Change demo version of witness to be executable

Signed-off-by: John Kjell <john@testifysec.com>
testifysec · Oct 1, 2024 · cc6d032 · cc6d032
1 parent 69875cb
commit cc6d032
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
@@ -167,11 +167,12 @@ jobs:
     uses: testifysec/witness-run-action/.github/workflows/witness.yml@reusable-workflow
     with:
       pull_request: ${{ github.event_name == 'pull_request' }}
-      step: verify 
+      step: verify
       pre-command-attestations: "git github environment"
       attestations: "git github environment"
       artifact-download: image.tar
       pre-command: |
-        curl -sSfL https://github.com/jkjell/witness/releases/download/osff-demo/witness -o /usr/local/bin/witness
+        curl -sSfL https://github.com/jkjell/witness/releases/download/osff-demo/witness -o /tmp/witness && \
+        chmod +x /tmp/witness
       command: |
-        witness verify -p policy-signed.json -k swfpublic.pem -f /tmp/image.tar --enable-archivista -l debug
+        /tmp/witness verify -p policy-signed.json -k swfpublic.pem -f /tmp/image.tar --enable-archivista -l debug