oidc-test 0.8.8 → 0.8.10
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile.lock +1 -1
- data/Rakefile +5 -1
- data/lib/oidc/test/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 40ac5ec0e13d820a231b1c1bf56721406b590e4ca981dac0993e1777abee57a9
|
4
|
+
data.tar.gz: fddda91ad0a07e2c55e7f9520e731067bc431057ae27826f66ceda0376990a26
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: b9f95248d0a7f73f6d2e3829d754e08c48df164ae967a93d0465e81d13c5e365a09d8c44b4ea372b0a40140a3d63835cd81109a4c6632b79fbc7986917f95b86
|
7
|
+
data.tar.gz: 4fb02ee7bce2f6fae43d447496703d841b40c13fe6e7c3415901afd17eb36bec9df17e21c26e7ba4cf9b0e646ed28df03d0448cdeeab412d9f29d2aaba12c2b3
|
data/Gemfile.lock
CHANGED
data/Rakefile
CHANGED
@@ -9,6 +9,7 @@ module Bundler
|
|
9
9
|
super
|
10
10
|
|
11
11
|
task "release:attest" => "build" do
|
12
|
+
Bundler.ui.confirm "Attesting? #{attest?}"
|
12
13
|
attest if attest?
|
13
14
|
end
|
14
15
|
|
@@ -39,6 +40,7 @@ module Bundler
|
|
39
40
|
end
|
40
41
|
|
41
42
|
def attest
|
43
|
+
Bundler.ui.confirm "Signing #{@build_gem_path}..."
|
42
44
|
sh [Gem.ruby, "-S", "gem", "install", "sigstore"]
|
43
45
|
sh [Gem.ruby, "-rnet/http", "-rsigstore", "-rsigstore/signer", "-e", <<~RUBY, @build_gem_path]
|
44
46
|
file = ARGV.first
|
@@ -51,7 +53,9 @@ module Bundler
|
|
51
53
|
contents = File.binread(file)
|
52
54
|
bundle = Sigstore::Signer.new(jwt:, trusted_root: Sigstore::TrustedRoot.production).sign(contents)
|
53
55
|
|
54
|
-
|
56
|
+
json = "\#{file}.sigstore.json"
|
57
|
+
File.binwrite(file, bundle.to_json)
|
58
|
+
puts "Signed \#{file}, wrote \#{json}"
|
55
59
|
RUBY
|
56
60
|
end
|
57
61
|
end
|
data/lib/oidc/test/version.rb
CHANGED