diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8ba822d..431e367 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,7 +10,9 @@ jobs: runs-on: ubuntu-latest permissions: + id-token: write contents: write + attestations: write steps: - uses: actions/checkout@v4 with: @@ -32,6 +34,7 @@ jobs: echo "SUBJECT=$(cat CHANGES.TITLE)" >> "$GITHUB_OUTPUT" echo 'BODY<> "$GITHUB_OUTPUT" cat CHANGES >> "$GITHUB_OUTPUT" + sha256sum tools/*.zip | sed -e 's/^/- /g' >> "$GITHUB_OUTPUT" echo 'EOF' >> "$GITHUB_OUTPUT" - name: Binary Attestation uses: actions/attest-build-provenance@v1 @@ -40,7 +43,7 @@ jobs: - name: Release Making uses: softprops/action-gh-release@v2 with: - body_path: CHANGES + body: ${{ steps.release-asset.outputs.BODY }} name: ${{ steps.release-asset.outputs.SUBJECT }} files: | tools/*.zip diff --git a/CHANGES b/CHANGES index 7f05b24..39ae402 100644 --- a/CHANGES +++ b/CHANGES @@ -11,3 +11,8 @@ Review the commit history if you want to get a deep insight about the changes. ### Feedback? If you have issues with this version, report to us by [making a new issue ticket](https://github.com/Aptivi/SpecProbe/issues/new). + +### Sum hashes + +To verify integrity of your download, compare the SHA256 sum of your downloaded file with the following information: +