Skip to content

Commit 57f93d2

Browse files
authored
Use reusuable release workflow in sigstore/sigstore (#471)
Signed-off-by: Kenny Leung <[email protected]>
1 parent f37c6b1 commit 57f93d2

File tree

1 file changed

+8
-29
lines changed

1 file changed

+8
-29
lines changed

.github/workflows/cut-release.yml

Lines changed: 8 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -21,35 +21,14 @@ concurrency: cut-release
2121
jobs:
2222
cut-release:
2323
name: Cut release
24-
runs-on: ubuntu-latest
24+
uses: sigstore/sigstore/.github/workflows/reusable-release.yml@main
2525
permissions:
2626
id-token: write
2727
contents: read
28-
env:
29-
GIT_TAG: ${{ github.event.inputs.release_tag }}
30-
PROJECT_ID: 'projectsigstore'
31-
steps:
32-
- name: Check actor access
33-
if: ${{ !contains(fromJson('["bobcallaway","cpanato","dlorenc","lukehinds"]'), github.actor) }}
34-
run: exit 1
35-
36-
- name: Checkout out repo
37-
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # v3
38-
with:
39-
path: ./src/github.com/sigstore/fulcio
40-
41-
- name: Authenticate to Google Cloud
42-
uses: google-github-actions/auth@8d125895b958610ec414ca4dae010257eaa814d3 # v0.6.0
43-
with:
44-
workload_identity_provider: 'projects/498091336538/locations/global/workloadIdentityPools/githubactions/providers/sigstore-fulcio'
45-
service_account: '[email protected]'
46-
47-
- name: Setup gcloud
48-
uses: google-github-actions/setup-gcloud@877d4953d2c70a0ba7ef3290ae968eb24af233bb # v0.6.0
49-
with:
50-
project_id: ${{ env.PROJECT_ID }}
51-
export_default_credentials: true
52-
53-
- name: Start cloudbuild job
54-
working-directory: ./src/github.com/sigstore/fulcio
55-
run: gcloud builds submit --no-source --config release/cloudbuild.yaml --substitutions _GIT_TAG=${{ env.GIT_TAG }},_TOOL_ORG=sigstore,_TOOL_REPO=fulcio,_STORAGE_LOCATION=fulcio-releases,_KEY_RING=${{ github.event.inputs.key_ring }},_KEY_NAME=${{ github.event.inputs.key_name }},_GITHUB_USER=sigstore-bot --project=${{ env.PROJECT_ID }}
28+
with:
29+
release_tag: ${{ github.event.inputs.release_tag }}
30+
key_ring: ${{ github.event.inputs.key_ring }}
31+
key_name: ${{ github.event.inputs.key_name }}
32+
workload_identity_provider: 'projects/498091336538/locations/global/workloadIdentityPools/githubactions/providers/sigstore-fulcio'
33+
service_account: '[email protected]'
34+
repo: 'fulcio'

0 commit comments

Comments
 (0)