-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow multiple artifacts to exist #102
Conversation
I'm planning to publish the token in GitHub Pages soon. The only realistic way to do that is to use actions/upload-pages-artifact and then actions/deploy-pages -- the currently uploaded artifact is not usable for this. This commit makes the script not fail if there are multiple artifacts, but still uses the same artifact as before. This makes it possible to start publishing a new 'github-pages' artifact without immediately breaking this script. Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
I have not actually run the tests locally yet, still figuring this out |
I have failed to create a fine-grained token that would work for
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. I ran the self-tests in CI and they look fine.
(One nitpick, but if you don't like it then we can ignore.)
ah looks like I missed a signed-off-by |
If you're feeling lazy, I can override it in a moment 🙂 (since it all gets squashed down anyways) |
Summary
This relates to sigstore-conformance/extremely-dangerous-public-oidc-beacon#5
I'm planning to publish the (extremely-dangerous-public-oidc) token in GitHub Pages to make it easier to use. The only realistic way to do that is to use actions/upload-pages-artifact and then actions/deploy-pages -- the currently uploaded artifact is not usable for this.
This commit makes the script not fail if there are multiple OIDC token artifacts, but still uses the same artifact as before. This makes it possible to start publishing a new 'github-pages' artifact without immediately breaking this script.
Release Note
NONE
Documentation
NONE