feat: push provenance after build on master

elide-dev · Jul 31, 2023 · 5e7352d · 5e7352d
1 parent de889c8
commit 5e7352d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
@@ -75,6 +75,7 @@ jobs:
       experimental: ${{ matrix.experimental }}
       java: ${{ matrix.java }}
       coverage: true
+      push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/master' }}
       provenance: ${{ fromJson(matrix.provenance) }}
 
   codeql:

diff --git a/.github/workflows/step.build.yml b/.github/workflows/step.build.yml
@@ -28,6 +28,10 @@ on:
         required: false
         type: boolean
         default: true
+      push:
+        required: false
+        type: boolean
+        default: false
       experimental:
         required: false
         type: boolean
@@ -143,4 +147,4 @@ jobs:
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.7.0
     with:
       base64-subjects: "${{ needs.build.outputs.hashes }}"
-      upload-assets: false
+      upload-assets: inputs.push