From 150e0c09df07c9cd0cf5ba4aa0b2da8decd204f2 Mon Sep 17 00:00:00 2001 From: Lauren Tan Date: Fri, 21 Mar 2025 16:53:17 -0400 Subject: [PATCH] [ci] Add artifact attestation to build Adds a signed build provenance attestations via https://github.com/actions/attest-build-provenance --- .github/workflows/runtime_build_and_test.yml | 9 ++++++ subject.checksums.txt | 34 ++++++++++++++++++++ 2 files changed, 43 insertions(+) create mode 100644 subject.checksums.txt diff --git a/.github/workflows/runtime_build_and_test.yml b/.github/workflows/runtime_build_and_test.yml index 343c32724e..3c327004df 100644 --- a/.github/workflows/runtime_build_and_test.yml +++ b/.github/workflows/runtime_build_and_test.yml @@ -284,6 +284,11 @@ jobs: build_and_lint: name: yarn build and lint needs: [runtime_compiler_node_modules_cache] + permissions: + # Attestation for build: https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds#generating-build-provenance-for-binaries + id-token: write + contents: read + attestations: write runs-on: ubuntu-latest strategy: fail-fast: false @@ -331,7 +336,11 @@ jobs: run: yarn lint-build - name: Display structure of build run: ls -R build + - uses: actions/attest-build-provenance@v2 + with: + subject-path: 'build/**/*' - name: Archive build + id: upload_build uses: actions/upload-artifact@v4 with: name: _build_${{ matrix.worker_id }}_${{ matrix.release_channel }} diff --git a/subject.checksums.txt b/subject.checksums.txt new file mode 100644 index 0000000000..acac5733d7 --- /dev/null +++ b/subject.checksums.txt @@ -0,0 +1,34 @@ +b63170872efc61a0cc0b78242fa91092ffd1a8e0cccdd22f3ac283338517217f build/bundle-sizes.json +1a1cc756ed5e5c9e8cdcfcd5f9436e69f74b045cc31adcc9588d1f23f6224a87 build/facebook-www/VERSION_CLASSIC +8f774d6f0d8fbcff5b785662f353bbd372cc0e20e1fe6b63a608b7d24ae7c0e9 build/facebook-www/VERSION_MODERN +8f9c683a75afaf4b7d1bdd3fba2ef2429baa00b6d7b96c453af2f2789b50c3fe build/facebook-www/shims/ReactBrowserEventEmitter_DO_NOT_USE.js +da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93 build/oss-experimental/eslint-plugin-react-hooks/LICENSE +c3b15d97638b5c53a25db828f586aa807edf3b21597246cee365a218fa01cbe6 build/oss-experimental/eslint-plugin-react-hooks/README.md +16a568170c03e9e8d926a62b8e2a73ee5b8e39f21dfbd7f99e52d918cf20f6fe build/oss-experimental/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.d.ts +755b2e8667d2e3d816f716382bfc268b1d1507e2f78001c3f72cfa6e1bc4f274 build/oss-experimental/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.development.js +9698ce0da30f00f15b4b81d5affbd22bf293a11f3618903d644d6f3cc32f676d build/oss-experimental/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.production.js +e9fdead46d7e9b485e9a2233605cd778f7dd5258ce1e810feddccc794f1f1437 build/oss-experimental/eslint-plugin-react-hooks/index.d.ts +f8bf8df5ea1838b9a9e51b57a4a1e3448119beafac43f202d83e8d8b15c1dc98 build/oss-experimental/eslint-plugin-react-hooks/index.js +4e703677f852b82649dcc75f592d6a1748e36450643ebb78adae2a4a0fa6c1b8 build/oss-experimental/eslint-plugin-react-hooks/package.json +da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93 build/oss-stable-semver/eslint-plugin-react-hooks/LICENSE +c3b15d97638b5c53a25db828f586aa807edf3b21597246cee365a218fa01cbe6 build/oss-stable-semver/eslint-plugin-react-hooks/README.md +16a568170c03e9e8d926a62b8e2a73ee5b8e39f21dfbd7f99e52d918cf20f6fe build/oss-stable-semver/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.d.ts +6e17c673dcbb4afbd0e8e3859b283fbc9e5aab5526b34f0fd1d17316a7379b1e build/oss-stable-semver/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.development.js +2a411d5ccfde120c649de77e5c465002995e9616693ac514a03b7657e2b925c7 build/oss-stable-semver/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.production.js +e9fdead46d7e9b485e9a2233605cd778f7dd5258ce1e810feddccc794f1f1437 build/oss-stable-semver/eslint-plugin-react-hooks/index.d.ts +f8bf8df5ea1838b9a9e51b57a4a1e3448119beafac43f202d83e8d8b15c1dc98 build/oss-stable-semver/eslint-plugin-react-hooks/index.js +8caeaec36d8f096f7253573e120d00ce9021d09df5a5fb56bbbbae9be5653619 build/oss-stable-semver/eslint-plugin-react-hooks/package.json +da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93 build/oss-stable/eslint-plugin-react-hooks/LICENSE +c3b15d97638b5c53a25db828f586aa807edf3b21597246cee365a218fa01cbe6 build/oss-stable/eslint-plugin-react-hooks/README.md +16a568170c03e9e8d926a62b8e2a73ee5b8e39f21dfbd7f99e52d918cf20f6fe build/oss-stable/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.d.ts +6e17c673dcbb4afbd0e8e3859b283fbc9e5aab5526b34f0fd1d17316a7379b1e build/oss-stable/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.development.js +2a411d5ccfde120c649de77e5c465002995e9616693ac514a03b7657e2b925c7 build/oss-stable/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.production.js +e9fdead46d7e9b485e9a2233605cd778f7dd5258ce1e810feddccc794f1f1437 build/oss-stable/eslint-plugin-react-hooks/index.d.ts +f8bf8df5ea1838b9a9e51b57a4a1e3448119beafac43f202d83e8d8b15c1dc98 build/oss-stable/eslint-plugin-react-hooks/index.js +40cd6eab8421bd85593a1355523648f35e4301277950cba1c86bbe88448e9705 build/oss-stable/eslint-plugin-react-hooks/package.json +a12ce577cf1baaf2bef3511b74515547e7794c87161e43e61f7e04667be53abf build/react-native/shims/ReactFabric.js +4b4d133340c64a26f4a86e29fb294512965f389c685bff2afd59d40865999a8a build/react-native/shims/ReactFeatureFlags.js +a1926c4e851811345bbe232285643de81c4aa8ee151b295d3f803da4d4ad0796 build/react-native/shims/ReactNative.js +91f9c548dcae495bf2b35276da8967acfe9f531fb7add429a4916ac3d440414f build/react-native/shims/ReactNativeTypes.js +68149b02f4c9a5d220c04028b7b814ecdadac11ad2ff61626f18a907a486b26d build/react-native/shims/ReactNativeViewConfigRegistry.js +fc3673db3feb66048686f812ad8331f0f2f7af5732a20ace9bc1ebc6f5b3048a build/react-native/shims/createReactNativeComponentClass.js