David Dworken
|
59ed3dd9e4
|
A new approach to signing
|
2022-05-23 17:56:51 -07:00 |
|
David Dworken
|
76d139bb5a
|
Add GITHUB_TOKEN auth
|
2022-05-23 08:59:50 -07:00 |
|
David Dworken
|
cb1e69958a
|
Why are the binaries ASCII???
|
2022-05-23 08:57:55 -07:00 |
|
David Dworken
|
e8c8d4f0ad
|
Add error case for TAG_NAME==null
|
2022-05-23 08:48:22 -07:00 |
|
David Dworken
|
cb72e0a830
|
Fix URL
|
2022-05-23 08:45:12 -07:00 |
|
David Dworken
|
89df994933
|
Add more debugging output
|
2022-05-23 08:43:43 -07:00 |
|
David Dworken
|
f7a37aa97c
|
Update triggers and remove sleep that is not needed for remaining trigger types
|
2022-05-23 08:40:47 -07:00 |
|
David Dworken
|
677b596d49
|
Debugging code signing, added error checking for my xattr code and discovered that arm xattrs aren't being persisted
|
2022-05-22 20:08:30 -07:00 |
|
David Dworken
|
edcf92e899
|
Fix bad merge for macos signing
|
2022-05-22 18:15:16 -07:00 |
|
David Dworken
|
cc6cf07729
|
Another attempt at correct signing/releasing for macos
|
2022-05-22 18:12:32 -07:00 |
|
David Dworken
|
4cb5773632
|
Add hex parsing for xattr setting + log rather than error when offline
|
2022-04-28 09:51:01 -07:00 |
|
David Dworken
|
eed2459d99
|
Run signer on push and have it sleep
|
2022-04-25 22:23:05 -07:00 |
|
David Dworken
|
b0f680c1a8
|
Another attempt at xattr exporting
|
2022-04-25 21:40:02 -07:00 |
|
David Dworken
|
257f5df7e8
|
Another attempt at xattr exporting
|
2022-04-25 21:28:22 -07:00 |
|
David Dworken
|
cda9536abf
|
More xattr debugging
|
2022-04-25 21:21:31 -07:00 |
|
David Dworken
|
cdcb013511
|
More debugging output
|
2022-04-25 21:08:24 -07:00 |
|
David Dworken
|
2d91b6bf48
|
Can only release when there is a tag
|
2022-04-25 20:15:28 -07:00 |
|
David Dworken
|
5a5759c691
|
Better xattr dumping
|
2022-04-25 20:13:31 -07:00 |
|
David Dworken
|
15e186c46d
|
Fix releasing xattr files
|
2022-04-25 20:09:00 -07:00 |
|
David Dworken
|
76bdad0b78
|
Fix incorrect uses call
|
2022-04-24 22:05:18 -07:00 |
|
David Dworken
|
ba2bfc18d3
|
Release the xattrs containing the code signatures
|
2022-04-24 22:04:16 -07:00 |
|
David Dworken
|
ecbd149593
|
Brew install sha1sum
|
2022-04-24 21:50:03 -07:00 |
|
David Dworken
|
c9e062ec67
|
Add debugging prints
|
2022-04-24 21:48:06 -07:00 |
|
David Dworken
|
8c4049b101
|
Fix double @@ typo
|
2022-04-24 21:10:18 -07:00 |
|
David Dworken
|
1aa08a3a4d
|
Turns out slsa verifier hasn't been updated yet, see https://github.com/slsa-framework/slsa-verifier/pull/37
|
2022-04-24 21:07:20 -07:00 |
|
David Dworken
|
aa806878ed
|
Rename slsa builder file since the upstream repo renamed it
|
2022-04-24 20:46:48 -07:00 |
|
David Dworken
|
a60785955a
|
Update workflow name
|
2022-04-24 20:39:40 -07:00 |
|
David Dworken
|
7fbe888059
|
Whoops, same messed up dash as before
|
2022-04-24 20:36:46 -07:00 |
|
David Dworken
|
a98c31be46
|
Swap the cert to be encrypted with a password
|
2022-04-24 20:34:44 -07:00 |
|
David Dworken
|
b853973db1
|
Run commands in one step to reduce waiting time
|
2022-04-24 10:06:06 -07:00 |
|
David Dworken
|
bcbb6eaf28
|
Fix CLI arg to base 64 decode
|
2022-04-24 09:45:15 -07:00 |
|
David Dworken
|
5a31c6f96b
|
Enable manually running the sign workflow
|
2022-04-24 09:42:12 -07:00 |
|
David Dworken
|
7727e2c86d
|
First attempt at codesigning for macos in github actions
|
2022-04-24 09:40:28 -07:00 |
|
David Dworken
|
10ee085d4c
|
