diff --git a/.github/workflows/build-os-image.yml b/.github/workflows/build-os-image.yml index 7ac1f75da..770e2471a 100644 --- a/.github/workflows/build-os-image.yml +++ b/.github/workflows/build-os-image.yml @@ -542,11 +542,10 @@ jobs: echo "::endgroup::" - name: Upload expected measurements as artifact - uses: ./.github/actions/artifact_upload + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: measurements path: pcrs-${{ matrix.csp }}-${{ matrix.attestation_variant }}.json - encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }} upload-pcrs: name: "Sign & upload PCRs" @@ -566,10 +565,9 @@ jobs: useCache: "false" - name: Download measurements - uses: ./.github/actions/artifact_download + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: measurements - encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }} - name: Login to AWS uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1 diff --git a/.github/workflows/reproducible-builds.yml b/.github/workflows/reproducible-builds.yml index f6a1c462c..3ad5e9dca 100644 --- a/.github/workflows/reproducible-builds.yml +++ b/.github/workflows/reproducible-builds.yml @@ -53,18 +53,16 @@ jobs: run: shasum -a 256 "${binary}" | tee "${binary}.sha256" - name: Upload binary artifact - uses: ./.github/actions/artifact_upload + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: "binaries-${{ matrix.target }}" path: "${{ env.binary }}" - encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }} - name: Upload hash artifact - uses: ./.github/actions/artifact_upload + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: "sha256sums" path: "${{ env.binary }}.sha256" - encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }} build-osimages: strategy: @@ -140,10 +138,9 @@ jobs: ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }} - name: Download binaries - uses: ./.github/actions/artifact_download + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "binaries-${{ matrix.target }}" - encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }} - name: Hash shell: bash @@ -174,10 +171,9 @@ jobs: ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }} - name: Download os images - uses: ./.github/actions/artifact_download + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "osimages-${{ matrix.target }}" - encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }} - name: Hash shell: bash