From ea6be650ba13e2090f35a1d190e9b779dcfefb8c Mon Sep 17 00:00:00 2001 From: David Dworken Date: Thu, 26 May 2022 23:09:00 -0700 Subject: [PATCH] Export the unsigned files for a new theory on how SLSA verification can be done --- .github/workflows/slsa-releaser.yml | 2 +- scripts/actions-sign.py | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/slsa-releaser.yml b/.github/workflows/slsa-releaser.yml index 6d1175d..cae59af 100644 --- a/.github/workflows/slsa-releaser.yml +++ b/.github/workflows/slsa-releaser.yml @@ -55,11 +55,11 @@ jobs: uses: softprops/action-gh-release@v1 if: startsWith(github.ref, 'refs/tags/') with: - # TODO: stop releasing the unsigned files files: | hishtory-darwin-arm64 hishtory-darwin-arm64-unsigned hishtory-darwin-amd64 + hishtory-darwin-amd64-unsigned # Upload to GitHub release. upload: diff --git a/scripts/actions-sign.py b/scripts/actions-sign.py index 207c72e..6f23428 100644 --- a/scripts/actions-sign.py +++ b/scripts/actions-sign.py @@ -21,6 +21,7 @@ def main(): print("signing...") os.system(""" cp hishtory-darwin-arm64 hishtory-darwin-arm64-unsigned + cp hishtory-darwin-amd64 hishtory-darwin-amd64-unsigned echo $MACOS_CERTIFICATE | base64 -d > certificate.p12 security create-keychain -p $MACOS_CERTIFICATE_PWD build.keychain security default-keychain -s build.keychain