test: get base image from recipe for verify step
This commit is contained in:
parent
73b22ce6bd
commit
4bed487efd
1 changed files with 17 additions and 3 deletions
20
.github/workflows/vib-build.yml
vendored
20
.github/workflows/vib-build.yml
vendored
|
|
@ -17,11 +17,25 @@ env:
|
||||||
jobs:
|
jobs:
|
||||||
verify_image:
|
verify_image:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
|
- name: Checkout code
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Install dependencies
|
||||||
|
run: sudo apt-get install -y libfyaml-utils
|
||||||
|
|
||||||
|
- name: Read base image name from recipe
|
||||||
|
id: read_base_recipe
|
||||||
|
run: |
|
||||||
|
BASE_IMAGE="$(fy-filter -f recipe.yml /stages/-1/base)"
|
||||||
|
echo The base image is $BASE_IMAGE
|
||||||
|
if [ -z $BASE_IMAGE ]; then exit 1; fi
|
||||||
|
echo "base_image=$BASE_IMAGE" >> "$GITHUB_OUTPUT"
|
||||||
|
echo "BASE_IMAGE=$BASE_IMAGE" >> "$GITHUB_ENV"
|
||||||
|
|
||||||
- name: Verify Base Image Integrity
|
- name: Verify Base Image Integrity
|
||||||
run:
|
run: |
|
||||||
gh attestation verify oci://ghcr.io/vanilla-os/desktop:main --owner Vanilla-OS
|
gh attestation verify oci://ghcr.io/${{ env.BASE_IMAGE }} --owner Vanilla-OS
|
||||||
env:
|
env:
|
||||||
GH_TOKEN: ${{ github.token }}
|
GH_TOKEN: ${{ github.token }}
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue