extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2024-11-22 16:24:00 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add basic validation using the published version of hishtory too

Browse Source
This commit is contained in:
David Dworken 2023-12-20 17:27:06 -08:00
parent 3ce76d154a
commit fa7d6be54d
1 changed files with 13 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
scripts/actions-validate.py
View File

@ -47,18 +47,20 @@ def validate_macos_signature(filename: str) -> None:
assert "Authority=Apple Root CA" in out assert "Authority=Apple Root CA" in out
assert "TeamIdentifier=QUXLNCT7FA" in out assert "TeamIdentifier=QUXLNCT7FA" in out
def validate_hishtory_status(filename: str) -> None: def validate_hishtory_status(filename: str, deep_validation: bool) -> None:
assert os.path.exists(filename) assert os.path.exists(filename)
subprocess.check_output(['chmod', "+x", filename]) subprocess.check_output(['chmod', "+x", filename])
status = subprocess.check_output([filename, "status", "-v"]).decode('utf-8') status = subprocess.check_output([filename, "status", "-v"]).decode('utf-8')
git_hash = os.environ['GITHUB_SHA'] if deep_validation:
assert git_hash, git_hash git_hash = os.environ['GITHUB_SHA']
assert f"Commit Hash: {git_hash}" in status, status assert git_hash, git_hash
assert os.path.exists('VERSION') assert f"Commit Hash: {git_hash}" in status, status
with open('VERSION') as f: assert os.path.exists('VERSION')
version = "v0." + f.read().strip() with open('VERSION') as f:
assert f"hiSHtory: {version}" in status, status version = "v0." + f.read().strip()
assert f"hiSHtory: {version}" in status, status
else:
assert "hiSHtory: " in status, status
def main() -> None: def main() -> None:
print("Starting validation of MacOS signatures") print("Starting validation of MacOS signatures")
@ -68,9 +70,9 @@ def main() -> None:
print("Starting validation of SLSA attestations") print("Starting validation of SLSA attestations")
validate_slsa("./hishtory") validate_slsa("./hishtory")
validate_slsa(os.path.expanduser("~/.hishtory/hishtory")) validate_slsa(os.path.expanduser("~/.hishtory/hishtory"))
# TODO: Run validation using hishtory built at HEAD too
print("Validating other metadata") print("Validating other metadata")
validate_hishtory_status("./hishtory-darwin-amd64") validate_hishtory_status("./hishtory-darwin-amd64", True)
validate_hishtory_status("~/.hishtory/hishtory", False)
if __name__ == '__main__': if __name__ == '__main__':
main() main()