Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: verify checksum files using minisign #3103

Merged
merged 20 commits into from
Sep 22, 2024
Merged

Conversation

suzuki-shunsuke
Copy link
Member

@suzuki-shunsuke suzuki-shunsuke commented Sep 22, 2024

Close #3072

        checksum:
          type: github_release
          asset: sha256.txt
          algorithm: sha256
          minisign:
            type: github_release
            asset: sha256.txt.minisig
            public_key: RWQ/i9xseZwBVE7pEniCNjlNOeeyp4BQgdZDLQcAohxEAH5Uj5DEKjv6
$ buf --version 
INFO[0000] download and unarchive the package            aqua_version= env=darwin/arm64 exe_name=buf package_name=bufbuild/buf package_version=v1.39.0 program=aqua registry=standard
Downloading bufbuild/buf v1.39.0 100% |██████████████████████████████████████████████████████████████████████████| (21/21 MB, 37 MB/s)        
INFO[0001] downloading a checksum file                   aqua_version= env=darwin/arm64 exe_name=buf package_name=bufbuild/buf package_version=v1.39.0 program=aqua registry=standard
INFO[0002] verifing a checksum file with Minisign        aqua_version= env=darwin/arm64 exe_name=buf package_name=bufbuild/buf package_version=v1.39.0 program=aqua registry=standard
Signature and comment signature verified
Trusted comment: timestamp:1724798581	filename:sha256.txt
1.39.0

@suzuki-shunsuke suzuki-shunsuke added the enhancement New feature or request label Sep 22, 2024
@suzuki-shunsuke suzuki-shunsuke added this to the v2.34.0 milestone Sep 22, 2024
@suzuki-shunsuke suzuki-shunsuke linked an issue Sep 22, 2024 that may be closed by this pull request
@suzuki-shunsuke
Copy link
Member Author

@suzuki-shunsuke
Copy link
Member Author

@suzuki-shunsuke
Copy link
Member Author

@suzuki-shunsuke
Copy link
Member Author

@suzuki-shunsuke
Copy link
Member Author

@suzuki-shunsuke suzuki-shunsuke marked this pull request as ready for review September 22, 2024 14:26
@suzuki-shunsuke suzuki-shunsuke merged commit 0c0cba1 into main Sep 22, 2024
15 checks passed
@suzuki-shunsuke suzuki-shunsuke deleted the feat-minisign-checksum branch September 22, 2024 14:26
suzuki-shunsuke added a commit to aquaproj/aqua-registry that referenced this pull request Sep 22, 2024
* feat(bufbuild/buf): add minisign config

* chore: update aqua to v2.34.0-1

- https://github.com/aquaproj/aqua/releases/tag/v2.34.0-1
- aquaproj/aqua#3103

* chore: update aqua to v2.34.0-2

* fix(bufbuild/buf): fix the indentation

* chore: update aqua to v2.34.0-4

* chore: update aqua to v2.34.0-5

* chore: update aqua to v2.34.0

---------

Co-authored-by: Shunsuke Suzuki <[email protected]>
Co-authored-by: Shunsuke Suzuki <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Verify checksum file with minisign
1 participant