push

Author: mayurkr

.github/workflows/ci.yml

@@ -39,16 +39,18 @@ jobs:
         uses: ibiqlik/action-yamllint@v3
         with:
           file_or_dir: |
-            deploy/
+            deploy/helm/aotanami/Chart.yaml
+            deploy/helm/aotanami/values.yaml
             .github/workflows/
-            config/
           config_data: |
             extends: default
             rules:
               line-length:
                 max: 200
               truthy:
                 check-keys: false
+              comments-indentation: disable
+              document-start: disable
 
   test:
     name: Test

.github/workflows/release.yml

@@ -95,8 +95,18 @@ jobs:
       # --- SLSA Provenance attestation ---
       - name: Generate and attach provenance
         run: |
+          cat > /tmp/provenance.json << EOF
+          {
+            "buildType": "https://github.com/zelyo-ai/aotanami",
+            "builder": {"id": "https://github.com/zelyo-ai/aotanami/actions"},
+            "metadata": {
+              "buildInvocationId": "${{ github.run_id }}",
+              "completeness": {"parameters": true, "environment": true, "materials": true}
+            }
+          }
+          EOF
           cosign attest --yes \
-            --predicate <(echo '{"buildType":"https://github.com/zelyo-ai/aotanami","builder":{"id":"https://github.com/zelyo-ai/aotanami/actions"},"metadata":{"buildInvocationId":"${{ github.run_id }}","completeness":{"parameters":true,"environment":true,"materials":true}}}') \
+            --predicate /tmp/provenance.json \
             --type slsaprovenance \
             ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-push.outputs.digest }}