Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: Re-enable checksums #10708

Merged
merged 1 commit into from Sep 14, 2022
Merged

ci: Re-enable checksums #10708

merged 1 commit into from Sep 14, 2022

Conversation

AaronFriel
Copy link
Member

@AaronFriel AaronFriel commented Sep 14, 2022

In the absence of key distribution or attestation of a "proper" signing key for now, this enables the "sign" job which adds checksum artifacts, sans signatures.

This leaves open the possibility of using sigstore.dev & tooling, or some other tooling to sign artifacts.

Fixes #10707.

@AaronFriel AaronFriel added the impact/no-changelog-required This issue doesn't require a CHANGELOG update label Sep 14, 2022
@pulumi-bot
Copy link
Contributor

Changelog

[uncommitted] (2022-09-14)

@AaronFriel
Copy link
Member Author

bors merge

bors bot added a commit that referenced this pull request Sep 14, 2022
10708: ci: Re-enable checksums r=AaronFriel a=AaronFriel

In the absence of key distribution or attestation of a "proper" signing key for now, this enables the "sign" job which adds checksum artifacts, sans signatures.

This leaves open the possibility of using sigstore.dev & tooling, or some other tooling to sign artifacts.

Fixes #10707.

Co-authored-by: Aaron Friel <mayreply@aaronfriel.com>
@bors
Copy link
Contributor

bors bot commented Sep 14, 2022

Build failed:

@AaronFriel
Copy link
Member Author

bors retry

1 similar comment
@AaronFriel
Copy link
Member Author

bors retry

@bors
Copy link
Contributor

bors bot commented Sep 14, 2022

Already running a review

bors bot added a commit that referenced this pull request Sep 14, 2022
10702: Prep for real 3.40.0 release r=AaronFriel a=AaronFriel

This turns the "safeties off" after validating the bors workflow and ensuring everything up to the dispatch commands succeeds.

It also fixes an error in `get-next-version` that resulted in the "vNext" PR #10701 to calculate the wrong "next version", which was corrected by hand. (The branch name and commit history is evidence of the error.)

10703: Delete CHANGELOG_PENDING.md r=AaronFriel a=AaronFriel



10708: ci: Re-enable checksums r=AaronFriel a=AaronFriel

In the absence of key distribution or attestation of a "proper" signing key for now, this enables the "sign" job which adds checksum artifacts, sans signatures.

This leaves open the possibility of using sigstore.dev & tooling, or some other tooling to sign artifacts.

Fixes #10707.

Co-authored-by: Aaron Friel <mayreply@aaronfriel.com>
@bors
Copy link
Contributor

bors bot commented Sep 14, 2022

Build failed (retrying...):

bors bot added a commit that referenced this pull request Sep 14, 2022
10703: Delete CHANGELOG_PENDING.md r=AaronFriel a=AaronFriel



10708: ci: Re-enable checksums r=AaronFriel a=AaronFriel

In the absence of key distribution or attestation of a "proper" signing key for now, this enables the "sign" job which adds checksum artifacts, sans signatures.

This leaves open the possibility of using sigstore.dev & tooling, or some other tooling to sign artifacts.

Fixes #10707.

Co-authored-by: Aaron Friel <mayreply@aaronfriel.com>
@AaronFriel
Copy link
Member Author

bors merge

@bors
Copy link
Contributor

bors bot commented Sep 14, 2022

Already running a review

@bors
Copy link
Contributor

bors bot commented Sep 14, 2022

Build failed (retrying...):

@bors
Copy link
Contributor

bors bot commented Sep 14, 2022

Canceled.

@AaronFriel
Copy link
Member Author

bors merge

@bors
Copy link
Contributor

bors bot commented Sep 14, 2022

Build succeeded:

@bors bors bot merged commit 1037d9a into master Sep 14, 2022
@pulumi-bot pulumi-bot deleted the friel/bors-checksums branch September 14, 2022 22:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
impact/no-changelog-required This issue doesn't require a CHANGELOG update
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Checksum file is missing in v3.39.4
4 participants