Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CI] Attest build artifacts #193

Closed
iamazeem opened this issue Sep 4, 2024 · 3 comments · Fixed by #197
Closed

[CI] Attest build artifacts #193

iamazeem opened this issue Sep 4, 2024 · 3 comments · Fixed by #197
Assignees
Labels
enhancement New feature or request

Comments

@iamazeem
Copy link
Collaborator

iamazeem commented Sep 4, 2024

Reference: https://github.blog/news-insights/product-news/introducing-artifact-attestations-now-in-public-beta/

@iamazeem iamazeem added the enhancement New feature or request label Sep 4, 2024
@iamazeem iamazeem self-assigned this Sep 4, 2024
@iamazeem
Copy link
Collaborator Author

@iamazeem
Copy link
Collaborator Author

iamazeem commented Sep 27, 2024

Verified locally and it's working fine!

Steps:

  • Downloaded artifacts from the PR ([CI] Attest build artifacts #197).
  • Unzipped to an artifacts directory.
  • Verified with gh attestation verify <path-to-download-artifact> --repo liquidaty/zsv command.
  • Verification succeeded!
  • Tempered the include/zsv.h file in some archives.
  • Reran the verification command.
  • Verification failed!
  • Restoring the include/zsv.h file also made the verification failed.

@iamazeem
Copy link
Collaborator Author

iamazeem commented Oct 3, 2024

Added note in README with 0f9e186.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant