Skip to content

Commit c526669

Browse files
committed
build: add sigstore release step
1 parent 714a927 commit c526669

1 file changed

Lines changed: 6 additions & 2 deletions

File tree

.github/workflows/release.yml

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -113,23 +113,27 @@ jobs:
113113
$hash = (Get-FileHash ${{ matrix.asset_name }}${{ matrix.ext }} -Algorithm SHA256).Hash.ToLower()
114114
"$hash ${{ matrix.asset_name }}${{ matrix.ext }}" | Out-File -Encoding ascii ${{ matrix.asset_name }}${{ matrix.ext }}.sha256
115115
116-
- name: Sign artifact (ephemeral, Unix)
116+
- name: Sign artifact and log to Sigstore (ephemeral, Unix)
117117
if: matrix.ext == '.tar.gz'
118118
run: |
119119
FILE="${{ matrix.asset_name }}${{ matrix.ext }}"
120120
./staging/auths artifact sign "$FILE" \
121121
--ci \
122122
--commit "${{ github.sha }}" \
123+
--ci-platform github \
124+
--log sigstore-rekor \
123125
--note "Release ${{ github.ref_name }}"
124126
125-
- name: Sign artifact (ephemeral, Windows)
127+
- name: Sign artifact and log to Sigstore (ephemeral, Windows)
126128
if: matrix.ext == '.zip'
127129
shell: pwsh
128130
run: |
129131
$file = "${{ matrix.asset_name }}${{ matrix.ext }}"
130132
.\staging\auths.exe artifact sign $file `
131133
--ci `
132134
--commit $env:GITHUB_SHA `
135+
--ci-platform github `
136+
--log sigstore-rekor `
133137
--note "Release ${{ github.ref_name }}"
134138
135139
- name: Upload artifact

0 commit comments

Comments
 (0)