chore: add ldflags to builds

shaneboulden · Jan 17, 2024 · e6475c4 · e6475c4
1 parent 584d685
commit e6475c4
Showing 1 changed file with 19 additions and 7 deletions.
diff --git a/.github/workflows/go-ossf-slsa3-publish.yml b/.github/workflows/go-ossf-slsa3-publish.yml
@@ -23,10 +23,24 @@ on:
 permissions: read-all
 
 jobs:
- # ========================================================================================================================================
- # Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project.
- # See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file
- #=========================================================================================================================================
+ args:
+ runs-on: ubuntu-latest
+ outputs:
+ commit-date: ${{ steps.ldflags.outputs.commit-date }}
+ commit: ${{ steps.ldflags.outputs.commit }}
+ version: ${{ steps.ldflags.outputs.version }}
+ tree-state: ${{ steps.ldflags.outputs.tree-state }}
+ steps:
+ - id: checkout
+ uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # tag=v2.3.4
+ with:
+ fetch-depth: 0
+ - id: ldflags
+ run: |
+ echo "commit-date=$(git log --date=iso8601-strict -1 --pretty=%ct)" >> "$GITHUB_OUTPUT"
+ echo "commit=$GITHUB_SHA" >> "$GITHUB_OUTPUT"
+ echo "version=$(git describe --tags --always --dirty | cut -c2-)" >> "$GITHUB_OUTPUT"
+ echo "tree-state=$(if git diff --quiet; then echo "clean"; else echo "dirty"; fi)" >> "$GITHUB_OUTPUT"
  build:
  permissions:
  id-token: write # To sign.
@@ -35,7 +49,5 @@ jobs:
  uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0
  with:
  go-version: 1.21
- # =============================================================================================================
- # Optional: For more options, see https://github.com/slsa-framework/slsa-github-generator#golang-projects
- # =============================================================================================================
+ evaluated-envs: "COMMIT_DATE:${{needs.args.outputs.commit-date}}, COMMIT:${{needs.args.outputs.commit}}, VERSION:${{needs.args.outputs.version}}, TREE_STATE:${{needs.args.outputs.tree-state}}"