From baef45299b36669c0015d0d8bc630272c3493e78 Mon Sep 17 00:00:00 2001
From: Shunsuke Suzuki <suzuki-shunsuke@users.noreply.github.com>
Date: Wed, 20 Mar 2024 16:47:37 +0900
Subject: [PATCH] fix: disable cosign and slsa-verifier (#605)

* fix: disable cosign and slsa-verifier

* fix: disable Cosign and slsa-verifier

* ci: fix lint errors
---
 .github/workflows/test.yaml | 10 ++++++++++
 action.yaml                 |  4 ++++
 aqua-installer              |  3 +++
 3 files changed, 17 insertions(+)

diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 77e40a6..df11c8a 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -3,6 +3,9 @@ name: test
 on:
   pull_request: {}
 permissions: {}
+env:
+  AQUA_DISABLE_COSIGN: "true"
+  AQUA_DISABLE_SLSA: "true"
 jobs:
   path-filter:
     # Get changed files to filter jobs
@@ -52,6 +55,13 @@ jobs:
         with:
           app_id: ${{secrets.APP_ID}}
           private_key: ${{secrets.APP_PRIVATE_KEY}}
+          repositories: >-
+            ["${{github.event.repository.name}}"]
+          permissions: >-
+            {
+              "contents": "write",
+              "pull_requests": "write"
+            }
       - run: gh -R "$GITHUB_REPOSITORY" pr merge --squash --auto --delete-branch "$PR_NUMBER"
         env:
           GITHUB_TOKEN: ${{steps.generate_token.outputs.token}} # Use GitHub App to trigger GitHub Actions Workflow by merge commit.
diff --git a/action.yaml b/action.yaml
index f856242..32f46f3 100644
--- a/action.yaml
+++ b/action.yaml
@@ -143,6 +143,8 @@ runs:
       shell: bash
       env:
         AQUA_VERSION: ${{ inputs.aqua_version }}
+        AQUA_DISABLE_COSIGN: "true" # TODO remove this line. https://github.com/aquaproj/aqua/issues/1665
+        AQUA_DISABLE_SLSA: "true" # TODO remove this line. https://github.com/aquaproj/aqua/issues/1665
 
     - run: aqua policy allow
       working-directory: ${{ inputs.working_directory }}
@@ -162,3 +164,5 @@ runs:
       shell: bash
       env:
         AQUA_OPTS: ${{ inputs.aqua_opts }}
+        AQUA_DISABLE_COSIGN: "true" # TODO remove this line. https://github.com/aquaproj/aqua/issues/1665
+        AQUA_DISABLE_SLSA: "true" # TODO remove this line. https://github.com/aquaproj/aqua/issues/1665
diff --git a/aqua-installer b/aqua-installer
index 6ca6926..b3be690 100755
--- a/aqua-installer
+++ b/aqua-installer
@@ -51,6 +51,9 @@ done
 
 shift $((OPTIND - 1))
 
+export AQUA_DISABLE_COSIGN=true
+export AQUA_DISABLE_SLSA=true
+
 bootstrap_version=v2.22.0
 checksums="e66e19c3cb2da10ddeb8dfd5dc523d909e0fba87fa1337db017160fba3d90414  aqua_darwin_amd64.tar.gz
 493ab58b6b93bea2a9b9a144cac8aea90213f88b484d3de27352a2c5fb9b90e2  aqua_darwin_arm64.tar.gz