mirror of
https://gitlab.alpinelinux.org/alpine/aports.git
synced 2025-07-24 19:55:26 +03:00
86 lines
2.3 KiB
Text
86 lines
2.3 KiB
Text
# Maintainer: Ariadne Conill <ariadne@dereferenced.org>
|
|
pkgname=cosign
|
|
pkgver=1.13.1
|
|
pkgrel=3
|
|
pkgdesc="container signing tool with support for ephemeral keys and Sigstore signing"
|
|
url="https://github.com/sigstore/cosign"
|
|
arch="all"
|
|
license="Apache-2.0"
|
|
# pcsc-lite-libs needed at runtime for smartcard support
|
|
depends="pcsc-lite-libs"
|
|
makedepends="go pcsc-lite-dev"
|
|
# NOTE: We can't use the default bashcomp, etc splitters because they take everything,
|
|
# the default splitters should be improved somehow.
|
|
subpackages="
|
|
sget
|
|
sget-bash-completion:_sget_bashcomp
|
|
sget-fish-completion:_sget_fishcomp
|
|
sget-zsh-completion:_sget_zshcomp
|
|
|
|
$pkgname-bash-completion
|
|
$pkgname-fish-completion
|
|
$pkgname-zsh-completion
|
|
"
|
|
source="https://github.com/sigstore/cosign/archive/v$pkgver/cosign-$pkgver.tar.gz"
|
|
options="chmod-clean !check"
|
|
|
|
# secfixes:
|
|
# 1.12.1-r0:
|
|
# - CVE-2022-36056
|
|
# 1.10.1-r0:
|
|
# - CVE-2022-35929
|
|
# 1.5.2-r0:
|
|
# - CVE-2022-23649
|
|
|
|
export GOCACHE="${GOCACHE:-"$srcdir/go-cache"}"
|
|
export GOTMPDIR="${GOTMPDIR:-"$srcdir"}"
|
|
export GOMODCACHE="${GOMODCACHE:-"$srcdir/go"}"
|
|
|
|
build() {
|
|
mkdir build
|
|
go build -o build/ \
|
|
-tags -tags=pivkey,pkcs11key \
|
|
-ldflags=-X=sigs.k8s.io/release-utils/version.gitVersion="v$pkgver" \
|
|
"$builddir"/cmd/...
|
|
|
|
for i in bash fish zsh; do
|
|
"$builddir"/build/cosign completion $i > "$builddir"/cosign.$i
|
|
"$builddir"/build/sget completion $i > "$builddir"/sget.$i
|
|
done
|
|
}
|
|
|
|
check() {
|
|
make test
|
|
}
|
|
|
|
package() {
|
|
install -Dm755 "$builddir"/build/cosign "$pkgdir"/usr/bin/cosign
|
|
install -Dm755 "$builddir"/build/sget "$pkgdir"/usr/bin/sget
|
|
|
|
for i in cosign sget; do
|
|
install -Dm644 "$builddir"/$i.bash "$pkgdir"/usr/share/bash-completion/completions/$i
|
|
install -Dm644 "$builddir"/$i.fish "$pkgdir"/usr/share/fish/completions/$i.fish
|
|
install -Dm644 "$builddir"/$i.zsh "$pkgdir"/usr/share/zsh/site-functions/_$i
|
|
done
|
|
}
|
|
|
|
sget() {
|
|
pkgdesc="secure container image fetching tool"
|
|
amove /usr/bin/sget
|
|
}
|
|
|
|
_sget_bashcomp() {
|
|
amove /usr/share/bash-completion/completions/sget
|
|
}
|
|
|
|
_sget_fishcomp() {
|
|
amove /usr/share/fish/completions/sget.fish
|
|
}
|
|
|
|
_sget_zshcomp() {
|
|
amove /usr/share/zsh/site-functions/_sget
|
|
}
|
|
|
|
sha512sums="
|
|
44fe662939fe8a4de11bd0056bad804aa706b05d56e44f6441fb85249235bdc4324cb19ecceeb39ddff28250615fb857f2727b7c1b8d5b60971b7785924d5694 cosign-1.13.1.tar.gz
|
|
"
|