This commit is contained in:
Ivan
2026-03-31 04:07:41 +03:00
parent 2aafb29c2f
commit d03bdf08ea
8 changed files with 1172 additions and 1158 deletions
+16 -5
View File
@@ -1,5 +1,6 @@
#!/usr/bin/env python3
"""Emit a SLSA v1 provenance predicate JSON on stdout (stdin unused)."""
from __future__ import annotations
import json
@@ -8,8 +9,12 @@ from datetime import datetime, timezone
def _source_uri() -> str:
server = (os.environ.get("GITHUB_SERVER_URL") or os.environ.get("GITEA_SERVER_URL") or "").rstrip("/")
repo = os.environ.get("GITHUB_REPOSITORY") or os.environ.get("GITEA_REPOSITORY") or ""
server = (
os.environ.get("GITHUB_SERVER_URL") or os.environ.get("GITEA_SERVER_URL") or ""
).rstrip("/")
repo = (
os.environ.get("GITHUB_REPOSITORY") or os.environ.get("GITEA_REPOSITORY") or ""
)
if not server or not repo:
return ""
if server.startswith("https://") or server.startswith("http://"):
@@ -21,8 +26,12 @@ def _build_type() -> str:
custom = os.environ.get("PROVENANCE_BUILD_TYPE")
if custom:
return custom
server = (os.environ.get("GITHUB_SERVER_URL") or os.environ.get("GITEA_SERVER_URL") or "").rstrip("/")
repo = os.environ.get("GITHUB_REPOSITORY") or os.environ.get("GITEA_REPOSITORY") or ""
server = (
os.environ.get("GITHUB_SERVER_URL") or os.environ.get("GITEA_SERVER_URL") or ""
).rstrip("/")
repo = (
os.environ.get("GITHUB_REPOSITORY") or os.environ.get("GITEA_REPOSITORY") or ""
)
if server and repo:
return f"{server}/{repo}/.gitea/workflows/build.yml"
return "https://slsa.dev/provenance/v1"
@@ -32,7 +41,9 @@ def _builder_id() -> str:
custom = os.environ.get("PROVENANCE_BUILDER_ID")
if custom:
return custom
server = (os.environ.get("GITHUB_SERVER_URL") or os.environ.get("GITEA_SERVER_URL") or "").rstrip("/")
server = (
os.environ.get("GITHUB_SERVER_URL") or os.environ.get("GITEA_SERVER_URL") or ""
).rstrip("/")
if server:
return f"{server}/actions"
return "https://gitea.io/actions/runner"