RetroSearch Browse

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from https://github.com/hashicorp/setup-signore below:

GitHub - hashicorp/setup-signore

Download and configure the signore signing service.

Originally based off of setup-terraform.

This version of the setup-signore Action requires a GitHub personal access token to access GitHub's Releases API and has cross-platform support.

If you only need to install Signore on Linux GitHub Runners, consider using the setup-signore-package Action, which does not require any authentication for repositories and Actions in HashiCorp enterprise GitHub organizations.

Note: see action.yml for detailed information about configuration and defaults.

Install the latest signore client release

- name: Install signore
  uses: hashicorp/setup-signore@v2
  with:
    github-token: ${{secrets.GITHUB_TOKEN_WITH_SIGNORE_REPO_ACCESS}}

Install a specific signore client release, verifying its archive checksum

- name: Install signore v0.1.2 and verify checksum
  uses: hashicorp/setup-signore@v2
  with:
    github-token: ${{secrets.GITHUB_TOKEN_WITH_SIGNORE_REPO_ACCESS}}
    version: v0.1.2
    # https://github.com/hashicorp/signore/releases/download/v0.1.2/signore_0.1.2_darwin_x86_64.tar.gz sha256 hash
    archive-checksum: 6b58be415b3e9b2f77d74f2cf70857819d15df512626658223b2d4a4f3adc404

Install a specific signore client release and configure signer

- name: Install signore v0.1.2 with client config
  uses: hashicorp/setup-signore@v2
  with:
    github-token: ${{secrets.GITHUB_TOKEN_WITH_SIGNORE_REPO_ACCESS}}
    version: v0.1.2
    signer: ${{secrets.SIGNORE_SIGNER}}

What GitHub token do we need?
- We need to download a signore release from GitHub, and because the repository is private we need a token that allows access.
What checksum are we verifying?
- After downloading the os/arch specific tar or zip archive that contains the signore binary, we compare its SHA256 hash against the user supplied archive-checksum
How do I get a GitHub token with access to the signore repository?
- TBD
How do I get access to the signore signing service?
- For now... talk to team-selfmanaged-releng.

RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4