From a826e668b53ea64c495171d6e0b7dde65e931ad0 Mon Sep 17 00:00:00 2001 From: "J.P. Hutchins" Date: Sat, 22 Jun 2024 19:27:03 -0700 Subject: [PATCH] =?UTF-8?q?github:=20workflow:=20release:=20add=20cosign;?= =?UTF-8?q?=20add=20emojis=20=E2=9C=85?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/release.yml | 27 ++++++++++++++++++++++----- 1 file changed, 22 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 60dbe71..85911fb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,19 +12,36 @@ jobs: steps: - uses: actions/checkout@v4 - - name: Create SHA of envr.ps1 - run: shasum -a 256 envr.ps1 > sha256.sum - - - name: Add envr.ps1 to release + - name: 🚀 Add envr.ps1 to release uses: svenstaro/upload-release-action@v2 with: repo_token: ${{ secrets.GITHUB_TOKEN }} file: envr.ps1 tag: ${{ github.ref }} - - name: Add SHA to release + - name: 🍴 Create SHA of envr.ps1 + run: shasum -a 256 envr.ps1 > sha256.sum + + - name: 🚀 Add SHA to release uses: svenstaro/upload-release-action@v2 with: repo_token: ${{ secrets.GITHUB_TOKEN }} file: sha256.sum tag: ${{ github.ref }} + + - name: 💿 Install cosign + uses: sigstore/cosign-installer@v3.5.0 + + - name: 🖋️ Create cosign.bundle + run: > + cosign sign-blob + envr.ps1 + --bundle envr.ps1.cosign.bundle + --yes + + - name: 🚀 Add cosign.bundle to release + uses: svenstaro/upload-release-action@v2 + with: + repo_token: ${{ secrets.GITHUB_TOKEN }} + file: envr.ps1.cosign.bundle + tag: ${{ github.ref }}