test another predicate digest mode

AEnguerrand · Dec 4, 2024 · dd87e11 · dd87e11
1 parent 9cf077a
commit dd87e11
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/.github/workflows/slsa-generator-nodejs-custom.yaml b/.github/workflows/slsa-generator-nodejs-custom.yaml
@@ -43,7 +43,7 @@ jobs:
           BUILDER_ID: ${{ github.workflow_ref }} # Buid is made on the same job
           CONFIG_SOURCE_URI: git+${{ github.event.repository.html_url }}@${{ github.ref }}
           CONFIG_SOURCE_DIGEST: ${{ github.sha }}
-          ENTRY_POINT: ${{ github.workflow }}
+          ENTRY_POINT: ${{ github.event.repository.html_url }}
           GITHUB_ACTOR_ID: ${{ github.actor_id }}
           GITHUB_TRIGGERING_ACTOR_ID: ${{ github.triggering_actor }}
           GITHUB_REPOSITORY_ID: ${{ github.repository_id }}

diff --git a/.github/workflows/slsa-github-generator-nodejs-predicate.sh b/.github/workflows/slsa-github-generator-nodejs-predicate.sh
@@ -35,7 +35,15 @@ cat <<EOF > predicate.json
     },
     "metadata": {
         "buildInvocationId": "$BUILD_INVOCATION_ID"
-    }
+    },
+    "materials": [
+      {
+            "uri": "$CONFIG_SOURCE_URI",
+            "digest": {
+                "sha1": "$CONFIG_SOURCE_DIGEST"
+            }
+        }
+    ]
 }
 EOF