Skip to content

Commit 52d5668

Browse files
laurentsimonramonpetgrave64
authored andcommitted
chore: Update doc and digests for v2.5.1 (slsa-framework#748)
This sets the expected sha256 of the v2.5.1 slsa-verifier released binary. How to LGTM this PR (I'll work on a proper doc for this in slsa-framework/slsa-github-generator#112): 1. Download the binary and provenance from https://github.com/slsa-framework/slsa-verifier/releases/tag/v0.0.1 2. Clone the slsa-verifier repo, compile and verify the provenance using the steps described in https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md#verify-provenance ``` $ git clone [email protected]:slsa-framework/slsa-verifier.git $ cd slsa-verifier $ bash verify-release.sh v2.5.1 ``` The output hash should be the hash I'm updating to in this PR. If they match, LGTM. If they don't, someone tampered with the released binary and don't LGTM --------- Signed-off-by: laurentsimon <[email protected]> Signed-off-by: Ramon Petgrave <[email protected]>
1 parent 7d125b5 commit 52d5668

File tree

3 files changed

+14
-4
lines changed

3 files changed

+14
-4
lines changed

README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -98,7 +98,7 @@ You have two options to install the verifier.
9898
If you want to install the verifier, you can run the following command:
9999

100100
```bash
101-
$ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.4.1
101+
$ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.5.1
102102
$ slsa-verifier <options>
103103
```
104104

@@ -144,7 +144,7 @@ $ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier
144144

145145
```bash
146146
$ git clone [email protected]:slsa-framework/slsa-verifier.git
147-
$ cd slsa-verifier && git checkout v2.4.1
147+
$ cd slsa-verifier && git checkout v2.5.1
148148
$ go run ./cli/slsa-verifier <options>
149149
```
150150

@@ -154,7 +154,7 @@ If you need to install the verifier to run in a GitHub workflow, use the install
154154

155155
### Download the binary
156156

157-
Download the binary from the latest release at [https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.4.1](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.4.1)
157+
Download the binary from the latest release at [https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.5.1](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.5.1)
158158

159159
Download the [SHA256SUM.md](https://github.com/slsa-framework/slsa-verifier/blob/main/SHA256SUM.md).
160160

SHA256SUM.md

+10
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,13 @@
1+
### [v2.5.1](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.5.1)
2+
3+
6246ff80cbd3d272bf843d72d1562cafb7c59b45b5b555fbee92df90547b4256 slsa-verifier-darwin-amd64
4+
a4da3c85025f31f8a6de09c8261ec1c0793299fd82bc225c9608b0413083354f slsa-verifier-darwin-arm64
5+
54e4f40bf120bce1cef1ff123fef3456e8c526f315c47e22ed6acfe02a06b9a8 slsa-verifier-linux-amd64
6+
5dd8a396c285c4d0d66dcb4eff82c12cd388049106aacd4f2552546f85100064 slsa-verifier-linux-arm64
7+
e635c8f27d9a485cae3c9846550511fef78ed2b57902ef62ad49d37e1df22e98 slsa-verifier-windows-amd64.exe
8+
9b08bc2ba25a84e06ecfeecdcabc7e8339da15d272cfd647aa7e3f7f09cb55d5 slsa-verifier-windows-arm64.exe
9+
10+
111
### [v2.4.1](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.4.1)
212

313
69fa1ea5bb734e765aae1fa855f50e823c2b90b019994610960b7eb3c83feeb3 slsa-verifier-darwin-amd64

actions/installer/README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ For more information about SLSA in general, see [https://slsa.dev](https://slsa.
1111
To install a specific version of `slsa-verifier`, use:
1212

1313
```yaml
14-
uses: slsa-framework/slsa-verifier/actions/installer@v2.4.1
14+
uses: slsa-framework/slsa-verifier/actions/installer@v2.5.1
1515
```
1616
1717
See https://github.com/slsa-framework/slsa-verifier/releases for the list of available `slsa-verifier` releases. Only versions greater or equal to 2.0.1 are supported.

0 commit comments

Comments
 (0)