79 Commits

Author	SHA1	Message	Date
David Dworken	798fe48585	envs --> evaluated-envs to match updated slsa builder	2022-05-27 23:28:01 -07:00
David Dworken	adb20f1bb2	Upgrade slsa releaser action	2022-05-27 23:21:45 -07:00
David Dworken	64d4c211b4	Trigger cron from github actions	2022-05-27 22:48:13 -07:00
David Dworken	c467411db3	Enable running action tests via manual trigger	2022-05-27 18:52:09 -07:00
David Dworken	ea6be650ba	Export the unsigned files for a new theory on how SLSA verification can be done	2022-05-26 23:09:00 -07:00
David Dworken	647f6a8924	More debugging info for the releaser action	2022-05-26 22:24:56 -07:00
David Dworken	b8ecb33deb	Add more debugging information to signing workflow	2022-05-26 21:57:16 -07:00
David Dworken	750e2179c5	Add explicit permissions to allow writes	2022-05-26 21:42:09 -07:00
David Dworken	d4caef9c3d	Fix release filenames	2022-05-24 22:26:24 -07:00
David Dworken	9276fea4ba	Tweak the workflow order so signing runs after upload	2022-05-24 08:46:24 -07:00
David Dworken	d4d2b8e852	actions don't use python3 by default?	2022-05-23 23:31:57 -07:00
David Dworken	d7b6cc4caa	install requests which isn't installed by default in actions	2022-05-23 23:29:29 -07:00
David Dworken	6906eb942a	Fix accidentally deleted comment	2022-05-23 23:26:59 -07:00
David Dworken	8e2785e580	MIgrate to a python script for signign	2022-05-23 23:25:12 -07:00
David Dworken	344047e735	Fix github action reference	2022-05-23 18:27:27 -07:00
David Dworken	a679a770de	Fix typo	2022-05-23 18:25:36 -07:00
David Dworken	1ee8e1bca7	Fix typo	2022-05-23 18:24:23 -07:00
David Dworken	69317e0a85	Delete separate signer and start the work of merging it into the SLSA releaser action	2022-05-23 18:22:03 -07:00
David Dworken	59ed3dd9e4	A new approach to signing	2022-05-23 17:56:51 -07:00
David Dworken	76d139bb5a	Add GITHUB_TOKEN auth	2022-05-23 08:59:50 -07:00
David Dworken	cb1e69958a	Why are the binaries ASCII???	2022-05-23 08:57:55 -07:00
David Dworken	e8c8d4f0ad	Add error case for TAG_NAME==null	2022-05-23 08:48:22 -07:00
David Dworken	cb72e0a830	Fix URL	2022-05-23 08:45:12 -07:00
David Dworken	89df994933	Add more debugging output	2022-05-23 08:43:43 -07:00
David Dworken	f7a37aa97c	Update triggers and remove sleep that is not needed for remaining trigger types	2022-05-23 08:40:47 -07:00
David Dworken	677b596d49	Debugging code signing, added error checking for my xattr code and discovered that arm xattrs aren't being persisted	2022-05-22 20:08:30 -07:00
David Dworken	edcf92e899	Fix bad merge for macos signing	2022-05-22 18:15:16 -07:00
David Dworken	cc6cf07729	Another attempt at correct signing/releasing for macos	2022-05-22 18:12:32 -07:00
David Dworken	4cb5773632	Add hex parsing for xattr setting + log rather than error when offline	2022-04-28 09:51:01 -07:00
David Dworken	eed2459d99	Run signer on push and have it sleep	2022-04-25 22:23:05 -07:00
David Dworken	b0f680c1a8	Another attempt at xattr exporting	2022-04-25 21:40:02 -07:00
David Dworken	257f5df7e8	Another attempt at xattr exporting	2022-04-25 21:28:22 -07:00
David Dworken	cda9536abf	More xattr debugging	2022-04-25 21:21:31 -07:00
David Dworken	cdcb013511	More debugging output	2022-04-25 21:08:24 -07:00
David Dworken	2d91b6bf48	Can only release when there is a tag	2022-04-25 20:15:28 -07:00
David Dworken	5a5759c691	Better xattr dumping	2022-04-25 20:13:31 -07:00
David Dworken	15e186c46d	Fix releasing xattr files	2022-04-25 20:09:00 -07:00
David Dworken	76bdad0b78	Fix incorrect uses call	2022-04-24 22:05:18 -07:00
David Dworken	ba2bfc18d3	Release the xattrs containing the code signatures	2022-04-24 22:04:16 -07:00
David Dworken	ecbd149593	Brew install sha1sum	2022-04-24 21:50:03 -07:00
David Dworken	c9e062ec67	Add debugging prints	2022-04-24 21:48:06 -07:00
David Dworken	8c4049b101	Fix double @@ typo	2022-04-24 21:10:18 -07:00
David Dworken	1aa08a3a4d	Turns out slsa verifier hasn't been updated yet, see https://github.com/slsa-framework/slsa-verifier/pull/37	2022-04-24 21:07:20 -07:00
David Dworken	aa806878ed	Rename slsa builder file since the upstream repo renamed it	2022-04-24 20:46:48 -07:00
David Dworken	a60785955a	Update workflow name	2022-04-24 20:39:40 -07:00
David Dworken	7fbe888059	Whoops, same messed up dash as before	2022-04-24 20:36:46 -07:00
David Dworken	a98c31be46	Swap the cert to be encrypted with a password	2022-04-24 20:34:44 -07:00
David Dworken	b853973db1	Run commands in one step to reduce waiting time	2022-04-24 10:06:06 -07:00
David Dworken	bcbb6eaf28	Fix CLI arg to base 64 decode	2022-04-24 09:45:15 -07:00
David Dworken	5a31c6f96b	Enable manually running the sign workflow	2022-04-24 09:42:12 -07:00