From 9b9ddcd1daeb4ee278be7b7a160e89b31b31dedf Mon Sep 17 00:00:00 2001 From: Meredith Lancaster Date: Wed, 6 Mar 2024 13:35:55 -0700 Subject: [PATCH] fix command Signed-off-by: Meredith Lancaster --- .../download-and-verify-package-attestation.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/test/integration/attestation-cmd/download-and-verify-package-attestation.sh b/test/integration/attestation-cmd/download-and-verify-package-attestation.sh index cb54f66e9..d2ce78005 100755 --- a/test/integration/attestation-cmd/download-and-verify-package-attestation.sh +++ b/test/integration/attestation-cmd/download-and-verify-package-attestation.sh @@ -20,16 +20,18 @@ curl -s $packageURL -o $packageFile curl -s $attestationURL | jq '.attestations[1].bundle' > $attestationFile # Verify the package with the --owner flag -$ghVerifyBuildPath $packageFile -b $attestationFile --digest-alg=sha512 --owner=sigstore +$ghBuildPath attestation verify $packageFile -b $attestationFile --digest-alg=sha512 --owner=sigstore if [ $? -ne 0 ]; then # cleanup test data + echo "Failed to verify package with --owner flag" rm $packageFile $attestationFile exit 1 fi -$ghVerifyBuildPath $packageFile -b $attestationFile --digest-alg=sha512 --repo=sigstore-js +$ghBuildPath attestation verify $packageFile -b $attestationFile --digest-alg=sha512 --repo=sigstore-js if [ $? -ne 0 ]; then # cleanup test data + echo "Failed to verify package with --repo flag" rm $packageFile $attestationFile exit 1 fi