Add SLSA attestation validation with latest released hishtory binary too

.github/workflows/slsa-releaser.yml

@@ -214,5 +214,5 @@ jobs:
       - name: Validate Release
         run: |
           go build; ./hishtory install
+          curl https://hishtory.dev/install.py | python3 -
           python3 scripts/actions-validate.py
-          # TODO: Run validation using hishtory built at HEAD too

scripts/actions-validate.py

@@ -53,8 +53,10 @@ def main() -> None:
     for filename in ALL_FILES:
         if "darwin" in filename:
             validate_macos_signature(filename)
-    print("Starting validation of SLSA attestations")
+    print("Starting validation of SLSA attestations with hishtory built at HEAD")
     validate_slsa("./hishtory")
+    print("Starting validation of SLSA attestations with latest released hishtory")
+    validate_slsa(os.path.expanduser("~/.hishtory/hishtory"))
 
 if __name__ == '__main__':
     main()