Skip to content

fix: Update release docs#3589

Merged
ramonpetgrave64 merged 10 commits intoslsa-framework:mainfrom
ramonpetgrave64:update-release-docs
May 8, 2024
Merged

fix: Update release docs#3589
ramonpetgrave64 merged 10 commits intoslsa-framework:mainfrom
ramonpetgrave64:update-release-docs

Conversation

@ramonpetgrave64
Copy link
Contributor

@ramonpetgrave64 ramonpetgrave64 commented Apr 25, 2024

Summary

A few fixes and additions to the release docs.

  • fix the sed commands
  • add Github container registry auth instructions

related PR slsa-framework/slsa-verifier#761

Testing Process

Manual testing locally.

Checklist

  • Review the contributing guidelines
  • Add a reference to related issues in the PR description.
  • Update documentation if applicable.
  • Add unit tests if applicable.
  • Add changes to the CHANGELOG if applicable.

Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
@ramonpetgrave64 ramonpetgrave64 marked this pull request as ready for review April 25, 2024 21:02
@ramonpetgrave64
Copy link
Contributor Author

@mihaimaruseac

Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
@ramonpetgrave64
Copy link
Contributor Author

@joshuagl

Copy link
Contributor

@mihaimaruseac mihaimaruseac left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm a little bit concerned that thesesed expressions are hard to maintain, but since they were here from before the PR, I think it should be ok

Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
@ramonpetgrave64 ramonpetgrave64 enabled auto-merge (squash) May 2, 2024 20:16
@ramonpetgrave64
Copy link
Contributor Author

@ianlewis


```shell
sed -i "s/uses: slsa-framework\/slsa-github-generator\/\.github\/actions\/generate-builder@\(main\|v[0-9]\+\.[0-9]\+\.[0-9]\+\(-rc\.[0-9]\+\)\?\)/uses: ${BUILDER_REPOSITORY/\//\\\/}\/.github\/actions\/generate-builder@${BUILDER_TAG}/" .github/workflows/builder_go_slsa3.yml
sed -i "s/uses: slsa-framework\/slsa-github-generator\/\.github\/actions\/generate-builder@\(main\|v[0-9]\+\.[0-9]\+\.[0-9]\+\(-rc\.[0-9]\+\)\?\)/uses: ${BUILDER_REPOSITORY/\//\/}\/.github\/actions\/generate-builder@${BUILDER_TAG}/" .github/workflows/builder_go_slsa3.yml
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Were these commands not working for some reason?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not on my machine

@ianlewis
Copy link
Member

ianlewis commented May 7, 2024

I'm a little bit concerned that thesesed expressions are hard to maintain, but since they were here from before the PR, I think it should be ok

I totally sympathize with this. I think the release process is entirely too manual but it's difficult to automate. Ideally we wouldn't need to do this but I think we need to iterate to improve as best we can.

ramonpetgrave64 and others added 2 commits May 7, 2024 12:13
Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
@ramonpetgrave64 ramonpetgrave64 merged commit 2f113ff into slsa-framework:main May 8, 2024
ramonpetgrave64 added a commit to slsa-framework/slsa-verifier that referenced this pull request Jun 27, 2024
Making the `download-artifacts.sh` script be more useful.

Before, it would error upon seeing some zip files that it doesn't expect
to be in the GH release. I think the script is just a bit outdated. But
for now, I think we should bypass that, since the script is already
written to know which of the final files within the archives are
actually needed.

related PR
slsa-framework/slsa-github-generator#3589

Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants