Skip to content

Commit

Permalink
Add a cosign command to release notes
Browse files Browse the repository at this point in the history
  • Loading branch information
mendhak committed Nov 6, 2024
1 parent 38158b9 commit ba7bc74
Showing 1 changed file with 5 additions and 4 deletions.
9 changes: 5 additions & 4 deletions .github/workflows/generate-release-apk.yml
Original file line number Diff line number Diff line change
Expand Up @@ -64,9 +64,10 @@ jobs:
gpslogger/gpslogger-*.apk.SHA256
gpslogger/cosign.bundle
- name: Get APK file name
id: apk_file_name
run: |
APK_FILE_NAME=$(find gpslogger/ -maxdepth 1 -name "gpslogger-*.apk" -print -quit | xargs basename)
echo "APK_FILE_NAME=$APK_FILE_NAME" >> $GITHUB_ENV
echo "APK_FILE_NAME=$APK_FILE_NAME" >> "$GITHUB_OUTPUT"
- name: Create a Release
id: create-release
uses: softprops/action-gh-release@v2
Expand All @@ -76,9 +77,9 @@ jobs:
make_latest: true
body: |
Verification:
```
cosign verify-blob $APK_FILE_NAME --bundle cosign.bundle --new-bundle-format --cert-oidc-issuer https://token.actions.githubusercontent.com --cert-identity https://github.com/${GITHUB_WORKFLOW_REF}
```
cosign verify-blob ${{ steps.apk_file_name.outputs.APK_FILE_NAME }} --bundle cosign.bundle --new-bundle-format --cert-oidc-issuer https://token.actions.githubusercontent.com --cert-identity https://github.com/${GITHUB_WORKFLOW_REF}
files: |
gpslogger/gpslogger-*.apk
Expand Down

0 comments on commit ba7bc74

Please sign in to comment.