slsa-framework / github-actions-demo

Proof-of-concept SLSA provenance generator for GitHub Actions
MIT License
99 stars 22 forks source link

`recipe.entryPoint` should be the yaml filename #18

Open MarkLodato opened 3 years ago

MarkLodato commented 3 years ago

The recipe.entryPoint should be the filename under .github/workflows/, e.g. "example-publish.yaml". Currently it is the user-provided name value.

This is blocked by https://github.com/github/feedback/discussions/4188 since the filename is not available to the action.