From bb032f154af3774b1f88e79ebe46659fca5c3796 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?=
 <konstruktoid@users.noreply.github.com>
Date: Sat, 30 Apr 2022 12:00:35 +0200
Subject: [PATCH] add github actions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
---
 .github/workflows/issues.yml | 14 ++++++++++++
 .github/workflows/slsa.yml   | 41 ++++++++++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+)
 create mode 100644 .github/workflows/issues.yml
 create mode 100644 .github/workflows/slsa.yml

diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
new file mode 100644
index 0000000..8da19de
--- /dev/null
+++ b/.github/workflows/issues.yml
@@ -0,0 +1,14 @@
+name: issue assignment
+
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  auto-assign:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'auto-assign issue'
+        uses: pozil/auto-assign-issue@v1.4.0
+        with:
+          assignees: konstruktoid
diff --git a/.github/workflows/slsa.yml b/.github/workflows/slsa.yml
new file mode 100644
index 0000000..69e27ab
--- /dev/null
+++ b/.github/workflows/slsa.yml
@@ -0,0 +1,41 @@
+---
+name: slsa
+on:
+  push:
+  release:
+    types: [published, released]
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "REPOSITORY_NAME=$(echo '${{ github.repository }}' | awk -F '/' '{print $2}')" >> $GITHUB_ENV
+        shell: bash
+
+      - name: checkout repository
+        uses: actions/checkout@master
+
+      - name: create checksum file
+        run: find *.sh distros/* functions/* tests/* Dockerfile Vagrantfile -exec sha256sum {} \; > ${{ env.REPOSITORY_NAME }}.sha256
+
+      - name: upload artifact
+        uses: actions/upload-artifact@v3
+        with:
+          path: ${{ env.REPOSITORY_NAME }}.sha256
+
+  generate-provenance:
+    needs: build
+    name: generate build provenance
+    runs-on: ubuntu-latest
+    steps:
+      - name: download build artifact
+        uses: actions/download-artifact@v3
+
+      - name: generate provenance
+        uses: slsa-framework/github-actions-demo@v0.1
+        with:
+          artifact_path: artifact/
+
+      - name: upload provenance
+        uses: actions/upload-artifact@v3
+        with:
+          path: build.provenance