # https://github.com/slsa-framework/slsa-github-generator.
    11  # The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
    12  # For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
    13  
    14  name: SLSA Go releaser
    15  on:
    16    workflow_dispatch:
    17    release:
    18      types: [created]
    19  
    20  permissions: read-all
    21  
    22  jobs:
    23    # ========================================================================================================================================
    24    #     Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project.
    25    #       See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file
    26    #=========================================================================================================================================
    27    build:
    28      permissions:
    29        id-token: write # To sign.
    30        contents: write # To upload release assets.
    31        actions: read   # To read workflow path.
    32      uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0
    33      with:
    34        go-version: 1.17
    35        # =============================================================================================================
    36        #     Optional: For more options, see https://github.com/slsa-framework/slsa-github-generator#golang-projects
    37        # =============================================================================================================
    38