slsa-verifier
slsa-verifier copied to clipboard
fix: make download-artifacts.sh more flexible
Making the download-artifacts.sh
script be more useful.
Before, it would error upon seeing some zip files that it doesn't expect to be in the GH release. I think the script is just a bit outdated. But for now, I think we should bypass that, since the script is already written to know which of the final files within the archives are actually needed.
related PR https://github.com/slsa-framework/slsa-github-generator/pull/3589
@mihaimaruseac
@ianlewis