mirror of
https://github.com/spring-projects/spring-petclinic.git
synced 2025-07-23 00:05:50 +00:00
chore(demo): add chainloop
Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
This commit is contained in:
parent
c9825f7f7f
commit
fb7d7c646f
2 changed files with 15 additions and 1 deletions
2
.chainloop.yml
Normal file
2
.chainloop.yml
Normal file
|
@ -0,0 +1,2 @@
|
||||||
|
# defines files to be added to the attestation
|
||||||
|
attestation: {}
|
14
.github/workflows/maven-build.yml
vendored
14
.github/workflows/maven-build.yml
vendored
|
@ -36,7 +36,7 @@ jobs:
|
||||||
|
|
||||||
collect-metadata:
|
collect-metadata:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
name: "Security and Compliance Checks"
|
name: Generate metadata
|
||||||
needs: build
|
needs: build
|
||||||
steps:
|
steps:
|
||||||
- name: Download all workflow run artifacts
|
- name: Download all workflow run artifacts
|
||||||
|
@ -57,3 +57,15 @@ jobs:
|
||||||
with:
|
with:
|
||||||
name: metadata
|
name: metadata
|
||||||
path: metadata/*
|
path: metadata/*
|
||||||
|
|
||||||
|
# Send metadata to Chainloop
|
||||||
|
chainloop:
|
||||||
|
name: Chainloop
|
||||||
|
uses: chainloop-dev/labs/.github/workflows/chainloop.yml@a75dff2ef342a1e5c5e1ec5c42fb99f3d1bc03cb
|
||||||
|
needs: collect-metadata
|
||||||
|
# with:
|
||||||
|
# contract_revision: 3
|
||||||
|
secrets:
|
||||||
|
api_token: ${{ secrets.CHAINLOOP_ROBOT_ACCOUNT }}
|
||||||
|
signing_key: ${{ secrets.PRIVATE_KEY }}
|
||||||
|
signing_key_password: ${{ secrets.PRIVATE_KEY_PASSWORD }}
|
Loading…
Reference in a new issue