siderolabs/kres
1
0
Fork 0
mirror of https://github.com/siderolabs/kres.git synced 2026-02-05 09:45:35 +01:00
Code Issues Activity

fix: checksum sign step

Browse Source 
There was a missing `cd _out` which breaks it.

Also use `--output-signature` flag, as `--output` got deprecated.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
This commit is contained in:
Andrey Smirnov
2025-07-22 20:30:06 +04:00
parent b869533c29
commit 4c6b4c05c6
3 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/ci.yaml vendored
View File

@@ -1,6 +1,6 @@
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
#
# Generated on 2025-07-11T14:48:24Z by kres 17000452-dirty.
# Generated on 2025-07-22T16:29:55Z by kres b869533-dirty.
concurrency:
group: ${{ github.head_ref || github.run_id }}
@@ -119,7 +119,7 @@ jobs:
- name: Sign artifacts
if: startsWith(github.ref, 'refs/tags/')
run: |
find _out -type f -name _out/kres-* -exec cosign sign-blob --yes --output {}.sig {} \;
find _out -type f -name _out/kres-* -exec cosign sign-blob --yes --output-signature {}.sig {} \;
- name: Generate Checksums
if: startsWith(github.ref, 'refs/tags/')
run: |

7
internal/project/common/gh_workflow.go
View File

@@ -291,7 +291,7 @@ func (gh *GHWorkflow) CompileGitHubWorkflow(o *ghworkflow.Output) error {
jobDef.Steps = append(jobDef.Steps, cosignStep)
signCommands := xslices.Map(artifacts, func(artifact string) string {
return fmt.Sprintf("cosign sign-blob --output %s.sig --yes %s", artifact, artifact)
return fmt.Sprintf("cosign sign-blob --output-signature %s.sig --yes %s", artifact, artifact)
})
signStep := ghworkflow.Step("Sign artifacts").
@@ -321,8 +321,9 @@ func (gh *GHWorkflow) CompileGitHubWorkflow(o *ghworkflow.Output) error {
if step.ReleaseStep.GenerateSignatures {
checkSumSignCommands := []string{
"cosign sign-blob --output sha256sum.txt.sig --yes sha256sum.txt",
"cosign sign-blob --output sha512sum.txt.sig --yes sha512sum.txt",
fmt.Sprintf("cd %s", step.ReleaseStep.BaseDirectory),
"cosign sign-blob --output-signature sha256sum.txt.sig --yes sha256sum.txt",
"cosign sign-blob --output-signature sha512sum.txt.sig --yes sha512sum.txt",
}
signStep := ghworkflow.Step("Sign checksums").

2
internal/project/common/release.go
View File

@@ -103,7 +103,7 @@ func (release *Release) CompileGitHubWorkflow(output *ghworkflow.Output) error {
}
signCommands := xslices.Map(artifacts, func(artifact string) string {
return fmt.Sprintf("find %s -type f -name %s -exec cosign sign-blob --yes --output {}.sig {} \\;", release.meta.ArtifactsPath, artifact)
return fmt.Sprintf("find %s -type f -name %s -exec cosign sign-blob --yes --output-signature {}.sig {} \\;", release.meta.ArtifactsPath, artifact)
})
signStep := ghworkflow.Step("Sign artifacts").