Add info on bypassing SLSA to the error message

This commit is contained in:
David Dworken 2022-09-16 23:02:52 -07:00
parent 1adec3e6a1
commit de1a6f3da8

View File

@ -654,7 +654,7 @@ func Update() error {
err = verifyBinary("/tmp/hishtory-client", "/tmp/hishtory-client.intoto.jsonl", downloadData.Version)
}
if err != nil {
return fmt.Errorf("failed to verify SLSA provenance of the updated binary, aborting update: %v", err)
return fmt.Errorf("failed to verify SLSA provenance of the updated binary, aborting update (to bypass, set `export HISHTORY_DISABLE_SLSA_ATTESTATION=true`): %v", err)
}
// Unlink the existing binary so we can overwrite it even though it is still running