fix: command in installer Action (#396)

* update

Signed-off-by: laurentsimon <[email protected]>

Author: laurentsimon

actions/installer/dist/index.js

@@ -179,10 +179,10 @@ function run() {
         // Validate binary provenance
         try {
             const { exitCode, stdout, stderr } = yield exec.getExecOutput(`${bootstrapVerifierPath}`, [
-                `-artifact-path=${downloadedBinaryPath}`,
-                `-provenance=${downloadedProvenancePath}`,
-                `-source=github.com/slsa-framework/slsa-verifier`,
-                `-tag=${version}`,
+                "verify-artifact", downloadedBinaryPath,
+                "--provenance-path", downloadedProvenancePath,
+                "--source-uri", "github.com/slsa-framework/slsa-verifier",
+                "--source-tag", version,
             ]);
             if (exitCode !== 0) {
                 throw new Error(`Unable to verify binary provenance. Aborting installation. stdout: ${stdout}; stderr: ${stderr}`);

actions/installer/dist/index.js.map

@@ -167,10 +167,14 @@ async function run(): Promise<void> {
     const { exitCode, stdout, stderr } = await exec.getExecOutput(
       `${bootstrapVerifierPath}`,
       [
-        `-artifact-path=${downloadedBinaryPath}`,
-        `-provenance=${downloadedProvenancePath}`,
-        `-source=github.com/slsa-framework/slsa-verifier`,
-        `-tag=${version}`,
+        "verify-artifact",
+        downloadedBinaryPath,
+        "--provenance-path",
+        downloadedProvenancePath,
+        "--source-uri",
+        "github.com/slsa-framework/slsa-verifier",
+        "--source-tag",
+        version,
       ]
     );
     if (exitCode !== 0) {