You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Note: cannot use env variables to set go-version (https://docs.github.com/en/actions/using-workflows/reusing-workflows#limitations)
38
-
go-version: '1.21'
38
+
go-version: '1.22'
39
39
platforms: linux/amd64,linux/arm64
40
40
push: true
41
41
target: kubectl-argo-rollouts
@@ -44,41 +44,40 @@ jobs:
44
44
quay_password: ${{ secrets.QUAY_ROBOT_TOKEN }}
45
45
46
46
controller-image-provenance:
47
-
needs:
48
-
- controller-image
49
-
permissions:
50
-
actions: read # for detecting the Github Actions environment.
51
-
id-token: write # for creating OIDC tokens for signing.
52
-
packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues)
53
-
# Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
actions: read # for detecting the Github Actions environment.
51
+
id-token: write # for creating OIDC tokens for signing.
52
+
packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues)
53
+
# Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
actions: read # for detecting the Github Actions environment.
67
-
id-token: write # for creating OIDC tokens for signing.
68
-
packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues)
69
-
# Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
actions: read # for detecting the Github Actions environment.
67
+
id-token: write # for creating OIDC tokens for signing.
68
+
packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues)
69
+
# Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
# Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
0 commit comments