mirror of
https://github.com/slsa-framework/slsa-verifier.git
synced 2026-05-11 11:06:38 +00:00
d96b977709
#label:release v2.6.0 # How to Verify Clone the repo and run the script described in https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md#verify-provenance. ``` $ git clone git@github.com:slsa-framework/slsa-verifier.git $ cd slsa-verifier $ bash verify-release.sh v2.6.0 ``` This will download the release files and verify the binaries. Confirm that the output hashes matches those in this PR's SHA256SUM.md - https://github.com/slsa-framework/slsa-verifier/pull/789/files#diff-7834ca792905514302a0630d1c57dc1d330569a18fc2fff4aac6129efb00f4ccR1-R8 --------- Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com> Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
slsa-verifier setup GitHub Action
This action installs the SLSA verifier and adds it to your PATH.
For more information about slsa-verifier, refer to its documentation.
For more information about SLSA in general, see https://slsa.dev.
Usage
To install a specific version of slsa-verifier, use:
uses: slsa-framework/slsa-verifier/actions/installer@v2.6.0
See https://github.com/slsa-framework/slsa-verifier/releases for the list of available slsa-verifier releases. Only versions greater or equal to 2.0.1 are supported.
This action requires using GitHub-provided Linux runners.