Avoid reusing artifact name to enable GH action upgrade

.github/slsa/.slsa-goreleaser-darwin-amd64.yml

@@ -9,7 +9,7 @@ flags:
 goos: darwin
 goarch: amd64
 
-binary: hishtory-{{ .Os }}-{{ .Arch }}
+binary: hishtory-{{ .Os }}-{{ .Arch }}-bin
 
 ldflags:
   - '{{ .Env.VERSION_LDFLAGS }}'

.github/slsa/.slsa-goreleaser-darwin-arm64.yml

@@ -9,7 +9,7 @@ flags:
 goos: darwin
 goarch: arm64
 
-binary: hishtory-{{ .Os }}-{{ .Arch }}
+binary: hishtory-{{ .Os }}-{{ .Arch }}-bin
 
 ldflags:
   - '{{ .Env.VERSION_LDFLAGS }}'

.github/workflows/slsa-releaser.yml

@@ -126,10 +126,10 @@ jobs:
           sleep 60
       - uses: actions/download-artifact@v4
         with:
-          name: hishtory-darwin-arm64
+          name: hishtory-darwin-arm64-bin
       - uses: actions/download-artifact@v4
         with:
-          name: hishtory-darwin-amd64
+          name: hishtory-darwin-amd64-bin
       - name: Download and sign the latest executables
         env: 
           GH_TOKEN: ${{ github.token }}

scripts/actions-sign.py

@@ -3,8 +3,8 @@ import time
 import subprocess
 
 def main():
-    assertPresentAndNotAscii("hishtory-darwin-arm64")
-    assertPresentAndNotAscii("hishtory-darwin-amd64")
+    assertPresentAndNotAscii("hishtory-darwin-arm64-bin")
+    assertPresentAndNotAscii("hishtory-darwin-amd64-bin")
     
     print("before sha1sum:")
     os.system("sha1sum hishtory-* 2>&1")
@@ -17,6 +17,8 @@ def main():
     print("signing...")
     os.system("""
     set -emo pipefail
+    mv hishtory-darwin-arm64-bin hishtory-darwin-arm64
+    mv hishtory-darwin-amd64-bin hishtory-darwin-amd64
     cp hishtory-darwin-arm64 hishtory-darwin-arm64-unsigned
     cp hishtory-darwin-amd64 hishtory-darwin-amd64-unsigned
     echo $MACOS_CERTIFICATE | base64 -d > certificate.p12