Skip to content

Commit dc50cf0

Browse files
Version Packages (#1574)
* Version Packages (deletions) * Version Packages (workflows/reusable-docker-build-publish) --------- Co-authored-by: app-token-issuer-releng-renovate[bot] <142360764+app-token-issuer-releng-renovate[bot]@users.noreply.github.com>
1 parent 7e79bd3 commit dc50cf0

3 files changed

Lines changed: 20 additions & 16 deletions

File tree

‎.changeset/docker-manifest-attestation.md‎

Lines changed: 0 additions & 15 deletions
This file was deleted.

‎workflows/reusable-docker-build-publish/CHANGELOG.md‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,24 @@
11
# reusable-docker-build-publish
22

3+
## 1.5.0
4+
5+
### Minor Changes
6+
7+
- [#1573](https://github.com/smartcontractkit/.github/pull/1573)
8+
[`7e79bd3`](https://github.com/smartcontractkit/.github/commit/7e79bd3b4dcfa35ce16a944bc2cfa8a0700d3b30)
9+
Thanks [@chainchad](https://github.com/chainchad)! - feat: optional GitHub
10+
build-provenance attestation for the manifest index
11+
12+
Adds `docker-manifest-attestation` (default `"disabled"`) to generate a GitHub
13+
build-provenance attestation for the multi-arch manifest index. Set to
14+
`"github-only"` to record it in the GitHub attestations API, or
15+
`"github-and-registry"` to additionally attach it to the index in the registry
16+
as an OCI referrer (which also records it on the org linked artifacts page).
17+
This is independent of `docker-manifest-sign` (cosign). Any non-`"disabled"`
18+
value requires the calling job to grant `attestations: write` and
19+
`id-token: write`; `"github-and-registry"` additionally requires
20+
`artifact-metadata: write`.
21+
322
## 1.4.0
423

524
### Minor Changes

‎workflows/reusable-docker-build-publish/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "reusable-docker-build-publish",
3-
"version": "1.4.0",
3+
"version": "1.5.0",
44
"description": "",
55
"private": true,
66
"scripts": {},

0 commit comments

Comments
 (0)