search

slsa-framework / slsa-verifier

Verify provenance from SLSA compliant builders
Apache License 2.0
216 stars 45 forks source link

fix: make download-artifacts.sh more flexible #761

Closed ramonpetgrave64 closed 1 week ago

ramonpetgrave64 commented 2 months ago

Making the download-artifacts.sh script be more useful.

Before, it would error upon seeing some zip files that it doesn't expect to be in the GH release. I think the script is just a bit outdated. But for now, I think we should bypass that, since the script is already written to know which of the final files within the archives are actually needed.

related PR https://github.com/slsa-framework/slsa-github-generator/pull/3589

ramonpetgrave64 commented 2 months ago

@mihaimaruseac

ramonpetgrave64 commented 1 month ago

@ianlewis