Remove unnecessary set -m calls, speed up the local make acttest command, embed ReleaseVersion into the test server to fix the test failures on macos, and update install to be resistant to bashrc and zshrc not existing
|
2022-04-19 21:05:54 -07:00 |
|
David Dworken
|
0c0943fc79
|
Fix failing test + fix syntax error in workflow
|
2022-04-19 19:21:39 -07:00 |
|
David Dworken
|
16d41de4ad
|
Another attempt at making zsh pass on github actions
|
2022-04-17 23:06:01 -07:00 |
|
David Dworken
|
15bec30315
|
Add fake event with head_commit to restore the ability to run the github action test locally
|
2022-04-17 21:47:49 -07:00 |
|
David Dworken
|
16ad1ce12c
|
Skip releaser if the tag doesn't contain a dash as part of the multi-os release flow
|
2022-04-17 21:05:23 -07:00 |
|
David Dworken
|
16055f982e
|
Skip commands prefixed with a space for zsh + update tests + touch ~/.zshrc so tests can run on actions
|
2022-04-17 21:04:44 -07:00 |
|
David Dworken
|
e3d8f1274e
|
Hopefully fix github action tests for zsh
|
2022-04-17 20:08:54 -07:00 |
|
David Dworken
|
1ab68a804c
|
Don't build docker containers on actions since this doesn't work on macos
|
2022-04-17 12:09:10 -07:00 |
|
David Dworken
|
e98783d30f
|
Add server-side code to handle updates for non-linux
|
2022-04-17 12:02:56 -07:00 |
|
David Dworken
|
478898fd1c
|
Fix not attempt #2
|
2022-04-17 11:56:00 -07:00 |
|
David Dworken
|
aaaee9f632
|
Fix boolean not in actions config
|
2022-04-17 11:53:59 -07:00 |
|
David Dworken
|
4036a4594b
|
Add config for building/releasing binaries for other OSs
|
2022-04-17 11:44:57 -07:00 |
|
David Dworken
|
787ee8dfd9
|
Run tests on macos
|
2022-04-17 10:50:37 -07:00 |
|
David Dworken
|
c725327c24
|
Seems as though there is no way of building multiple binaries, so revert the last two changes
|
2022-04-17 10:47:10 -07:00 |
|
David Dworken
|
519f85cd98
|
And what about this?
|
2022-04-17 10:40:06 -07:00 |
|
David Dworken
|
76ebb73326
|
Does this work to generate SLSA binaries for two OSs
|
2022-04-17 10:38:12 -07:00 |
|
David Dworken
|
fb52b98379
|
Swap generous date parsing to using a library
|
2022-04-11 23:22:49 -07:00 |
|
David Dworken
|
e9d19eb782
|
fix hardcoded username in tests + another attempt at enabling bash job control + test that building docker containers works
|
2022-04-09 12:19:01 -07:00 |
|
David Dworken
|
6f7e034837
|
fix triggers
|
2022-04-09 11:58:49 -07:00 |
|
David Dworken
|
da4cab7a0b
|
github action to test code
|
2022-04-09 11:56:25 -07:00 |
|
David Dworken
|
68d7f33c98
|
Enable codeql scanning
|
2022-04-09 11:39:21 -07:00 |
|
David Dworken
|
108e1526b8
|
trying again with ldflags + fixed update url
|
2022-04-08 22:56:44 -07:00 |
|
David Dworken
|
f2c6f86204
|
another attempt at ldflags
|
2022-04-08 22:45:49 -07:00 |
|
David Dworken
|
13d766a9c8
|
trying again to make ldflags work with slsa
|
2022-04-08 22:12:00 -07:00 |
|
David Dworken
|
c3d232ea36
|
turns out github releases require a tag, now it runs automatically for all tagged commits
|
2022-04-08 21:52:22 -07:00 |
|
David Dworken
|
3c45c1c959
|
it ran, but still no ldflag. trying again for that + getting rid of the if for release + back to only running on manual trigger
|
2022-04-08 21:42:19 -07:00 |
|
David Dworken
|
18492e102a
|
attempt to fix ldflags for slsa
|
2022-04-08 21:22:31 -07:00 |
|
David Dworken
|
8bb1fd3856
|
run on push + delete outdated design.md
|
2022-04-08 21:12:17 -07:00 |
|
David Dworken
|
ff37570d74
|
Added SLSA builder
|
2022-04-08 20:59:24 -07:00 |
|