From 2000f7f6216285d9ba1675993a6d60cc68d73a5c Mon Sep 17 00:00:00 2001 From: GrantBirki Date: Mon, 21 Apr 2025 11:13:47 -0700 Subject: [PATCH] fixes --- .github/workflows/release.yml | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3a72c6c..35ba742 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -74,4 +74,16 @@ jobs: REPO: ${{ github.event.repository.name }} ARTIFACT_PATH: "." GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - run: gh attestation verify "$ARTIFACT_PATH" --repo ${OWNER}/${REPO} --signer-workflow ${OWNER}/${REPO}/.github/workflows/release.yml + run: | + echo "Scanning for files in $ARTIFACT_PATH" + + # Find all regular files in the artifact path recursively + find "$ARTIFACT_PATH" -type f | while read -r file; do + echo "Verifying file: $file" + + # Log the command that will be executed + echo "Executing command: gh attestation verify \"$file\" --repo ${OWNER}/${REPO} --signer-workflow ${OWNER}/${REPO}/.github/workflows/release.yml" + + # Run the command + gh attestation verify "$file" --repo ${OWNER}/${REPO} --signer-workflow ${OWNER}/${REPO}/.github/workflows/release.yml + done