From eda41670cefcea5f95c235688b5158db7fe1e6ab Mon Sep 17 00:00:00 2001 From: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> Date: Sun, 10 Aug 2025 21:07:47 +0800 Subject: [PATCH 1/6] Create go-ossf-slsa3-publish.yml --- .github/workflows/go-ossf-slsa3-publish.yml | 38 +++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .github/workflows/go-ossf-slsa3-publish.yml diff --git a/.github/workflows/go-ossf-slsa3-publish.yml b/.github/workflows/go-ossf-slsa3-publish.yml new file mode 100644 index 000000000..79ea193f7 --- /dev/null +++ b/.github/workflows/go-ossf-slsa3-publish.yml @@ -0,0 +1,38 @@ +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. + +# This workflow lets you compile your Go project using a SLSA3 compliant builder. +# This workflow will generate a so-called "provenance" file describing the steps +# that were performed to generate the final binary. +# The project is an initiative of the OpenSSF (openssf.org) and is developed at +# https://github.com/slsa-framework/slsa-github-generator. +# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier. +# For more information about SLSA and how it improves the supply-chain, visit slsa.dev. + +name: SLSA Go releaser +on: + workflow_dispatch: + release: + types: [created] + +permissions: read-all + +jobs: + # ======================================================================================================================================== + # Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project. + # See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file + #========================================================================================================================================= + build: + permissions: + id-token: write # To sign. + contents: write # To upload release assets. + actions: read # To read workflow path. + uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0 + with: + go-version: 1.17 + # ============================================================================================================= + # Optional: For more options, see https://github.com/slsa-framework/slsa-github-generator#golang-projects + # ============================================================================================================= + From a63baa3fc424322d874569692abafc714d8848c1 Mon Sep 17 00:00:00 2001 From: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> Date: Wed, 13 Aug 2025 11:00:07 +0800 Subject: [PATCH 2/6] Create FUNDING.yml Signed-off-by: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> --- .github/FUNDING.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/FUNDING.yml diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml new file mode 100644 index 000000000..f174f258f --- /dev/null +++ b/.github/FUNDING.yml @@ -0,0 +1,15 @@ +# These are supported funding model platforms + +github: ReuelAlbert-Dev +patreon: # Replace with a single Patreon username +open_collective: # Replace with a single Open Collective username +ko_fi: # Replace with a single Ko-fi username +tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel +community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry +liberapay: # Replace with a single Liberapay username +issuehunt: # Replace with a single IssueHunt username +lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry +polar: # Replace with a single Polar username +buy_me_a_coffee: # Replace with a single Buy Me a Coffee username +thanks_dev: # Replace with a single thanks.dev username +custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] From f1bddb56d22ad071abc3682888597b7adbb33c80 Mon Sep 17 00:00:00 2001 From: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> Date: Wed, 13 Aug 2025 11:09:16 +0800 Subject: [PATCH 3/6] Update FUNDING.yml Signed-off-by: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> --- .github/FUNDING.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml index f174f258f..44d5e0038 100644 --- a/.github/FUNDING.yml +++ b/.github/FUNDING.yml @@ -1,6 +1,5 @@ # These are supported funding model platforms -github: ReuelAlbert-Dev patreon: # Replace with a single Patreon username open_collective: # Replace with a single Open Collective username ko_fi: # Replace with a single Ko-fi username From 071c36d76f2638028ed14a8b9320a5a59a5cabff Mon Sep 17 00:00:00 2001 From: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> Date: Fri, 22 Aug 2025 11:29:45 +0800 Subject: [PATCH 4/6] Update FUNDING.yml Signed-off-by: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> --- .github/FUNDING.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml index 44d5e0038..a7405bdda 100644 --- a/.github/FUNDING.yml +++ b/.github/FUNDING.yml @@ -1,6 +1,6 @@ # These are supported funding model platforms -patreon: # Replace with a single Patreon username +patreon: [ReuelAlbert-Dev] open_collective: # Replace with a single Open Collective username ko_fi: # Replace with a single Ko-fi username tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel From 73bc75c40a2bc3059a2fb26444b047e1bbea6d05 Mon Sep 17 00:00:00 2001 From: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> Date: Fri, 22 Aug 2025 11:40:29 +0800 Subject: [PATCH 5/6] Update FUNDING.yml Signed-off-by: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> --- .github/FUNDING.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml index a7405bdda..919e39b38 100644 --- a/.github/FUNDING.yml +++ b/.github/FUNDING.yml @@ -1,6 +1,6 @@ # These are supported funding model platforms -patreon: [ReuelAlbert-Dev] +patreon: ['ReuelAlbert-Dev'] open_collective: # Replace with a single Open Collective username ko_fi: # Replace with a single Ko-fi username tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel @@ -12,3 +12,4 @@ polar: # Replace with a single Polar username buy_me_a_coffee: # Replace with a single Buy Me a Coffee username thanks_dev: # Replace with a single thanks.dev username custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] +Github: ['ReuelAlbert-dev'] From 5bd2f6297293132ca129702e0107d1f867856920 Mon Sep 17 00:00:00 2001 From: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> Date: Fri, 22 Aug 2025 11:43:26 +0800 Subject: [PATCH 6/6] Delete .github/FUNDING.yml Signed-off-by: Reuel Albert <66895085+ReuelAlbert-Dev@users.noreply.github.com> --- .github/FUNDING.yml | 15 --------------- 1 file changed, 15 deletions(-) delete mode 100644 .github/FUNDING.yml diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml deleted file mode 100644 index 919e39b38..000000000 --- a/.github/FUNDING.yml +++ /dev/null @@ -1,15 +0,0 @@ -# These are supported funding model platforms - -patreon: ['ReuelAlbert-Dev'] -open_collective: # Replace with a single Open Collective username -ko_fi: # Replace with a single Ko-fi username -tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel -community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry -liberapay: # Replace with a single Liberapay username -issuehunt: # Replace with a single IssueHunt username -lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry -polar: # Replace with a single Polar username -buy_me_a_coffee: # Replace with a single Buy Me a Coffee username -thanks_dev: # Replace with a single thanks.dev username -custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] -Github: ['ReuelAlbert-dev']