diff --git a/.chainloop.yml b/.chainloop.yml index a32046bbb..1e1b8f73b 100644 --- a/.chainloop.yml +++ b/.chainloop.yml @@ -1,3 +1,4 @@ +# defines files to be added to the attestation attestation: - name: binary path: artifacts/spring-petclinic-*.jar diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml index 81f54afca..9fcb0edd8 100644 --- a/.github/workflows/maven-build.yml +++ b/.github/workflows/maven-build.yml @@ -28,11 +28,14 @@ jobs: - name: Build with Maven Wrapper run: ./mvnw -B package + # Upload the built jar as an artifact so that it can be used in the Chainloop job - uses: actions/upload-artifact@v3 with: name: artifacts path: target/*.jar + # Chainloop integration + # will run only if the build job is successful chainloop: name: Chainloop uses: chainloop-dev/labs/.github/workflows/chainloop.yml@a75dff2ef342a1e5c5e1ec5c42fb99f3d1bc03cb