vtest-checkout #37

	# Copyright 2023 SLSA Authors
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.

	name: SLSA 3 Example builder run

	permissions: {}

	on:
	workflow_dispatch:
	release:
	types: [created]

	jobs:
	build:
	permissions:
	id-token: write # For signing
	contents: write # For asset release.
	packages: write # For package upload.
	actions: read # For getting workflow run info.
	uses: slsa-framework/example-trw/.github/workflows/[email protected]
	with:
	artifact: my-artifact
	filename: src/build.txt
	# https://github.com/slsa-framework/example-trw/commit/bbcb6f6eb5fd2f83f81c5c79e7d76315bfd1223d
	# contains "Hello World 2", whereas main has "Hello World".
	commit-sha: bbcb6f6eb5fd2f83f81c5c79e7d76315bfd1223d
	secrets:
	password: ${{ secrets.PASSWORD }}

Provide feedback