extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2025-06-27 15:32:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add validation of hishtory status

Browse Source
This commit is contained in:
David Dworken 2023-11-08 18:25:29 -08:00
parent ed6d472409
commit 7d9664363d
No known key found for this signature in database
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
scripts/actions-validate.py
View File

@ -1,3 +1,4 @@
from re import sub
import subprocess import subprocess
import shutil import shutil
import sys import sys
@ -46,6 +47,18 @@ def validate_macos_signature(filename: str) -> None:
assert "Authority=Apple Root CA" in out assert "Authority=Apple Root CA" in out
assert "TeamIdentifier=QUXLNCT7FA" in out assert "TeamIdentifier=QUXLNCT7FA" in out
def validate_hishtory_status(filename: str) -> None:
assert os.path.exists(filename)
status = subprocess.check_output([filename, "status", "-v"]).decode('utf-8')
git_hash = os.environ['GITHUB_SHA']
assert git_hash, git_hash
assert f"Commit Hash: {git_hash}" in status, status
assert os.path.exists('VERSION')
with open('VERSION') as f:
version = "v0." + f.read().strip()
assert f"hiSHtory: {version}" in status, status
def main() -> None: def main() -> None:
print("Starting validation of MacOS signatures") print("Starting validation of MacOS signatures")
for filename in ALL_FILES: for filename in ALL_FILES:
@ -53,6 +66,8 @@ def main() -> None:
validate_macos_signature(filename) validate_macos_signature(filename)
print("Starting validation of SLSA attestations") print("Starting validation of SLSA attestations")
validate_slsa("./hishtory") validate_slsa("./hishtory")
print("Validating other metadata")
validate_hishtory_status("hishtory-darwin-amd64")
if __name__ == '__main__': if __name__ == '__main__':
main() main()