Skip to content
bluebuild

Bridge provenance registry credentials safely #488

Sign in to view logs

Bridge provenance registry credentials safely

Bridge provenance registry credentials safely #488

Triggered via push August 4, 2026 00:33
@SecAI-HubSecAI-Hub
pushed be52044
main
Status Success
Total duration 20m 31s
Artifacts 3

build.yml

on: push
Stage 1: Source Prep
59s
Stage 1: Source Prep
Matrix: Stage 2: Build, Sign, and Publish Custom Image
Matrix: Stage 2: Build Custom Image (Unprivileged PR)
Stage 3: Release Evidence and Attestations
7m 17s
Stage 3: Release Evidence and Attestations
Stage 4: BlueBuild Gate
3s
Stage 4: BlueBuild Gate
Tier 1 Smoke Test (Artifact Verification)
0s
Tier 1 Smoke Test (Artifact Verification)
Fit to window
Zoom out
Zoom in

Annotations

1 warning
Stage 2: Build, Sign, and Publish Custom Image (recipe.yml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f, docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130, slsa-framework/slsa-verifier/actions/installer@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
image-attestation-bundles
12.8 MB
sha256:ea3bf0b555b262545a27b36f0a5cdca01999f501713b8c94036987a193c0eac4
image-digest
9.95 MB
sha256:d956f43df5dabd0d11e55b084cd7683d502873ee86b34fb9d39d599d0037d530
source-prep Expired
142 MB
sha256:07bb8ccc0bf22ebc4129d4d22eea3cf66aafda01e32296a2d4a4f1cd5ca3ed71