Rakefile in oidc-test-0.8.8 vs Rakefile in oidc-test-0.8.9
- old
+ new
@@ -7,10 +7,11 @@
prepend(Module.new do
def install
super
task "release:attest" => "build" do
+ Bundler.ui.confirm "Attesting? #{attest?}"
attest if attest?
end
task "release:rubygem_push" => "release:attest"
end
@@ -37,9 +38,10 @@
ENV["ACTIONS_ID_TOKEN_REQUEST_URL"] && ENV["ACTIONS_ID_TOKEN_REQUEST_TOKEN"]
end
def attest
+ Bundler.ui.confirm "Signing #{@build_gem_path}..."
sh [Gem.ruby, "-S", "gem", "install", "sigstore"]
sh [Gem.ruby, "-rnet/http", "-rsigstore", "-rsigstore/signer", "-e", <<~RUBY, @build_gem_path]
file = ARGV.first
jwt = Net::HTTP.get_response(
URI(ENV.fetch("ACTIONS_ID_TOKEN_REQUEST_URL") + "&audience=sigstore"),