From 2e7cc3ed747b231d2e728d5c1c9a763b95635098 Mon Sep 17 00:00:00 2001 From: rcmadhankumar Date: Wed, 27 Dec 2023 22:29:32 +0530 Subject: [PATCH] string updated --- .github/workflows/release-process.yml | 28 +++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/release-process.yml b/.github/workflows/release-process.yml index be099e86f..4d5b1b560 100644 --- a/.github/workflows/release-process.yml +++ b/.github/workflows/release-process.yml @@ -200,16 +200,16 @@ jobs: \`\`\`shell # Download the checksums file, certificate, and signature - curl -LO https://github.com\${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download/${{ github.event.release.tag_name }}/checksums.txt - curl -LO https://github.com\${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download/${{ github.event.release.tag_name }}/checksums.txt.pem - curl -LO https://github.com\${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download/${{ github.event.release.tag_name }}/checksums.txt.sig + curl -LO https://github.com/${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download/$RELEASE_TAG/checksums.txt + curl -LO https://github.com/${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download//$RELEASE_TAG/checksums.txt.pem + curl -LO https://github.com/${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download//$RELEASE_TAG/checksums.txt.sig # Verify the checksums file cosign verify-blob checksums.txt \ - --certificate checksums.txt.pem \ - --signature checksums.txt.sig \ - --certificate-identity-regexp=https://github.com/${{ github.repository_owner }} \ - --certificate-oidc-issuer=https://token.actions.githubusercontent.com + --certificate checksums.txt.pem \ + --signature checksums.txt.sig \ + --certificate-identity-regexp=https://github.com/${{ github.repository_owner }} \ + --certificate-oidc-issuer=https://token.actions.githubusercontent.com \`\`\` ### Verify binary integrity @@ -218,7 +218,7 @@ jobs: \`\`\`shell # Download the binary - curl -LO https://github.com/${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download/${{ github.event.release.tag_name }}/kctrl-linux-amd64 + curl -LO https://github.com/${{ github.repository_owner }}/${{ github.event.repository.name }}/releases/download/$RELEASE_TAG/kctrl-linux-amd64 # Verify the binary using the checksums file sha256sum -c checksums.txt --ignore-missing @@ -240,15 +240,15 @@ jobs: \`\`\`shell # Verifying kapp-controller image cosign verify $KAPP_CONTROLLER_IMAGE \ - --certificate-identity-regexp=https://github.com/${{ github.repository_owner }} \ - --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ - -o text + --certificate-identity-regexp=https://github.com/${{ github.repository_owner }} \ + --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ + -o text # Verifying kapp-controller-package-bundle image cosign verify $KAPP_CONTROLLER_PACKAGE_BUNDLE_IMAGE \ - --certificate-identity-regexp=https://github.com/${{ github.repository_owner }} \ - --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ - -o text + --certificate-identity-regexp=https://github.com/${{ github.repository_owner }} \ + --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ + -o text \ \`\`\` "