Skip to content

fix: add cgwName_os candidate to FindBinary for inconsistent archives#89

Merged
sampras343 merged 1 commit into
mainfrom
SECURESIGN-2158-findbinary-fix
Jul 20, 2026
Merged

fix: add cgwName_os candidate to FindBinary for inconsistent archives#89
sampras343 merged 1 commit into
mainfrom
SECURESIGN-2158-findbinary-fix

Conversation

@sampras343

@sampras343 sampras343 commented Jul 20, 2026

Copy link
Copy Markdown
Member

Summary

Add cgwName_os (e.g., gitsign_cli_linux) as a candidate pattern in FindBinary. Some CLI archives from the Developer Portal contain binaries without the arch suffix.

Binary naming in 1.4.1 archives

CLI Binary inside archive Matched by
cosign cosign cliName
rekor-cli rekor_cli_linux cgwName_os (new)
gitsign gitsign_cli_linux cgwName_os (new)
ec ec_linux_amd64 cgwName_os_arch
fetch-tsa-certs fetch_tsa_certs_linux cgwName_os (new)
createtree createtree cliName
updatetree updatetree cliName
tuftool tuftool cliName

Verified

All 8 CLIs tested against actual CDN archives from 1.4.1 — 8/8 pass.

Implements SECURESIGN-2158

Some CLI archives use binary names without the arch suffix:
  gitsign_cli_linux, rekor_cli_linux, fetch_tsa_certs_linux

Add cgwName_os as a candidate pattern. All 8 CLIs verified against
actual CDN archives from 1.4.1.

Implements SECURESIGN-2158

Signed-off-by: Sachin Sampras M <sampras343@gmail.com>
@sampras343
sampras343 merged commit fe71e9e into main Jul 20, 2026
6 checks passed
@ompushkara
ompushkara deleted the SECURESIGN-2158-findbinary-fix branch July 22, 2026 08:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants