From 8693927b5e76f194fcfa7c2cd0a700b4d15ff5a6 Mon Sep 17 00:00:00 2001 From: Mikhail Swift Date: Tue, 23 Jul 2024 11:20:01 -0400 Subject: [PATCH] chore(ci): update witness-run-action, change witness install dir This updates the witness-run-action, and installs witness to a directory outside of the current source directory. This keeps our source git tree clean. Signed-off-by: Mikhail Swift --- .github/workflows/pipeline.yml | 3 ++- .github/workflows/witness.yml | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index e1968316..a5f3dfee 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -96,11 +96,12 @@ jobs: run: go install github.com/goreleaser/goreleaser@v1.23.0 - name: Run GoReleaser - uses: testifysec/witness-run-action@85ddab8b46a86b2905a3b547a1806ab264fbb810 + uses: testifysec/witness-run-action@cceed291062b350dc658d7d189933ac47d4f4dec env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }} with: + witness-install-dir: /opt/witness step: "build" attestations: "github" command: goreleaser release --clean diff --git a/.github/workflows/witness.yml b/.github/workflows/witness.yml index 25d88e8d..d2060dec 100644 --- a/.github/workflows/witness.yml +++ b/.github/workflows/witness.yml @@ -49,8 +49,9 @@ jobs: go-version: 1.21.x - if: ${{ inputs.pull_request == false }} - uses: testifysec/witness-run-action@85ddab8b46a86b2905a3b547a1806ab264fbb810 + uses: testifysec/witness-run-action@cceed291062b350dc658d7d189933ac47d4f4dec with: + witness-install-dir: /opt/witness step: ${{ inputs.step }} attestations: ${{ inputs.attestations }} command: /bin/sh -c "${{ inputs.command }}"