project-oak / oak

Meaningful control of data in distributed systems.
Apache License 2.0
1.3k stars 112 forks source link

Resolve transparent release binary filename issues #5004

Closed jul-sh closed 5 months ago

jul-sh commented 6 months ago

The tag under which provenances are uploaded must match the binary names defined in kokoro/build_binaries_rust.sh. Our existing logic derives the tag using the filename of the binary artifact. This creates an implicit, global, and unchangeable namespace for the filename of binary artifacts we import with TR.

Recent prior PRs had renamed a binary artifact of the restricted kernel.

As @thmsbinder correctly identified in #5001, this inadvertently led to an invisible collision in this implicit namespace.

This PR remedies this, by restoring the original filename of the binary artifact.