From e269a009456c36c7625814b7185a258ffc2e820e Mon Sep 17 00:00:00 2001 From: asraa Date: Mon, 3 Oct 2022 10:27:24 -0500 Subject: [PATCH] release: add release v1.3.1 and v1.2.1 (#288) * release: add release v1.3.1 and v1.2.1 Signed-off-by: Asra Ali --- README.md | 6 +++--- RELEASE.md | 4 ++-- SHA256SUM.md | 6 ++++++ 3 files changed, 11 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 2ded196be..6bd7d323f 100644 --- a/README.md +++ b/README.md @@ -34,20 +34,20 @@ You have two options to install the verifier. #### Option 1: Install via go ``` -$ go install github.com/slsa-framework/slsa-verifier/cli/slsa-verifier@v1.3.0 +$ go install github.com/slsa-framework/slsa-verifier/cli/slsa-verifier@v1.3.1 $ slsa-verifier ``` #### Option 2: Compile manually ``` $ git clone git@github.com:slsa-framework/slsa-verifier.git -$ cd slsa-verifier && git checkout v1.3.0 +$ cd slsa-verifier && git checkout v1.3.1 $ go run ./cli/slsa-verifier ``` ### Download the binary -Download the binary from the latest release at [https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.3.0](https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.3.0) +Download the binary from the latest release at [https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.3.1](https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.3.1) Download the [SHA256SUM.md](https://github.com/slsa-framework/slsa-verifier/blob/main/SHA256SUM.md). diff --git a/RELEASE.md b/RELEASE.md index d398d3490..f799ac05d 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -52,8 +52,8 @@ Follow the steps: ``` $ git clone git@github.com:slsa-framework/slsa-verifier.git $ cd slsa-verifier -# $ (Optional: git checkout tags/v1.1.1) -$ go run ./cli/slsa-verifier -artifact-path slsa-verifier-linux-amd64 -provenance slsa-verifier-linux-amd64.intoto.jsonl -source github.com/slsa-framework/slsa-verifier -tag vX.Y.Z +# $ (Optional: git checkout tags/v1.1.1: you may need to change the command below) +$ go run ./cli/slsa-verifier verify-artifact ~/Downloads/slsa-verifier-linux-amd64 --provenance-path ~/Downloads/slsa-verifier-linux-amd64.intoto.jsonl --source-uri github.com/slsa-framework/slsa-verifier --source-tag vX.Y.Z ``` You should include the `-branch release/vX.Y` for patch version releases. diff --git a/SHA256SUM.md b/SHA256SUM.md index a904bebaf..b5249d047 100644 --- a/SHA256SUM.md +++ b/SHA256SUM.md @@ -1,6 +1,12 @@ +### [v1.3.1](https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.3.1) +065714d01ba36c81fb11aa7031597a77b08491eb341bac8efc3e452f5d5ed4bd slsa-verifier-linux-amd64 + ### [v1.3.0](https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.3.0) 1326430d044e8a9522c51e5f721e237b5f75acb6b4e518d129f669403cf7a79a slsa-verifier-linux-amd64 +### [v1.2.1](https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.2.1) +edd1d430429fa3dfaf249d7ec805891a4b7332ea1d17d23f9d20bc6f4aeebe04 slsa-verifier-linux-amd64 + ### [v1.2.0](https://github.com/slsa-framework/slsa-verifier/releases/tag/v1.2.0) 37db23392c7918bb4e243cdb097ed5f9d14b9b965dc1905b25bc2d1c0c91bf3d slsa-verifier-linux-amd64