extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2025-03-17 00:38:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add SLSA attestation validation with latest released hishtory binary too

Browse Source
This commit is contained in:
David Dworken 2023-11-05 17:20:53 -08:00
parent 3e31d022c8
commit 259f6b7858
No known key found for this signature in database
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/slsa-releaser.yml vendored
View File

@ -214,5 +214,5 @@ jobs:
- name: Validate Release - name: Validate Release
run: | run: |
go build; ./hishtory install go build; ./hishtory install
curl https://hishtory.dev/install.py | python3 -
python3 scripts/actions-validate.py python3 scripts/actions-validate.py
# TODO: Run validation using hishtory built at HEAD too

4
scripts/actions-validate.py
View File

@ -53,8 +53,10 @@ def main() -> None:
for filename in ALL_FILES: for filename in ALL_FILES:
if "darwin" in filename: if "darwin" in filename:
validate_macos_signature(filename) validate_macos_signature(filename)
print("Starting validation of SLSA attestations") print("Starting validation of SLSA attestations with hishtory built at HEAD")
validate_slsa("./hishtory") validate_slsa("./hishtory")
print("Starting validation of SLSA attestations with latest released hishtory")
validate_slsa(os.path.expanduser("~/.hishtory/hishtory"))
if __name__ == '__main__': if __name__ == '__main__':
main() main()