tomlantic,ci: change find_differences behaviour, test for load_from_d… #13

	name: build with slsa 3 compliance

	on:
	workflow_dispatch:
	push:
	branches:
	- main

	jobs:
	build:
	runs-on: ubuntu-latest
	permissions:
	contents: write
	outputs:
	hashes: ${{ steps.hash.outputs.hashes }}

	steps:
	- name: checkout
	uses: actions/checkout@v4
	with:
	ref: main

	- name: install devbox
	uses: jetpack-io/[email protected]

	- name: install dependencies
	run: devbox run poetry install

	- name: build project
	id: build
	run: devbox run poetry build

	- name: generate provenance subjects
	id: hash
	run: \|
	cd dist
	HASHES=$(sha256sum * \| base64 -w0)
	echo "hashes=$HASHES" >> "$GITHUB_OUTPUT"

	provenance:
	needs: [build]
	permissions:
	actions: read
	id-token: write
	contents: write
	uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
	with:
	base64-subjects: "${{ needs.build.outputs.hashes }}"
	upload-assets: true

Provide feedback