slsa-framework / slsa-verifier

Verify provenance from SLSA compliant builders
Apache License 2.0
216 stars 45 forks source link

feat: Update verifier version in GHA installer #747

Closed laurentsimon closed 3 months ago

laurentsimon commented 3 months ago

This is part of the release tests in https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md#dry-run to verify that the Action installer works.

A follow up PR will be sent prior to release to update to v2.5.0

laurentsimon commented 3 months ago

@kpk47 Can you please verify the hash used in this PR using the same process as what's described in https://github.com/slsa-framework/slsa-verifier/pull/748?

For audibility, I would like to keep a record that we've looked at them

kpk47 commented 3 months ago

I checked the digests. LGTM

laurentsimon commented 3 months ago

Thanks. Lets wait overnight to validate that e2e tests pass. Then I'll update the release and mark it as latest release.