test: get base image from recipe for verify step

This commit is contained in:
K.B.Dharun Krishna 2024-07-11 14:32:08 +05:30 committed by GitHub
parent 73b22ce6bd
commit 4bed487efd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -17,11 +17,25 @@ env:
jobs:
verify_image:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Install dependencies
run: sudo apt-get install -y libfyaml-utils
- name: Read base image name from recipe
id: read_base_recipe
run: |
BASE_IMAGE="$(fy-filter -f recipe.yml /stages/-1/base)"
echo The base image is $BASE_IMAGE
if [ -z $BASE_IMAGE ]; then exit 1; fi
echo "base_image=$BASE_IMAGE" >> "$GITHUB_OUTPUT"
echo "BASE_IMAGE=$BASE_IMAGE" >> "$GITHUB_ENV"
- name: Verify Base Image Integrity
run:
gh attestation verify oci://ghcr.io/vanilla-os/desktop:main --owner Vanilla-OS
run: |
gh attestation verify oci://ghcr.io/${{ env.BASE_IMAGE }} --owner Vanilla-OS
env:
GH_TOKEN: ${{ github.token }}