Merge pull request #23 from runwaylab/artifact-attestation

Artifact attestation

.github/workflows/docker.yml

@@ -75,9 +75,15 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/amd64,linux/arm64
 
-      # - name: generate artifact attestation
-      #   uses: actions/[email protected]
-      #   with:
-      #     subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
-      #     subject-digest: ${{ steps.push.outputs.digest }}
-      #     push-to-registry: ${{ github.event_name != 'pull_request' }}
+      - name: digest
+        env:
+          DIGEST: ${{ steps.push.outputs.digest }}
+        run: |
+          echo "digest: $DIGEST"
+
+      - name: generate artifact attestation
+        uses: actions/[email protected]
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: ${{ github.event_name != 'pull_request' }}

.github/workflows/release.yml

@@ -7,6 +7,8 @@ on:
 
 permissions:
   contents: write
+  id-token: write
+  attestations: write
 
 jobs:
   release:
@@ -42,6 +44,16 @@ jobs:
           script/build
           mv ./bin/runway ./releases/runway-linux-x86_64
 
+      - name: generate artifact attestation
+        uses: actions/[email protected]
+        with:
+          subject-path: 'releases/runway-*'
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: runway-binaries
+          path: releases/
+
       - uses: actions/[email protected]
         id: app-token
         with:

src/version.cr

@@ -1,3 +1,3 @@
 module Runway
-  VERSION = "v0.0.4"
+  VERSION = "v0.0.5"
 end