fix: command in installer Action (#396)

* update Signed-off-by: laurentsimon <[email protected]>
slsa-framework · Dec 8, 2022 · a438882 · a438882
1 parent 901c5f7
commit a438882
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 9 deletions.
diff --git a/actions/installer/dist/index.js b/actions/installer/dist/index.js
@@ -179,10 +179,10 @@ function run() {
         // Validate binary provenance
         try {
             const { exitCode, stdout, stderr } = yield exec.getExecOutput(`${bootstrapVerifierPath}`, [
-                `-artifact-path=${downloadedBinaryPath}`,
-                `-provenance=${downloadedProvenancePath}`,
-                `-source=github.com/slsa-framework/slsa-verifier`,
-                `-tag=${version}`,
+                "verify-artifact", downloadedBinaryPath,
+                "--provenance-path", downloadedProvenancePath,
+                "--source-uri", "github.com/slsa-framework/slsa-verifier",
+                "--source-tag", version,
             ]);
             if (exitCode !== 0) {
                 throw new Error(`Unable to verify binary provenance. Aborting installation. stdout: ${stdout}; stderr: ${stderr}`);

diff --git a/actions/installer/dist/index.js.map b/actions/installer/dist/index.js.map
diff --git a/actions/installer/src/index.ts b/actions/installer/src/index.ts
@@ -167,10 +167,14 @@ async function run(): Promise<void> {
     const { exitCode, stdout, stderr } = await exec.getExecOutput(
       `${bootstrapVerifierPath}`,
       [
-        `-artifact-path=${downloadedBinaryPath}`,
-        `-provenance=${downloadedProvenancePath}`,
-        `-source=github.com/slsa-framework/slsa-verifier`,
-        `-tag=${version}`,
+        "verify-artifact",
+        downloadedBinaryPath,
+        "--provenance-path",
+        downloadedProvenancePath,
+        "--source-uri",
+        "github.com/slsa-framework/slsa-verifier",
+        "--source-tag",
+        version,
       ]
     );
     if (exitCode !== 0) {