Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow multiple artifacts to exist #102

Merged
merged 2 commits into from
Oct 6, 2023

Conversation

jku
Copy link
Member

@jku jku commented Oct 5, 2023

Summary

This relates to sigstore-conformance/extremely-dangerous-public-oidc-beacon#5

I'm planning to publish the (extremely-dangerous-public-oidc) token in GitHub Pages to make it easier to use. The only realistic way to do that is to use actions/upload-pages-artifact and then actions/deploy-pages -- the currently uploaded artifact is not usable for this.

This commit makes the script not fail if there are multiple OIDC token artifacts, but still uses the same artifact as before. This makes it possible to start publishing a new 'github-pages' artifact without immediately breaking this script.

Release Note

NONE

Documentation

NONE

I'm planning to publish the token in GitHub Pages soon. The only
realistic way to do that is to use actions/upload-pages-artifact
and then actions/deploy-pages -- the currently uploaded artifact
is not usable for this.

This commit makes the script not fail if there are multiple
artifacts, but still uses the same artifact as before. This makes it
possible to start publishing a new 'github-pages' artifact without
immediately breaking this script.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
@jku
Copy link
Member Author

jku commented Oct 5, 2023

I have not actually run the tests locally yet, still figuring this out

@jku
Copy link
Member Author

jku commented Oct 5, 2023

I have failed to create a fine-grained token that would work for --github-token so I'd like to either:

  • see the test results from the self test run in CI
  • or get some advice on how to create a limited token for this

test/conftest.py Outdated Show resolved Hide resolved
woodruffw
woodruffw previously approved these changes Oct 5, 2023
Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. I ran the self-tests in CI and they look fine.

(One nitpick, but if you don't like it then we can ignore.)

@jku
Copy link
Member Author

jku commented Oct 6, 2023

ah looks like I missed a signed-off-by

@woodruffw
Copy link
Member

ah looks like I missed a signed-off-by

If you're feeling lazy, I can override it in a moment 🙂 (since it all gets squashed down anyways)

@woodruffw woodruffw merged commit 614f4c9 into sigstore:main Oct 6, 2023
3 checks passed
@jku jku mentioned this pull request Oct 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants