fix: generate sha256 correctly

snyk · Feb 4, 2021 · 706764a · 706764a
1 parent acdfbb6
commit 706764a
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 8 deletions.
diff --git a/release-scripts/docker-desktop-release.sh b/release-scripts/docker-desktop-release.sh
@@ -32,6 +32,8 @@ tar czfh docker-mac-signed-bundle.tar.gz ./docker
 cd ..
 mv ./dist/docker-mac-signed-bundle.tar.gz ./binary-releases
 
-shasum -a 256 binary-releases/docker-mac-signed-bundle.tar.gz > binary-releases/docker-mac-signed-bundle.tar.gz.sha256
+pushd binary-releases
+shasum -a 256 docker-mac-signed-bundle.tar.gz >docker-mac-signed-bundle.tar.gz.sha256
+popd
 
 rm -rf ./dist/docker
diff --git a/release-scripts/make-binaries.sh b/release-scripts/make-binaries.sh
@@ -4,7 +4,7 @@ set -e
 mkdir binary-releases
 
 # adds a file to identify a build as a standalone binary
-echo '' > dist/STANDALONE
+echo '' >dist/STANDALONE
 
 npx pkg . -t node14-alpine-x64 -o binary-releases/snyk-alpine
 npx pkg . -t node12-linux-x64 -o binary-releases/snyk-linux
@@ -18,11 +18,13 @@ npx pkg . -t node12-win-x64 -o binary-releases/snyk-win-unsigned.exe
 ./release-scripts/sign-windows-binary.sh
 
 # compute checksums
-shasum -a 256 binary-releases/snyk-alpine > binary-releases/snyk-alpine.sha256
-shasum -a 256 binary-releases/snyk-linux > binary-releases/snyk-linux.sha256
-shasum -a 256 binary-releases/snyk-macos > binary-releases/snyk-macos.sha256
+pushd binary-releases
+shasum -a 256 snyk-alpine >snyk-alpine.sha256
+shasum -a 256 snyk-linux >snyk-linux.sha256
+shasum -a 256 snyk-macos >snyk-macos.sha256
 # note: checksum for snyk-win.exe is generated by `sign-windows-binary.sh`
 # note: checksum for docker-mac-signed-bundle is generated by `docker-desktop-release.sh`
+popd
 
 # removes the file we use to identify a build as a standalone binary
 rm dist/STANDALONE

diff --git a/release-scripts/sign-windows-binary.sh b/release-scripts/sign-windows-binary.sh
@@ -3,13 +3,13 @@
 # create files as needed
 CERT_FILE=cert.pem
 if [ ! -f "$CERT_FILE" ]; then
-  echo "$SIGNING_CERT" | base64 --decode > "$CERT_FILE"
+  echo "$SIGNING_CERT" | base64 --decode >"$CERT_FILE"
 fi
 
 # create files as needed
 KEY_FILE=key.pem
 if [ ! -f "$KEY_FILE" ]; then
-  echo "$SIGNING_KEY" | base64 --decode > "$KEY_FILE"
+  echo "$SIGNING_KEY" | base64 --decode >"$KEY_FILE"
 fi
 
 osslsigncode sign -h sha512 \
@@ -22,4 +22,7 @@ osslsigncode sign -h sha512 \
   -out binary-releases/snyk-win.exe
 
 rm binary-releases/snyk-win-unsigned.exe
-sha256sum binary-releases/snyk-win.exe > binary-releases/snyk-win.exe.sha256
+
+pushd binary-releases
+sha256sum snyk-win.exe >snyk-win.exe.sha256
+popd