Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-10-01 01:36:09 -04:00
Code Issues Packages Projects Releases Wiki Activity

ci: selectively remove artifact encryption

Browse Source
This commit is contained in:
Markus Rudy 2023-12-22 13:01:57 +01:00 committed by Markus Rudy
parent c8fc04d991
commit 130bed0eb2
2 changed files with 6 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.github/workflows/build-os-image.yml vendored
View File

@ -542,11 +542,10 @@ jobs:
echo "::endgroup::" echo "::endgroup::"
- name: Upload expected measurements as artifact - name: Upload expected measurements as artifact
uses: ./.github/actions/artifact_upload uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
with: with:
name: measurements name: measurements
path: pcrs-${{ matrix.csp }}-${{ matrix.attestation_variant }}.json path: pcrs-${{ matrix.csp }}-${{ matrix.attestation_variant }}.json
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
upload-pcrs: upload-pcrs:
name: "Sign & upload PCRs" name: "Sign & upload PCRs"
@ -566,10 +565,9 @@ jobs:
useCache: "false" useCache: "false"
- name: Download measurements - name: Download measurements
uses: ./.github/actions/artifact_download uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
with: with:
name: measurements name: measurements
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
- name: Login to AWS - name: Login to AWS
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1 uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1

12
.github/workflows/reproducible-builds.yml vendored
View File

@ -53,18 +53,16 @@ jobs:
run: shasum -a 256 "${binary}" | tee "${binary}.sha256" run: shasum -a 256 "${binary}" | tee "${binary}.sha256"
- name: Upload binary artifact - name: Upload binary artifact
uses: ./.github/actions/artifact_upload uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
with: with:
name: "binaries-${{ matrix.target }}" name: "binaries-${{ matrix.target }}"
path: "${{ env.binary }}" path: "${{ env.binary }}"
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
- name: Upload hash artifact - name: Upload hash artifact
uses: ./.github/actions/artifact_upload uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
with: with:
name: "sha256sums" name: "sha256sums"
path: "${{ env.binary }}.sha256" path: "${{ env.binary }}.sha256"
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
build-osimages: build-osimages:
strategy: strategy:
@ -140,10 +138,9 @@ jobs:
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }} ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
- name: Download binaries - name: Download binaries
uses: ./.github/actions/artifact_download uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
with: with:
name: "binaries-${{ matrix.target }}" name: "binaries-${{ matrix.target }}"
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
- name: Hash - name: Hash
shell: bash shell: bash
@ -174,10 +171,9 @@ jobs:
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }} ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
- name: Download os images - name: Download os images
uses: ./.github/actions/artifact_download uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
with: with:
name: "osimages-${{ matrix.target }}" name: "osimages-${{ matrix.target }}"
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
- name: Hash - name: Hash
shell: bash shell: bash