Commit Graph

23 Commits

Author SHA1 Message Date
David Dworken
b9d630f82a Update actions-validate.py to re-enable actions validation of slsa 2025-02-03 21:41:53 -08:00
David Dworken
75ea3534dc Add better logging to slsa validation in GH actions 2025-02-02 21:16:40 -08:00
David Dworken
0dc64d79d5 Disable SLSA validation in GH actions per #294 2025-02-02 13:23:39 -08:00
David Dworken
27e2521358 Revert "temporarily disable macos code signing verification in GH actions validator"
This reverts commit d6e2ebbf0b.
2025-02-02 13:11:41 -08:00
David Dworken
d6e2ebbf0b temporarily disable macos code signing verification in GH actions validator 2025-02-02 12:32:07 -08:00
David Dworken
eabd001d3e Add additional fail-safe validation to SLSA validator for better error messages 2025-02-02 11:47:02 -08:00
David Dworken
35f9ad28a8 Add SLSA validation with current binary built by SLSA 2024-03-24 21:48:01 -07:00
David Dworken
25e982603a Disable validation with local build since it seems to fail for some reason 2024-03-24 21:45:28 -07:00
David Dworken
516ee59791 Expand user path before attempting validation 2023-12-21 12:22:11 -08:00
David Dworken
fa7d6be54d Add basic validation using the published version of hishtory too 2023-12-20 19:41:21 -08:00
David Dworken
09270ef5a0 Add SLSA attestation pre-validation with released hishtory version 2023-11-08 20:23:24 -08:00
David Dworken
262d8238ad Add chmod +x so that we can run hishtory status 2023-11-08 19:26:00 -08:00
David Dworken
b88bc86204 Add ./ to execute the binary in CWD 2023-11-08 19:07:49 -08:00
David Dworken
5ab1cb61a3 Update validation to release an artifact to certify that validation passed, this will then be used by the backend server to only publish releases that passed validation 2023-11-08 19:03:30 -08:00
David Dworken
7d9664363d Add validation of hishtory status 2023-11-08 18:25:29 -08:00
David Dworken
79a61c1b1d Require SLSA pre-validation for macos too 2023-11-08 18:19:02 -08:00
David Dworken
19ee1816be Revert "Add SLSA attestation validation with latest released hishtory binary too" because the released binary doesn't support the validate-binary subcommand yet
This reverts commit 259f6b7858.
2023-11-05 18:05:20 -08:00
David Dworken
259f6b7858 Add SLSA attestation validation with latest released hishtory binary too 2023-11-05 17:20:53 -08:00
David Dworken
3e31d022c8 Add debugging information about subprocess errors when prevalidating releases 2023-11-05 17:16:42 -08:00
David Dworken
53d976811c Skip SLSA validation in tests for Mac binaries for debugging 2023-11-05 16:31:10 -08:00
David Dworken
517b9c43ee Add debug prints to make reading the output easier 2023-11-05 14:10:03 -08:00
David Dworken
1cfaa13b74 Capture stdout for slsa validation 2023-11-05 14:09:22 -08:00
David Dworken
1264388ea9 Swap post-release validation to happen in a dedicated python script 2023-11-05 12:57:58 -08:00