test: get base image from recipe for verify step
This commit is contained in:
parent
73b22ce6bd
commit
4bed487efd
1 changed files with 17 additions and 3 deletions
20
.github/workflows/vib-build.yml
vendored
20
.github/workflows/vib-build.yml
vendored
|
|
@ -17,11 +17,25 @@ env:
|
|||
jobs:
|
||||
verify_image:
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Install dependencies
|
||||
run: sudo apt-get install -y libfyaml-utils
|
||||
|
||||
- name: Read base image name from recipe
|
||||
id: read_base_recipe
|
||||
run: |
|
||||
BASE_IMAGE="$(fy-filter -f recipe.yml /stages/-1/base)"
|
||||
echo The base image is $BASE_IMAGE
|
||||
if [ -z $BASE_IMAGE ]; then exit 1; fi
|
||||
echo "base_image=$BASE_IMAGE" >> "$GITHUB_OUTPUT"
|
||||
echo "BASE_IMAGE=$BASE_IMAGE" >> "$GITHUB_ENV"
|
||||
|
||||
- name: Verify Base Image Integrity
|
||||
run:
|
||||
gh attestation verify oci://ghcr.io/vanilla-os/desktop:main --owner Vanilla-OS
|
||||
run: |
|
||||
gh attestation verify oci://ghcr.io/${{ env.BASE_IMAGE }} --owner Vanilla-OS
|
||||
env:
|
||||
GH_TOKEN: ${{ github.token }}
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue