extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2025-02-02 11:39:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add integration to validate macos signers too

Browse Source
This commit is contained in:
David Dworken 2023-11-03 22:16:11 -07:00
parent 87dee94aab
commit 4673b99579
No known key found for this signature in database
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.github/workflows/slsa-releaser.yml vendored
View File

@ -115,7 +115,8 @@ jobs:
macos_signer: macos_signer:
runs-on: macos-11.0 runs-on: macos-11.0
needs: needs:
- upload - build-darwin-amd64
- build-darwin-arm64
permissions: permissions:
contents: write contents: write
steps: steps:
@ -151,6 +152,7 @@ jobs:
- build-linux-amd64 - build-linux-amd64
- build-darwin-amd64 - build-darwin-amd64
- build-darwin-arm64 - build-darwin-arm64
- macos_signer
steps: steps:
- uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
with: with:
@ -170,6 +172,12 @@ jobs:
- uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
with: with:
name: hishtory-darwin-arm64.intoto.jsonl name: hishtory-darwin-arm64.intoto.jsonl
- uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
with:
name: hishtory-darwin-arm64-unsigned
- uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
with:
name: hishtory-darwin-amd64-unsigned
- name: Validate Release - name: Validate Release
run: | run: |
curl https://hishtory.dev/install.py | python3 - curl https://hishtory.dev/install.py | python3 -
@ -179,5 +187,6 @@ jobs:
which hishtory which hishtory
echo $PATH echo $PATH
hishtory validate-binary v0.`cat VERSION` hishtory-linux-amd64 hishtory-linux-amd64.intoto.jsonl hishtory validate-binary v0.`cat VERSION` hishtory-linux-amd64 hishtory-linux-amd64.intoto.jsonl
hishtory validate-binary v0.`cat VERSION` hishtory-linux-amd64 hishtory-linux-amd64.intoto.jsonl
# TODO: Validate other binaries here # TODO: Validate other binaries here