Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# build-curl CI (project-specific — this repo builds a C tool, not Go, so it
# curl CI (project-specific — this repo builds a C tool, not Go, so it
# diverges from the canonical baseline ci.yaml). Construction rules are the
# same: the only marketplace action is GitHub's own checkout pinned by commit
# SHA; everything else is pinned, checksum-verified shell via aqua + just.
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# Release lane for build-curl (custom — this repo packages a C project, so
# Release lane for curl (custom — this repo packages a C project, so
# the canonical goreleaser lane does not apply; same construction rules:
# SHA-pinned first-party actions only, minimal per-job permissions, bash
# everywhere).
Expand Down
10 changes: 5 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# build-curl
# curl

First-party curl packages for the farcloser toolchain — one `curl` for every
platform, pinned and verified through aqua like everything else. Exists
Expand Down Expand Up @@ -68,9 +68,9 @@ committed-pin belt to the attestation's suspenders.

```yaml
- type: github_release
repo_owner: farcloser
repo_name: build-curl
description: curl with dependable TLS 1.3, first-party build (farcloser/build-curl)
repo_owner: forkcloser
repo_name: curl
description: curl with dependable TLS 1.3, first-party build (forkcloser/curl)
asset: curl_{{trimV .Version}}_{{.OS}}_{{.Arch}}.tar.gz
format: tar.gz
files:
Expand All @@ -87,7 +87,7 @@ committed-pin belt to the attestation's suspenders.
asset: checksums.txt
algorithm: sha256
github_artifact_attestations:
signer_workflow: farcloser/build-curl/.github/workflows/release.yaml
signer_workflow: forkcloser/curl/.github/workflows/release.yaml
supported_envs:
- darwin/arm64 # no darwin/amd64 — Intel Mac support was dropped
- linux
Expand Down
4 changes: 2 additions & 2 deletions test-binary.sh
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/usr/bin/env bash
#
# Basic sanity test of ONE built curl archive: it runs, reports the expected
# version, and completes a TLS 1.3 handshake — the reason build-curl exists.
# version, and completes a TLS 1.3 handshake — the reason this repository exists.
#
# Takes the leg (the SAME token the build/CI matrix uses) rather than
# auto-detecting: a binary can only be executed on its matching os/arch, and
Expand Down Expand Up @@ -42,7 +42,7 @@ echo "› $("$bin" --version | head -n1)"
"$bin" --version | head -n1 | grep -qF "curl ${curl_version} " \
|| { echo "version mismatch (want ${curl_version})" >&2; exit 1; }

# 2. TLS 1.3 — build-curl's whole reason for existing. --tlsv1.3 sets the FLOOR,
# 2. TLS 1.3 — this repository's whole reason for existing. --tlsv1.3 sets the FLOOR,
# so a completed, verified request proves 1.3 was negotiated. The CA trust
# store is the host's to provide (not shipped here).
"$bin" --tlsv1.3 --silent --show-error --fail --output /dev/null https://github.com
Expand Down
Loading