Add SLSA attestation validation with latest released hishtory binary too

This commit is contained in:
David Dworken 2023-11-05 17:20:53 -08:00
parent 3e31d022c8
commit 259f6b7858
No known key found for this signature in database
2 changed files with 4 additions and 2 deletions

View File

@ -214,5 +214,5 @@ jobs:
- name: Validate Release
run: |
go build; ./hishtory install
curl https://hishtory.dev/install.py | python3 -
python3 scripts/actions-validate.py
# TODO: Run validation using hishtory built at HEAD too

View File

@ -53,8 +53,10 @@ def main() -> None:
for filename in ALL_FILES:
if "darwin" in filename:
validate_macos_signature(filename)
print("Starting validation of SLSA attestations")
print("Starting validation of SLSA attestations with hishtory built at HEAD")
validate_slsa("./hishtory")
print("Starting validation of SLSA attestations with latest released hishtory")
validate_slsa(os.path.expanduser("~/.hishtory/hishtory"))
if __name__ == '__main__':
main()