search

sigstore / protobuf-specs

Protocol Buffer specifications
Apache License 2.0
23 stars 29 forks source link

Update java release to do sigstore sign on github #322

Closed loosebazooka closed 6 months ago

loosebazooka commented 6 months ago

This still needs a user to run the release script to sign with pgp locally and push the bundle to maven central.

SLSA generation has been removed temporarily. I'll figure out how to integrate with the github attestation generator in the future.

loosebazooka commented 6 months ago

I don't think I have the rights to merge. But this works on loosebazooka/protobuf-specs, so hopefully that just kinda translates over directly