From 4e12f9f2ff5309fdba7ebeac90b70744bda582e6 Mon Sep 17 00:00:00 2001 From: Pun Butrach Date: Thu, 1 May 2025 23:55:57 +0700 Subject: [PATCH 1/3] ci: Attestation CI --- .github/workflows/release.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ce715b38..cbd2fc3c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,6 +12,8 @@ jobs: name: Release permissions: contents: write + id-token: write + attestations: write runs-on: ubuntu-latest steps: - name: Checkout @@ -47,6 +49,14 @@ jobs: fingerprint: ${{ vars.GPG_FINGERPRINT }} - name: Release + uses: cycjimmy/semantic-release-action@v4 + id: release env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - run: npm exec semantic-release + + - name: Attest + if: steps.release.outputs.new_release_published == 'true' + uses: actions/attest-build-provenance@v2 + with: + subject-name: 'ReVanced CLI $steps.release.outputs.new_release_git_tag' + subject-path: build/libs/*-all.jar From e23862dfb7491e7e500c61a83485492a40482937 Mon Sep 17 00:00:00 2001 From: Pun Butrach Date: Fri, 2 May 2025 00:56:57 +0700 Subject: [PATCH 2/3] ci: Copybara! --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index cbd2fc3c..a686d2ab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -58,5 +58,5 @@ jobs: if: steps.release.outputs.new_release_published == 'true' uses: actions/attest-build-provenance@v2 with: - subject-name: 'ReVanced CLI $steps.release.outputs.new_release_git_tag' + subject-name: 'ReVanced CLI ${{ steps.release.outputs.new_release_git_tag }}' subject-path: build/libs/*-all.jar From f03974f023e2b14d2f3138a8c6553f79e11d7812 Mon Sep 17 00:00:00 2001 From: oSumAtrIX Date: Thu, 22 May 2025 14:54:13 +0200 Subject: [PATCH 3/3] Apply suggestions from code review --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a686d2ab..e7799bf5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -59,4 +59,4 @@ jobs: uses: actions/attest-build-provenance@v2 with: subject-name: 'ReVanced CLI ${{ steps.release.outputs.new_release_git_tag }}' - subject-path: build/libs/*-all.jar + subject-path: build/libs/revanced-cli*.jar