README: add SNAPSHOT URL #136
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Verifrax Finality | |
| on: | |
| push: | |
| branches: [main, finality-v1] | |
| pull_request: | |
| branches: [main] | |
| release: | |
| types: [created] | |
| env: | |
| LC_ALL: C | |
| TZ: UTC | |
| jobs: | |
| seed-claim: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha || github.sha }} | |
| - name: Setup Node.js | |
| uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6 | |
| with: | |
| node-version: '20' | |
| - name: Install pnpm | |
| uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4 | |
| with: | |
| version: 9 | |
| - name: Install dependencies | |
| run: pnpm install | |
| - name: Create claim at build time | |
| env: | |
| VERIFRAX_ORG: ${{ github.repository_owner }} | |
| VERIFRAX_KEY_ID: ${{ github.sha }} | |
| VERIFRAX_PROFILE_ID: public@1.0.0 | |
| working-directory: ${{ github.workspace }} | |
| run: | | |
| node scripts/seed.claim.mjs build-provenance ${{ github.sha }} run \ | |
| --assertions '[{"assertion_id":"build-commit","predicate":"has_git_commit","object":"${{ github.sha }}"}]' | |
| - name: Upload claim artifact | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| with: | |
| name: claim | |
| path: out/claims/*.json | |
| build-evidence-bundle: | |
| runs-on: ubuntu-latest | |
| needs: seed-claim | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha || github.sha }} | |
| - name: Setup Node.js | |
| uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6 | |
| with: | |
| node-version: '20' | |
| - name: Install pnpm | |
| uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4 | |
| with: | |
| version: 9 | |
| - name: Install dependencies | |
| run: pnpm install | |
| - name: Download claim artifact | |
| uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 | |
| with: | |
| name: claim | |
| - name: Build evidence bundle at release time | |
| run: | | |
| # Build bundle with claims, evidence, attestations | |
| # This would call bundle.build.mjs with appropriate parameters | |
| echo "Building evidence bundle..." | |
| - name: Upload bundle artifact | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| with: | |
| name: bundle | |
| path: out/bundles/*.zip | |
| publish-index: | |
| runs-on: ubuntu-latest | |
| needs: build-evidence-bundle | |
| if: github.event_name == 'release' | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha || github.sha }} | |
| - name: Setup Node.js | |
| uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6 | |
| with: | |
| node-version: '20' | |
| - name: Install pnpm | |
| uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4 | |
| with: | |
| version: 9 | |
| - name: Install dependencies | |
| run: pnpm install | |
| - name: Download bundle artifact | |
| uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 | |
| with: | |
| name: bundle | |
| - name: Publish to truth index at deploy time | |
| run: | | |
| # Extract bundle and publish to index | |
| node scripts/publish.index.mjs out/bundles | |
| - name: Deploy to GitHub Pages | |
| uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3 | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| publish_dir: ./index | |