26
26
outputs :
27
27
dotnet-sdk-version : ${{ steps.setup-dotnet.outputs.dotnet-version }}
28
28
29
+ permissions :
30
+ attestations : write
31
+ contents : read
32
+ id-token : write
33
+
29
34
strategy :
30
35
fail-fast : false
31
36
matrix :
@@ -40,10 +45,10 @@ jobs:
40
45
41
46
steps :
42
47
- name : Checkout code
43
- uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
48
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
44
49
45
50
- name : Setup .NET SDK
46
- uses : actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4.0.0
51
+ uses : actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
47
52
id : setup-dotnet
48
53
49
54
- name : Setup NuGet
@@ -77,21 +82,35 @@ jobs:
77
82
if : ${{ runner.os != 'Windows' }}
78
83
run : ./eng/common/cibuild.sh -configuration Release -prepareMachine
79
84
85
+ - name : Attest artifacts
86
+ uses : actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3
87
+ if : |
88
+ runner.os == 'Windows' &&
89
+ github.event.repository.fork == false &&
90
+ (github.ref_name == github.event.repository.default_branch ||
91
+ startsWith(github.ref, 'refs/heads/dev') ||
92
+ startsWith(github.ref, 'refs/heads/rel/') ||
93
+ startsWith(github.ref, 'refs/tags/'))
94
+ with :
95
+ subject-path : |
96
+ ./artifacts/bin/AspNet.Security.*/Release/**/AspNet.Security.*.dll
97
+ ./artifacts/packages/Release/Shipping/*
98
+
80
99
- name : Publish logs
81
- uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
100
+ uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
82
101
if : ${{ always() }}
83
102
with :
84
103
name : logs-${{ matrix.os_name }}
85
104
path : ./artifacts/log/Release
86
105
87
106
- name : Publish NuGet packages
88
- uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
107
+ uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
89
108
with :
90
109
name : packages-${{ matrix.os_name }}
91
110
path : ./artifacts/packages/Release/Shipping
92
111
93
112
- name : Publish test results
94
- uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
113
+ uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
95
114
if : ${{ always() }}
96
115
with :
97
116
name : testresults-${{ matrix.os_name }}
@@ -103,12 +122,12 @@ jobs:
103
122
steps :
104
123
105
124
- name : Download packages
106
- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
125
+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
107
126
with :
108
127
name : packages-windows
109
128
110
129
- name : Setup .NET SDK
111
- uses : actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4.0.0
130
+ uses : actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
112
131
with :
113
132
dotnet-version : ${{ needs.build.outputs.dotnet-sdk-version }}
114
133
@@ -126,26 +145,27 @@ jobs:
126
145
}
127
146
if ($invalidPackages -gt 0) {
128
147
Write-Output "::error::$invalidPackages NuGet package(s) failed validation."
148
+ exit 1
129
149
}
130
150
131
151
publish-myget :
132
152
needs : [ build, validate-packages ]
133
153
runs-on : ubuntu-latest
134
154
if : |
135
155
github.event.repository.fork == false &&
136
- (github.ref == format('refs/heads/{0}', github.event.repository.default_branch) ||
156
+ (github.ref_name == github.event.repository.default_branch ||
137
157
startsWith(github.ref, 'refs/heads/dev') ||
138
158
startsWith(github.ref, 'refs/heads/rel/') ||
139
159
startsWith(github.ref, 'refs/tags/'))
140
160
steps :
141
161
142
162
- name : Download packages
143
- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
163
+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
144
164
with :
145
165
name : packages-windows
146
166
147
167
- name : Setup .NET SDK
148
- uses : actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4.0.0
168
+ uses : actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
149
169
with :
150
170
dotnet-version : ${{ needs.build.outputs.dotnet-sdk-version }}
151
171
@@ -163,12 +183,12 @@ jobs:
163
183
steps :
164
184
165
185
- name : Download packages
166
- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
186
+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
167
187
with :
168
188
name : packages-windows
169
189
170
190
- name : Setup .NET SDK
171
- uses : actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4.0.0
191
+ uses : actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
172
192
with :
173
193
dotnet-version : ${{ needs.build.outputs.dotnet-sdk-version }}
174
194
0 commit comments