cli/test/integration/attestation-cmd/verify/verify-with-internal-github-sigstore.sh
Meredith Lancaster f3982b278c add more verification integration tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
2024-12-16 16:57:05 -07:00

16 lines
447 B
Bash

#!/usr/bin/env bash
set -euo pipefail
# Get the root directory of the repository
rootDir="$(git rev-parse --show-toplevel)"
ghBuildPath="$rootDir/bin/gh"
ghCLIArtifact="$rootDir/pkg/cmd/attestation/test/data/gh_2.60.1_windows_arm64.zip"
# Verify the gh CLI artifact
echo "Testing with package $ghCLIArtifact"
if ! $ghBuildPath attestation verify "$ghCLIArtifact" --digest-alg=sha256 --owner=cli; then
echo "Failed to verify"
exit 1
fi