Sign + Attest Tarballs (autopg) #29
sign-attest.yml
on: workflow_dispatch
Matrix: sign
Aggregate manifest + verify all
27s
Annotations
4 warnings and 6 notices
|
Sign linux-x64-glibc
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/attest-build-provenance/predicate@36fa7d009e22618ca7cd599486979b8150596c74, actions/attest@67422f5511b7ff725f4dbd6fb9bd2cd925c65a8d, actions/checkout@v4, actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Sign linux-arm64
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/attest-build-provenance/predicate@36fa7d009e22618ca7cd599486979b8150596c74, actions/attest@67422f5511b7ff725f4dbd6fb9bd2cd925c65a8d, actions/checkout@v4, actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Sign darwin-arm64
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/attest-build-provenance/predicate@36fa7d009e22618ca7cd599486979b8150596c74, actions/attest@67422f5511b7ff725f4dbd6fb9bd2cd925c65a8d, actions/checkout@v4, actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Aggregate manifest + verify all
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Sign linux-x64-glibc
provenance: dist/autopg-3.0.7-linux-x64-glibc.tar.gz.intoto.jsonl
|
|
Sign linux-x64-glibc
signed dist/autopg-3.0.7-linux-x64-glibc.tar.gz (keyless) -> dist/autopg-3.0.7-linux-x64-glibc.tar.gz.sig + dist/autopg-3.0.7-linux-x64-glibc.tar.gz.cert
|
|
Sign linux-arm64
provenance: dist/autopg-3.0.7-linux-arm64.tar.gz.intoto.jsonl
|
|
Sign linux-arm64
signed dist/autopg-3.0.7-linux-arm64.tar.gz (keyless) -> dist/autopg-3.0.7-linux-arm64.tar.gz.sig + dist/autopg-3.0.7-linux-arm64.tar.gz.cert
|
|
Sign darwin-arm64
provenance: dist/autopg-3.0.7-darwin-arm64.tar.gz.intoto.jsonl
|
|
Sign darwin-arm64
signed dist/autopg-3.0.7-darwin-arm64.tar.gz (keyless) -> dist/autopg-3.0.7-darwin-arm64.tar.gz.sig + dist/autopg-3.0.7-darwin-arm64.tar.gz.cert
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
autopg-signed-3.0.7-darwin-arm64
Expired
|
71.3 MB |
sha256:97f4b2499e58f7fc4dfda6b225ceeeae64dd1c7388b23f43f20cf32e09a3fba3
|
|
|
autopg-signed-3.0.7-linux-arm64
Expired
|
56.9 MB |
sha256:93579703d3a971e1e4060c4df1da2091a656175fc329545ea75561bf8f31c3ca
|
|
|
autopg-signed-3.0.7-linux-x64-glibc
Expired
|
57.8 MB |
sha256:0d30ca1ec47ca8618e243c2dd63e51ca227a15890e9e7759fd6cd92a4377410c
|
|
|
autopg-signed-bundle-3.0.7
Expired
|
186 MB |
sha256:587fbf52ea7a6a7373fcb9e309b2c73bd95635f03fa113ff0aa74dfbd37781c3
|
|