53 Commits

Author SHA1 Message Date
b9d630f82a Update actions-validate.py to re-enable actions validation of slsa 2025-02-03 21:41:53 -08:00
75ea3534dc Add better logging to slsa validation in GH actions 2025-02-02 21:16:40 -08:00
0dc64d79d5 Disable SLSA validation in GH actions per #294 2025-02-02 13:23:39 -08:00
27e2521358 Revert "temporarily disable macos code signing verification in GH actions validator"
This reverts commit d6e2ebbf0b.
2025-02-02 13:11:41 -08:00
d6e2ebbf0b temporarily disable macos code signing verification in GH actions validator 2025-02-02 12:32:07 -08:00
eabd001d3e Add additional fail-safe validation to SLSA validator for better error messages 2025-02-02 11:47:02 -08:00
3d19e69463 Revert "Avoid reusing artifact name to enable GH action upgrade"
This reverts commit 7649ac1331.
2025-02-02 11:09:01 -08:00
7649ac1331 Avoid reusing artifact name to enable GH action upgrade 2025-02-02 10:35:19 -08:00
21b401bc14 Add ability to configure custom OpenAI API endpoint for #186 (#194)
* Add ability to configure custom OpenAI API endpoint for #186

* Ensure the AiCompletionEndpoint field is always initialized
2024-03-26 22:13:57 -07:00
35f9ad28a8 Add SLSA validation with current binary built by SLSA 2024-03-24 21:48:01 -07:00
25e982603a Disable validation with local build since it seems to fail for some reason 2024-03-24 21:45:28 -07:00
516ee59791 Expand user path before attempting validation 2023-12-21 12:22:11 -08:00
fa7d6be54d Add basic validation using the published version of hishtory too 2023-12-20 19:41:21 -08:00
8fd809fdc8 Improve AI suggestions by specifying shell name and OS in OpenAI query 2023-12-19 20:50:29 -08:00
0ea3ce2399 Add basic debouncing for AI integration + implement AI suggestions via hishtory API endpoint 2023-11-12 02:57:23 -08:00
eb835fe52c Add initial version of AI searching, but with a broken implementation of debouncing 2023-11-12 02:57:23 -08:00
09270ef5a0 Add SLSA attestation pre-validation with released hishtory version 2023-11-08 20:23:24 -08:00
262d8238ad Add chmod +x so that we can run hishtory status 2023-11-08 19:26:00 -08:00
b88bc86204 Add ./ to execute the binary in CWD 2023-11-08 19:07:49 -08:00
5ab1cb61a3 Update validation to release an artifact to certify that validation passed, this will then be used by the backend server to only publish releases that passed validation 2023-11-08 19:03:30 -08:00
7d9664363d Add validation of hishtory status 2023-11-08 18:25:29 -08:00
ed6d472409 Move assertion that file is present to earlier in function so we fail fast 2023-11-08 18:19:55 -08:00
79a61c1b1d Require SLSA pre-validation for macos too 2023-11-08 18:19:02 -08:00
8567b4cbdf Run sha256sum in macos signer too for debuging purposes 2023-11-06 21:17:09 -08:00
19ee1816be Revert "Add SLSA attestation validation with latest released hishtory binary too" because the released binary doesn't support the validate-binary subcommand yet
This reverts commit 259f6b7858.
2023-11-05 18:05:20 -08:00
259f6b7858 Add SLSA attestation validation with latest released hishtory binary too 2023-11-05 17:20:53 -08:00
3e31d022c8 Add debugging information about subprocess errors when prevalidating releases 2023-11-05 17:16:42 -08:00
53d976811c Skip SLSA validation in tests for Mac binaries for debugging 2023-11-05 16:31:10 -08:00
517b9c43ee Add debug prints to make reading the output easier 2023-11-05 14:10:03 -08:00
1cfaa13b74 Capture stdout for slsa validation 2023-11-05 14:09:22 -08:00
1264388ea9 Swap post-release validation to happen in a dedicated python script 2023-11-05 12:57:58 -08:00
9834c6f492 Add validation of macos signatures 2023-11-05 12:42:00 -08:00
0eb362e123 Remove requests requirement since we no longer are using it 2023-11-05 12:39:07 -08:00
8709ec9208 Update macos signer to be stricter about ensuring the files exist, and failing if they don't 2023-11-05 12:22:47 -08:00
da99e46e42 Swap SLSA releaser to use GH steps to pass through files, rather than downloading via HTTP 2023-11-03 22:18:24 -07:00
c59de42008 More refactoring to use cobra 2022-11-16 08:03:23 -08:00
edd1059b3e Fix URL now that we only have one tag per release 2022-05-28 10:18:51 -07:00
ea6be650ba Export the unsigned files for a new theory on how SLSA verification can be done 2022-05-26 23:09:00 -07:00
647f6a8924 More debugging info for the releaser action 2022-05-26 22:24:56 -07:00
b8ecb33deb Add more debugging information to signing workflow 2022-05-26 21:57:16 -07:00
d4caef9c3d Fix release filenames 2022-05-24 22:26:24 -07:00
6be86c5111 Remove bogus assert None 2022-05-24 10:34:37 -07:00
b589a7b485 Fix GITHUB_REF parsing 2022-05-24 10:23:15 -07:00
1dfc34ea79 Missing f in format string 2022-05-24 09:43:35 -07:00
a9d1dcfb40 Longer timeout + better error message 2022-05-24 09:07:01 -07:00
d851fd8489 Add missing variable name 2022-05-24 00:14:50 -07:00
045492d679 Fix function definition 2022-05-24 00:12:29 -07:00
8e2785e580 MIgrate to a python script for signign 2022-05-23 23:25:12 -07:00
f7c95f95b4 Fix the ldflags attempt #2 2022-04-16 21:29:59 -07:00
8a962b7993 try again for setting the ldflags in the action builder 2022-04-16 21:15:19 -07:00