mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-02-14 17:49:58 +00:00

Files

laurentsimon e986dfc0ff feat: Digest for new release (#722 )

#label:release v2.4.1

How to LGTM this PR:

Ensure you have installed the GitHub client from https://cli.github.com.
If it is not installed in your `PATH`, set `export GH=/path/to/your/gh`

Set your `export GH_TOKEN=...`

Use [verify-release.sh](./verify-release.sh) script in this repository:
```
bash verify-release v2.4.1
```

Once it completes, you will see the last line `Verifying artifact
/tmp/tmp.SomeRanDOm/` and do:
```bash
sha256sum /tmp/tmp.SomeRanDOm/* | grep -v intoto
```

This will print out the hashes. Compare them to the changes in this PR

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>

2023-11-07 17:23:25 -08:00

dist

chore: bump versions (#715 )

2023-10-10 00:27:33 +00:00

spec

Add a GitHub Action for installing slsa-verifier. (#246 )

2022-09-22 18:58:40 +00:00

src

fix: command in installer Action (#396 )

2022-12-08 22:32:57 +00:00

.eslintignore

Add a GitHub Action for installing slsa-verifier. (#246 )

2022-09-22 18:58:40 +00:00

.eslintrc.json

Add a GitHub Action for installing slsa-verifier. (#246 )

2022-09-22 18:58:40 +00:00

.gitignore

Add a GitHub Action for installing slsa-verifier. (#246 )

2022-09-22 18:58:40 +00:00

.prettierignore

Add a GitHub Action for installing slsa-verifier. (#246 )

2022-09-22 18:58:40 +00:00

action.yml

Make GitHub token optional (#324 )

2022-10-25 11:04:34 +00:00

CODEOWNERS

Add codeowners (#401 )

2022-12-14 03:05:04 +00:00

Makefile

Update pre-submits (#289 )

2022-10-03 09:58:15 -05:00

package-lock.json

chore: bump versions (#715 )

2023-10-10 00:27:33 +00:00

package.json

chore(deps): update npm dev (#608 )

2023-06-12 13:47:38 +09:00

README.md

feat: Digest for new release (#722 )

2023-11-07 17:23:25 -08:00

tsconfig.json

Add a GitHub Action for installing slsa-verifier. (#246 )

2022-09-22 18:58:40 +00:00

README.md

slsa-verifier setup GitHub Action

This action installs the SLSA verifier and adds it to your PATH.

For more information about slsa-verifier, refer to its documentation.

For more information about SLSA in general, see https://slsa.dev.

Usage

To install a specific version of slsa-verifier, use:

uses: slsa-framework/slsa-verifier/actions/installer@v2.4.1

See https://github.com/slsa-framework/slsa-verifier/releases for the list of available slsa-verifier releases. Only versions greater or equal to 2.0.1 are supported.

This action requires using GitHub-provided Linux runners.