Skip to content

feat: Set cosign-repository input and env#2962

Merged
laurentsimon merged 8 commits intoslsa-framework:mainfrom
saisatishkarra:feat/cosign-repository-env
Nov 21, 2023
Merged

feat: Set cosign-repository input and env#2962
laurentsimon merged 8 commits intoslsa-framework:mainfrom
saisatishkarra:feat/cosign-repository-env

Conversation

@saisatishkarra
Copy link
Copy Markdown
Contributor

@saisatishkarra saisatishkarra commented Nov 10, 2023

Solves: #2956

@saisatishkarra saisatishkarra force-pushed the feat/cosign-repository-env branch 2 times, most recently from d10f284 to e6a714e Compare November 10, 2023 17:33
@saisatishkarra saisatishkarra force-pushed the feat/cosign-repository-env branch 2 times, most recently from 56108fb to db8fd1a Compare November 15, 2023 15:29
Copy link
Copy Markdown
Collaborator

@laurentsimon laurentsimon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. A few questions and nits, but looking good!

@saisatishkarra
Copy link
Copy Markdown
Contributor Author

saisatishkarra commented Nov 15, 2023

@laurentsimon Is there a way to autogenerate the readme with updated paramters for the workflow? If so, can you guide on How-To?

@laurentsimon
Copy link
Copy Markdown
Collaborator

@laurentsimon Is there a way to autogenerate the readme with updated paramters for the workflow? If so, can you guide on How-To?

There's no auto-generate :/
You can edit the README directly and it should work. We may have a presubmit https://github.com/slsa-framework/slsa-github-generator/blob/main/.github/workflows/scripts/pre-submit.markdown/markdown-toc.sh which runs the markdown-toc command (it's javascript package). It should not be necessary in your case because you're not updating the table of content.

Does that help?

@saisatishkarra saisatishkarra force-pushed the feat/cosign-repository-env branch from e93891b to ac1d9c3 Compare November 15, 2023 18:05
Signed-off-by: saisatishkarra <saisatish.karra@konghq.com>
Signed-off-by: saisatishkarra <saisatish.karra@konghq.com>
Signed-off-by: saisatishkarra <saisatish.karra@konghq.com>
Copy link
Copy Markdown
Collaborator

@laurentsimon laurentsimon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you!

@ianlewis can you take a second look before we merge?

@saisatishkarra saisatishkarra force-pushed the feat/cosign-repository-env branch from 5fa60e6 to 529b570 Compare November 16, 2023 14:19
Signed-off-by: saisatishkarra <saisatish.karra@konghq.com>
@saisatishkarra
Copy link
Copy Markdown
Contributor Author

cc: @laurentsimon / @ianlewis for some eyes!! Looking to make similar changes on the verifier with some guidance on expected direction!

Copy link
Copy Markdown
Collaborator

@laurentsimon laurentsimon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@laurentsimon
Copy link
Copy Markdown
Collaborator

Take a look at the linter failures. Should be easy to fix

Signed-off-by: saisatishkarra <saisatish.karra@konghq.com>
@saisatishkarra saisatishkarra force-pushed the feat/cosign-repository-env branch from 3461064 to 77e4a28 Compare November 20, 2023 17:03
@saisatishkarra
Copy link
Copy Markdown
Contributor Author

Take a look at the linter failures. Should be easy to fix

Fixed linting issues and indentation. Waiting for the checks to run!!

@laurentsimon laurentsimon enabled auto-merge (squash) November 20, 2023 17:57
Signed-off-by: saisatishkarra <saisatish.karra@konghq.com>
auto-merge was automatically disabled November 20, 2023 22:46

Head branch was pushed to by a user without write access

@saisatishkarra saisatishkarra force-pushed the feat/cosign-repository-env branch from 048292d to 1f4b072 Compare November 20, 2023 22:46
Copy link
Copy Markdown
Member

@ianlewis ianlewis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
@curiositycasualty
Copy link
Copy Markdown

Thanks for your time spent on this @laurentsimon & @ianlewis

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants