liquidaty/zsv

[CI] Attest build artifacts

Closed this issue · 3 comments

Verified locally and it's working fine!

Steps:

  • Downloaded artifacts from the PR (#197).
  • Unzipped to an artifacts directory.
  • Verified with gh attestation verify <path-to-download-artifact> --repo liquidaty/zsv command.
  • Verification succeeded!
  • Tempered the include/zsv.h file in some archives.
  • Reran the verification command.
  • Verification failed!
  • Restoring the include/zsv.h file also made the verification failed.

Added note in README with 0f9e186.