Node / ReticulumProjects / MeshChatX.git / files / scripts / ci / github-slsa-hashes-dist.sh

Displaying Raw • Download

T8b949e#!/usr/bin/env bash

T8b949e# Emit base64-encoded sha256sum lines for files in ./dist (SLSA generic generator input).

T8b949e# Excludes *.cosign.bundle. Writes "hashes=<base64>" to GITHUB_OUTPUT when set.

Tffa657set -euo pipefail

Tffa657cd Ta5d6ff"Tff7b72$(dirname Ta5d6ff"Te6edf3$0Ta5d6ff"Tff7b72)Ta5d6ff/../..Ta5d6ff"

Tff7b72if Tff7b72[ ! -d dist Tff7b72]Tb4b4b4; Tff7b72then

Tffa657echo Ta5d6ff"dist/ missing" >Tb4b4b4&T79c0ff2

Tffa657exit T79c0ff1

Tff7b72fi

Te6edf3tmpTff7b72=Ta5d6ff"Tff7b72$(mktempTff7b72)Ta5d6ff"

Tffa657trap Ta5d6ff'rm -f "$tmp"' EXIT

Tff7b72(

Tffa657cd dist

find . -maxdepth T79c0ff1 -type f ! -name Ta5d6ff'*.cosign.bundle' -printf Ta5d6ff'%P\0' Tb4b4b4| sort -z Tb4b4b4| xargs -0 sha256sum

Tff7b72) >Ta5d6ff"Te6edf3$tmpTa5d6ff"

Tff7b72if Tff7b72[ ! -s Ta5d6ff"Te6edf3$tmpTa5d6ff" Tff7b72]Tb4b4b4; Tff7b72then

Tffa657echo Ta5d6ff"No files to hash under dist/" >Tb4b4b4&T79c0ff2

Tffa657exit T79c0ff1

Tff7b72fi

Te6edf3b64Tff7b72=Ta5d6ff"Tff7b72$(base64 -w0 <Ta5d6ff"Te6edf3$tmpTa5d6ff"Tff7b72)Ta5d6ff"

Tff7b72if Tff7b72[ -n Ta5d6ff"Tffd700${Te6edf3GITHUB_OUTPUTTff7b72:-Tffd700}Ta5d6ff" Tff7b72]Tb4b4b4; Tff7b72then

Tffa657echo Ta5d6ff"Ta5d6ffhashes=Tffd700${Te6edf3b64Tffd700}Ta5d6ff" >>Ta5d6ff"Te6edf3$GITHUB_OUTPUTTa5d6ff"

Tff7b72else

Tffa657printf Ta5d6ff'%s\n' Ta5d6ff"Te6edf3$b64Ta5d6ff"

Tff7b72fi