From d5df5e5daf5dbb2b0feee43660d65a4b1b00e9c2 Mon Sep 17 00:00:00 2001 From: closer-claudio Date: Sun, 13 Sep 2026 10:57:32 -0700 Subject: [PATCH] Rename: build-curl is forkcloser/curl The repository is published as forkcloser/curl: the aqua pin then reads forkcloser/curl@v, which says what the package is, where build-curl named the mechanism against curl's own version. The README's reference registry entry, the attestation signer workflow path and the two workflow headers follow; test-binary's comments stop naming the repository at all. Co-Authored-By: Claude Fable 5.1 Signed-off-by: closer-claudio --- .github/workflows/ci.yaml | 2 +- .github/workflows/release.yaml | 2 +- README.md | 10 +++++----- test-binary.sh | 4 ++-- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 7849417..e49d205 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -1,4 +1,4 @@ -# build-curl CI (project-specific — this repo builds a C tool, not Go, so it +# curl CI (project-specific — this repo builds a C tool, not Go, so it # diverges from the canonical baseline ci.yaml). Construction rules are the # same: the only marketplace action is GitHub's own checkout pinned by commit # SHA; everything else is pinned, checksum-verified shell via aqua + just. diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index b9376ad..8ccd22c 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -1,4 +1,4 @@ -# Release lane for build-curl (custom — this repo packages a C project, so +# Release lane for curl (custom — this repo packages a C project, so # the canonical goreleaser lane does not apply; same construction rules: # SHA-pinned first-party actions only, minimal per-job permissions, bash # everywhere). diff --git a/README.md b/README.md index 0c61383..27c8122 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# build-curl +# curl First-party curl packages for the farcloser toolchain — one `curl` for every platform, pinned and verified through aqua like everything else. Exists @@ -68,9 +68,9 @@ committed-pin belt to the attestation's suspenders. ```yaml - type: github_release - repo_owner: farcloser - repo_name: build-curl - description: curl with dependable TLS 1.3, first-party build (farcloser/build-curl) + repo_owner: forkcloser + repo_name: curl + description: curl with dependable TLS 1.3, first-party build (forkcloser/curl) asset: curl_{{trimV .Version}}_{{.OS}}_{{.Arch}}.tar.gz format: tar.gz files: @@ -87,7 +87,7 @@ committed-pin belt to the attestation's suspenders. asset: checksums.txt algorithm: sha256 github_artifact_attestations: - signer_workflow: farcloser/build-curl/.github/workflows/release.yaml + signer_workflow: forkcloser/curl/.github/workflows/release.yaml supported_envs: - darwin/arm64 # no darwin/amd64 — Intel Mac support was dropped - linux diff --git a/test-binary.sh b/test-binary.sh index 3ebb6ee..274fec1 100755 --- a/test-binary.sh +++ b/test-binary.sh @@ -1,7 +1,7 @@ #!/usr/bin/env bash # # Basic sanity test of ONE built curl archive: it runs, reports the expected -# version, and completes a TLS 1.3 handshake — the reason build-curl exists. +# version, and completes a TLS 1.3 handshake — the reason this repository exists. # # Takes the leg (the SAME token the build/CI matrix uses) rather than # auto-detecting: a binary can only be executed on its matching os/arch, and @@ -42,7 +42,7 @@ echo "› $("$bin" --version | head -n1)" "$bin" --version | head -n1 | grep -qF "curl ${curl_version} " \ || { echo "version mismatch (want ${curl_version})" >&2; exit 1; } -# 2. TLS 1.3 — build-curl's whole reason for existing. --tlsv1.3 sets the FLOOR, +# 2. TLS 1.3 — this repository's whole reason for existing. --tlsv1.3 sets the FLOOR, # so a completed, verified request proves 1.3 was negotiated. The CA trust # store is the host's to provide (not shipped here). "$bin" --tlsv1.3 --silent --show-error --fail --output /dev/null https://github.com