File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 66 - " v*.*.*"
77
88# https://github.com/ossf/scorecard/blob/7ed886f1bd917d19cb9d6ce6c10e80e81fa31c39/docs/checks.md#token-permissions
9- permissions : read-all
9+ permissions :
10+ contents : read
1011
1112jobs :
1213 release_gate :
@@ -27,17 +28,22 @@ jobs:
2728 chainloop attestation init --workflow release-gate --project chainloop
2829 chainloop attestation push
2930 env :
31+ CHAINLOOP_TOKEN : ${{ secrets.CHAINLOOP_TOKEN }}
3032 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
3133
3234 - name : Mark attestation as failed
3335 if : ${{ failure() }}
3436 run : |
3537 chainloop attestation reset
38+ env :
39+ CHAINLOOP_TOKEN : ${{ secrets.CHAINLOOP_TOKEN }}
3640
3741 - name : Mark attestation as cancelled
3842 if : ${{ cancelled() }}
3943 run : |
4044 chainloop attestation reset --trigger cancellation
45+ env :
46+ CHAINLOOP_TOKEN : ${{ secrets.CHAINLOOP_TOKEN }}
4147
4248 test :
4349 uses : chainloop-dev/chainloop/.github/workflows/test.yml@d427768c0b07d50b485df0bcae87eb8ae8769e04
5460 id-token : write # required for SLSA provenance
5561 attestations : write # required for SLSA provenance
5662 env :
63+ CHAINLOOP_TOKEN : ${{ secrets.CHAINLOOP_TOKEN }}
5764 GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
5865
5966 steps :
You can’t perform that action at this time.
0 commit comments