Update continuous-integration.yml

.github/workflows/continuous-integration.yml

@@ -10,13 +10,13 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        configuration: [Release, Debug]
+        configuration: [Release]
         arch: [x64, arm64]
     outputs:
       x64_hashReleaseInstaller: ${{ steps.hash.outputs.hashRelease_x64 }}
-      x64_hashDebugInstaller: ${{ steps.hash.outputs.hashDebug_x64 }}
+#      x64_hashDebugInstaller: ${{ steps.hash.outputs.hashDebug_x64 }}
       arm64_hashReleaseInstaller: ${{ steps.hash.outputs.hashRelease_arm64 }}
-      arm64_hashDebugInstaller: ${{ steps.hash.outputs.hashDebug_arm64 }}
+#      arm64_hashDebugInstaller: ${{ steps.hash.outputs.hashDebug_arm64 }}
     steps:
       - uses: actions/checkout@v4
       - uses: microsoft/setup-msbuild@v2
@@ -47,25 +47,32 @@ jobs:
         with:
           name: LGTVCompanion-Setup-${{ matrix.configuration }}-${{ matrix.arch }}
           path: LGTV Companion Setup/bin/${{ matrix.arch }}/${{ matrix.configuration }}/  
-  provenance:
+  combine_hashes:
     needs: [build]
     runs-on: ubuntu-latest
+    outputs:
+      hashes: ${{ steps.hashes.outputs.hashes }}
+    env:
+      HASHES: ${{ toJSON(needs.build.outputs) }}
+    steps:
+      - id: hashes
+        shell: bash
+        run: |
+          echo "$HASHES" | jq -r '.[] | @base64d' | sed "/^$/d" > hashes.txt
+          echo "hashes=$(cat hashes.txt | base64 -w0)" >> "$GITHUB_OUTPUT"
+  provenance:
+    needs: [combine_hashes]
     if: startsWith(github.ref, 'refs/tags/')
     permissions:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to a release.
-    steps:
-      - uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
-        with:
-          base64-subjects: "${{ needs.build.outputs.x64_hashReleaseInstaller }}" 
-          draft-release: false
-          upload-assets: false # Optional: Upload to a new release
-      - uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
-        with:
-          base64-subjects: "${{ needs.build.outputs.arm64_hashReleaseInstaller }}"
-          draft-release: false
-          upload-assets: false # Optional: Upload to a new release
+    uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
+    with:
+      base64-subjects: "${{ needs.combine_hashes.outputs.hashes }}" 
+      provenance-name: LGTV Companion Setup
+      draft-release: false
+      upload-assets: false # Optional: Upload to a new release
   release:
     needs: [build, provenance]
     runs-on: ubuntu-latest