104 Commits

Author	SHA1	Message	Date
David Dworken	e594375e08	Add workaround for slsa breakage	2022-10-01 15:14:51 -07:00
David Dworken	f2df0f04f8	Continue to try to debug macos go version	2022-09-21 21:20:28 -07:00
David Dworken	9f1ad28802	Another attempt at fixing macos action tests	2022-09-20 23:20:28 -07:00
David Dworken	bd75a65e52	Another attempt at fixing the macos runner	2022-09-20 23:09:28 -07:00
David Dworken	afe1fc5043	Undo attempted fix	2022-09-19 13:01:00 -07:00
David Dworken	d990b1e5a5	Next attempt to fix buggy go version	2022-09-18 22:08:30 -07:00
David Dworken	6a3f123c53	Fix buggy go version on macos github action	2022-09-18 21:50:58 -07:00
David Dworken	55f0f97d29	Fix tests for importing so they pass on github actions	2022-09-17 21:56:39 -07:00
David Dworken	d4302501eb	Improve table matching for tests and attempt to fix the tests that fail only on github actions	2022-09-17 12:49:27 -07:00
David Dworken	52047a45bd	Run tests on github PR and daily	2022-09-17 11:54:26 -07:00
David Dworken	b2d3bb4801	Remove slsa builder deps to see if the new builders work when running in parallel	2022-09-07 23:51:41 -07:00
David Dworken	18c4d1c3d9	Bump go version for running tests in github actions	2022-09-03 21:25:00 -07:00
David Dworken	83a0beff43	Bump go version, remove the vendored slsa library, and depend on a newer copy with a different API. Updates now work.	2022-09-02 00:15:58 -07:00
David Dworken	4f4b07165d	Use a version rather than a commit hash	2022-09-01 23:34:23 -07:00
David Dworken	b37b598e65	Bump to 1.0 of slsa generator	2022-09-01 23:30:28 -07:00
David Dworken	bdd35c1776	Bump slsa to v0.0.2	2022-06-04 20:18:13 -07:00
David Dworken	5539ce8510	Fix file path	2022-06-03 21:12:15 -07:00
David Dworken	17b569756a	Maybe this works since this is the commit associated with the tag?:	2022-06-03 21:09:59 -07:00
David Dworken	b1bdf8b7da	Specify a version tag since f9e31da2a5 now requires that we use a tagged version	2022-06-03 21:01:53 -07:00
David Dworken	4cb4e5176a	Try executing in sequence	2022-05-28 09:34:53 -07:00
David Dworken	3bb8d74358	CHeck if it is the config-file directive that is messing up the hash	2022-05-28 09:29:56 -07:00
David Dworken	fa32a1af07	Check if the task name is part of the hash	2022-05-28 09:24:31 -07:00
David Dworken	2f8727f29b	A new way of releasing, taking advantage of config-file to avoid having to create a new commit per platform	2022-05-28 00:01:38 -07:00
David Dworken	a6476c1bf4	Update permissions	2022-05-27 23:30:49 -07:00
David Dworken	798fe48585	envs --> evaluated-envs to match updated slsa builder	2022-05-27 23:28:01 -07:00
David Dworken	adb20f1bb2	Upgrade slsa releaser action	2022-05-27 23:21:45 -07:00
David Dworken	64d4c211b4	Trigger cron from github actions	2022-05-27 22:48:13 -07:00
David Dworken	c467411db3	Enable running action tests via manual trigger	2022-05-27 18:52:09 -07:00
David Dworken	ea6be650ba	Export the unsigned files for a new theory on how SLSA verification can be done	2022-05-26 23:09:00 -07:00
David Dworken	647f6a8924	More debugging info for the releaser action	2022-05-26 22:24:56 -07:00
David Dworken	b8ecb33deb	Add more debugging information to signing workflow	2022-05-26 21:57:16 -07:00
David Dworken	750e2179c5	Add explicit permissions to allow writes	2022-05-26 21:42:09 -07:00
David Dworken	d4caef9c3d	Fix release filenames	2022-05-24 22:26:24 -07:00
David Dworken	9276fea4ba	Tweak the workflow order so signing runs after upload	2022-05-24 08:46:24 -07:00
David Dworken	d4d2b8e852	actions don't use python3 by default?	2022-05-23 23:31:57 -07:00
David Dworken	d7b6cc4caa	install requests which isn't installed by default in actions	2022-05-23 23:29:29 -07:00
David Dworken	6906eb942a	Fix accidentally deleted comment	2022-05-23 23:26:59 -07:00
David Dworken	8e2785e580	MIgrate to a python script for signign	2022-05-23 23:25:12 -07:00
David Dworken	344047e735	Fix github action reference	2022-05-23 18:27:27 -07:00
David Dworken	a679a770de	Fix typo	2022-05-23 18:25:36 -07:00
David Dworken	1ee8e1bca7	Fix typo	2022-05-23 18:24:23 -07:00
David Dworken	69317e0a85	Delete separate signer and start the work of merging it into the SLSA releaser action	2022-05-23 18:22:03 -07:00
David Dworken	59ed3dd9e4	A new approach to signing	2022-05-23 17:56:51 -07:00
David Dworken	76d139bb5a	Add GITHUB_TOKEN auth	2022-05-23 08:59:50 -07:00
David Dworken	cb1e69958a	Why are the binaries ASCII???	2022-05-23 08:57:55 -07:00
David Dworken	e8c8d4f0ad	Add error case for TAG_NAME==null	2022-05-23 08:48:22 -07:00
David Dworken	cb72e0a830	Fix URL	2022-05-23 08:45:12 -07:00
David Dworken	89df994933	Add more debugging output	2022-05-23 08:43:43 -07:00
David Dworken	f7a37aa97c	Update triggers and remove sleep that is not needed for remaining trigger types	2022-05-23 08:40:47 -07:00
David Dworken	677b596d49	Debugging code signing, added error checking for my xattr code and discovered that arm xattrs aren't being persisted	2022-05-22 20:08:30 -07:00