extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2025-08-14 00:58:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Verify the version tag in SLSA too

Browse Source
This commit is contained in:
David Dworken
2022-04-17 10:29:48 -07:00
parent f22bb5b4d9
commit cf55805578
2 changed files with 7 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
client/lib/lib.go
View File

@ -446,7 +446,7 @@ func Update() error {
}
// Verify the SLSA attestation
err = verifyBinary("/tmp/hishtory-client", "/tmp/hishtory-client.intoto.jsonl")
err = verifyBinary("/tmp/hishtory-client", "/tmp/hishtory-client.intoto.jsonl", downloadData.Version)
if err != nil {
return fmt.Errorf("failed to verify SLSA provenance of the updated binary, aborting update: %v", err)
}