From 01bbd539f1e2d549bd93f0276e16a9db99739b6e Mon Sep 17 00:00:00 2001 From: laurentsimon <64505099+laurentsimon@users.noreply.github.com> Date: Wed, 15 Mar 2023 18:31:31 -0700 Subject: [PATCH] Update release.yml (#1601) --- .github/workflows/release.yml | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index abdaad321..9ca58eca7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -50,8 +50,6 @@ jobs: runs-on: ubuntu-latest permissions: read-all steps: - # Note: this will be replaced with the GHA in the future. - # See https://github.com/slsa-framework/slsa-verifier/issues/95 - name: Install SLSA verifier uses: slsa-framework/slsa-verifier/actions/installer@v2.0.1 - name: Download assets @@ -71,8 +69,8 @@ jobs: while read -r line; do fn=$(echo $line | cut -d ' ' -f2) echo "Verifying $fn" - ./slsa-verifier-linux-amd64 -artifact-path "$fn" \ - -provenance "$PROVENANCE" \ - -source "github.com/$GITHUB_REPOSITORY" \ - -tag "$GITHUB_REF_NAME" + slsa-verifier verify-artifact "$fn" \ + --provenance-path "$PROVENANCE" \ + --source-uri "github.com/$GITHUB_REPOSITORY" \ + --source-tag "$GITHUB_REF_NAME" done <<<"$checksums"