Micron Document
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| SparkN0de-git | SparkN0de |
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Node / ReticulumProjects / MeshChatX.git / commits / e9d6264


Commit e9d62642933a8c0ea077b58e249d9f0264115c42

󰉖 Browse tree at this commit

Parents : 8dc92a3
Author : Ivan <ivan@quad4.io>
Signature : Signature validation error
Date : 2026-04-27T11:15:57-05:00

fix(ci): exclude additional file types from asset attestation and disable tlog upload

Changes

2 files changed, 8 insertions(+), 5 deletions(-)

M scripts/ci/attest-release-assets.sh +2 -2
M scripts/ci/slsa-predicate.py +6 -3

Diff

diff --git a/scripts/ci/attest-release-assets.sh b/scripts/ci/attest-release-assets.sh
index 7d63fca5..c47f9095 100755
--- a/scripts/ci/attest-release-assets.sh
+++ b/scripts/ci/attest-release-assets.sh
@@ -19,7 +19,7 @@ trap 'rm -f "$PRED"' EXIT INT
python3 scripts/ci/slsa-predicate.py > "$PRED"
-find "$DIR" -type f ! -name '*.cosign.bundle' | while IFS= read -r f; do
+find "$DIR" -type f ! -name '*.cosign.bundle' ! -name '*.sha256' ! -name '*.intoto.jsonl' | while IFS= read -r f; do
case "$f" in
*/.git/*) continue ;;
esac
@@ -29,7 +29,7 @@ find "$DIR" -type f ! -name '*.cosign.bundle' | while IFS= read -r f; do
--predicate "$PRED" \
--type slsaprovenance1 \
--bundle "${f}.cosign.bundle" \
- --tlog-upload=true \
+ --tlog-upload=false \
"$f" >/dev/null
done

diff --git a/scripts/ci/slsa-predicate.py b/scripts/ci/slsa-predicate.py
index dd0ac4ca..268599b8 100644
--- a/scripts/ci/slsa-predicate.py
+++ b/scripts/ci/slsa-predicate.py
@@ -34,9 +34,12 @@ def _build_type() -> str:
repo = (
os.environ.get("GITHUB_REPOSITORY") or os.environ.get("GITEA_REPOSITORY") or ""
)
- if server and repo:
- return f"{server}/{repo}/.github/workflows/build-linux-release.yml"
- return "https://slsa.dev/provenance/v1"
+ if not server or not repo:
+ return "https://slsa.dev/provenance/v1"
+ workflow_file = os.environ.get("GITHUB_WORKFLOW_FILE", "build-linux-release.yml")
+ if os.environ.get("GITEA_SERVER_URL"):
+ return f"{server}/{repo}/.gitea/workflows/{workflow_file}"
+ return f"{server}/{repo}/.github/workflows/{workflow_file}"
def _builder_id() -> str:


──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────