Skip to content

Conversation

@amitrathi2040
Copy link
Contributor

Description:

When constructing a npm "provenance" statement about a published package we want to include the numerical IDs for actor, repo and repo owner to be able to detect transferred repos or re-created repos along with originating workflow path.

Issues

Acceptance Criteria
It would be preferable to consume following claims as environment variables:

  • workflow_ref
  • workflow_sha
  • actor_id
  • repository_owner_id
  • repository_id

@amitrathi2040 amitrathi2040 requested a review from a team as a code owner November 10, 2022 14:07
@amitrathi2040
Copy link
Contributor Author

amitrathi2040 commented Nov 10, 2022

@TingluoHuang ,
awaiting approval on actions-dotnet PR.
I request to hold off until other PR is closed.

@amitrathi2040
Copy link
Contributor Author

@TingluoHuang, can you please have this merged and also approve https://github.com/github/actions-dotnet/pull/13565

@TingluoHuang TingluoHuang merged commit 98c857b into actions:main Nov 17, 2022
AdamOlech pushed a commit to antmicro/runner that referenced this pull request Nov 21, 2022
…environment variable (actions#2249)

* expose workflow refs/sha  as environment variables

* fixes environment variable ordering

* job_workflow_ref/sha aren't available in gh ctx
ChristopherHX pushed a commit to ChristopherHX/runner.server that referenced this pull request Nov 24, 2022
…environment variable (actions#2249)

* expose workflow refs/sha  as environment variables

* fixes environment variable ordering

* job_workflow_ref/sha aren't available in gh ctx
nikola-jokic pushed a commit to nikola-jokic/runner that referenced this pull request May 12, 2023
…environment variable (actions#2249)

* expose workflow refs/sha  as environment variables

* fixes environment variable ordering

* job_workflow_ref/sha aren't available in gh ctx
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants