From be2bbb37c69a7969172fd0131c7f1a2cb0052a37 Mon Sep 17 00:00:00 2001 From: David Dworken Date: Sun, 5 Nov 2023 12:24:47 -0800 Subject: [PATCH] Add SLSA self-validation for hishtory-darwin-amd64 --- .github/workflows/slsa-releaser.yml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/slsa-releaser.yml b/.github/workflows/slsa-releaser.yml index 0dc81aa..6a2c1bc 100644 --- a/.github/workflows/slsa-releaser.yml +++ b/.github/workflows/slsa-releaser.yml @@ -188,12 +188,15 @@ jobs: - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 with: name: hishtory-linux-amd64.intoto.jsonl - # - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 - # with: - # name: hishtory-darwin-amd64 - # - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 - # with: - # name: hishtory-darwin-amd64.intoto.jsonl + - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 + with: + name: hishtory-darwin-amd64 + - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 + with: + name: hishtory-darwin-amd64.intoto.jsonl + - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 + with: + name: hishtory-darwin-amd64-unsigned # - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # with: # name: hishtory-darwin-arm64 @@ -203,14 +206,11 @@ jobs: # - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # with: # name: hishtory-darwin-arm64-unsigned - # - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 - # with: - # name: hishtory-darwin-amd64-unsigned - name: Validate Release run: | go build; ./hishtory install # curl https://hishtory.dev/install.py | python3 - ./hishtory validate-binary hishtory-linux-amd64 hishtory-linux-amd64.intoto.jsonl - # hishtory validate-binary v0.`cat VERSION` hishtory-linux-amd64 hishtory-linux-amd64.intoto.jsonl + ./hishtory validate-binary hishtory-darwin-amd64 hishtory-darwin-amd64.intoto.jsonl --is_macos=True --macos_unsigned_binary=hishtory-darwin-amd64-unsigned # TODO: Validate other binaries here \ No newline at end of file