feat: sign pulumi binaries with cosign

pulumi · Nov 9, 2022 · 9fa8c0a · 9fa8c0a
1 parent ee36f1a
commit 9fa8c0a
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/ci-prepare-release.yml b/.github/workflows/ci-prepare-release.yml
@@ -69,23 +69,22 @@ jobs:
       - name: Flatten artifact directories
         run: |
           mkdir -p ./artifacts
-          mkdir -p ./sums.tmp
           mv ./artifacts.tmp/artifacts-*/* ./artifacts
 
         # Each of these commands strips the ./ prefix to match existing (<=3.39) formatting.
       - name: Checksums with SHA256
         working-directory: artifacts
         env:
           version: ${{ inputs.version }}
-        run: sha256sum ./pulumi-*.{tar.gz,zip} | sed 's/.\///' | tee "../sums.tmp/pulumi-${version}-checksums.txt"
+        run: sha256sum ./pulumi-*.{tar.gz,zip} | sed 's/.\///' | tee "../artifacts/pulumi-${version}-checksums.txt"
 
       - name: Checksums with BLAKE3
         working-directory: artifacts
-        run: b3sum ./* | sed 's/.\///' | tee ../sums.tmp/B3SUMS
+        run: b3sum ./* | sed 's/.\///' | tee ../artifacts/B3SUMS
 
       - name: Checksums with SHA512
         working-directory: artifacts
-        run: sha512sum ./* | sed 's/.\///' | tee ../sums.tmp/SHA512SUMS
+        run: sha512sum ./* | sed 's/.\///' | tee ../artifacts/SHA512SUMS
 
       - name: Sign binaries and checksums
         working-directory: artifacts
@@ -150,6 +149,7 @@ jobs:
       - name: Flatten artifact directories
         run: |
           mkdir -p ./artifacts
+          ls -la ./artifacts.tmp
           mv ./artifacts.tmp/artifacts-*/* ./artifacts
           mv ./artifacts.tmp/artifacts-signatures/* ./artifacts
       - uses: ncipollo/release-action@3d2de22e3d0beab188d8129c27f103d8e91bf13a