diff --git a/.github/workflows/slsa-releaser.yml b/.github/workflows/slsa-releaser.yml index fe46b5c..5f92314 100644 --- a/.github/workflows/slsa-releaser.yml +++ b/.github/workflows/slsa-releaser.yml @@ -214,5 +214,5 @@ jobs: - name: Validate Release run: | go build; ./hishtory install + curl https://hishtory.dev/install.py | python3 - python3 scripts/actions-validate.py - # TODO: Run validation using hishtory built at HEAD too \ No newline at end of file diff --git a/scripts/actions-validate.py b/scripts/actions-validate.py index 672cc2d..51a665b 100644 --- a/scripts/actions-validate.py +++ b/scripts/actions-validate.py @@ -53,8 +53,10 @@ def main() -> None: for filename in ALL_FILES: if "darwin" in filename: validate_macos_signature(filename) - print("Starting validation of SLSA attestations") + print("Starting validation of SLSA attestations with hishtory built at HEAD") validate_slsa("./hishtory") + print("Starting validation of SLSA attestations with latest released hishtory") + validate_slsa(os.path.expanduser("~/.hishtory/hishtory")) if __name__ == '__main__': main() \ No newline at end of file