[
  {
    "cmd": [
      "curl",
      "https://api.github.com/repos/sigstore/cosign/releases"
    ],
    "name": "Get cosign releases from github"
  },
  {
    "cmd": [
      "curl",
      "https://api.github.com/releases/1"
    ],
    "name": "Get artifacts from sigstore/cosign for a specific release version"
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-darwin-amd64",
      "-o",
      "[START_DIR]/cosign/darwin/bin/cosign",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download darwin cosign binary"
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-darwin-amd64-keyless.pem",
      "-o",
      "[START_DIR]/cosign/darwin/certificate/cosign-cert.pem",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download darwin cosign certificate"
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-darwin-amd64-keyless.sig",
      "-o",
      "[START_DIR]/cosign/darwin/certificate/cosign-sig.sig",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download darwin cosign signature"
  },
  {
    "cmd": [
      "chmod",
      "755",
      "[START_DIR]/cosign/darwin/bin/cosign"
    ],
    "name": "Make darwin cosign binary executable"
  },
  {
    "cmd": [
      "cosign",
      "verify-blob",
      "--cert",
      "[START_DIR]/cosign/darwin/certificate/cosign-cert.pem",
      "--signature",
      "[START_DIR]/cosign/darwin/certificate/cosign-sig.sig",
      "[START_DIR]/cosign/darwin/bin/cosign"
    ],
    "name": "Verify darwin cosign binary is legitimate"
  },
  {
    "cmd": [
      "cipd",
      "pkg-build",
      "-in",
      "[START_DIR]/cosign/darwin",
      "-name",
      "flutter/tools/cosign/mac-amd64",
      "-out",
      "cosign.zip",
      "-hash-algo",
      "sha256",
      "-json-output",
      "/path/to/tmp/json"
    ],
    "name": "build mac-amd64",
    "~followup_annotations": [
      "@@@STEP_LOG_LINE@json.output@{@@@",
      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
      "@@@STEP_LOG_LINE@json.output@    \"instance_id\": \"40-chars-fake-of-the-package-instance_id\", @@@",
      "@@@STEP_LOG_LINE@json.output@    \"package\": \"flutter/tools/cosign/mac-amd64\"@@@",
      "@@@STEP_LOG_LINE@json.output@  }@@@",
      "@@@STEP_LOG_LINE@json.output@}@@@",
      "@@@STEP_LOG_END@json.output@@@"
    ]
  },
  {
    "cmd": [
      "cipd",
      "pkg-register",
      "cosign.zip",
      "-ref",
      "latest",
      "-json-output",
      "/path/to/tmp/json"
    ],
    "name": "register flutter/tools/cosign/mac-amd64",
    "~followup_annotations": [
      "@@@STEP_LOG_LINE@json.output@{@@@",
      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
      "@@@STEP_LOG_LINE@json.output@    \"instance_id\": \"40-chars-fake-of-the-package-instance_id\", @@@",
      "@@@STEP_LOG_LINE@json.output@    \"package\": \"flutter/tools/cosign/mac-amd64\"@@@",
      "@@@STEP_LOG_LINE@json.output@  }@@@",
      "@@@STEP_LOG_LINE@json.output@}@@@",
      "@@@STEP_LOG_END@json.output@@@",
      "@@@STEP_LINK@flutter/tools/cosign/mac-amd64@https://chrome-infra-packages.appspot.com/p/flutter/tools/cosign/mac-amd64/+/40-chars-fake-of-the-package-instance_id@@@"
    ]
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-linux-amd64",
      "-o",
      "[START_DIR]/cosign/linux/bin/cosign",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download linux cosign binary"
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-linux-amd64-keyless.pem",
      "-o",
      "[START_DIR]/cosign/linux/certificate/cosign-cert.pem",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download linux cosign certificate"
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-linux-amd64-keyless.sig",
      "-o",
      "[START_DIR]/cosign/linux/certificate/cosign-sig.sig",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download linux cosign signature"
  },
  {
    "cmd": [
      "chmod",
      "755",
      "[START_DIR]/cosign/linux/bin/cosign"
    ],
    "name": "Make linux cosign binary executable"
  },
  {
    "cmd": [
      "cosign",
      "verify-blob",
      "--cert",
      "[START_DIR]/cosign/linux/certificate/cosign-cert.pem",
      "--signature",
      "[START_DIR]/cosign/linux/certificate/cosign-sig.sig",
      "[START_DIR]/cosign/linux/bin/cosign"
    ],
    "name": "Verify linux cosign binary is legitimate"
  },
  {
    "cmd": [
      "cipd",
      "pkg-build",
      "-in",
      "[START_DIR]/cosign/linux",
      "-name",
      "flutter/tools/cosign/linux-amd64",
      "-out",
      "cosign.zip",
      "-hash-algo",
      "sha256",
      "-json-output",
      "/path/to/tmp/json"
    ],
    "name": "build linux-amd64",
    "~followup_annotations": [
      "@@@STEP_LOG_LINE@json.output@{@@@",
      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
      "@@@STEP_LOG_LINE@json.output@    \"instance_id\": \"40-chars-fake-of-the-package-instance_id\", @@@",
      "@@@STEP_LOG_LINE@json.output@    \"package\": \"flutter/tools/cosign/linux-amd64\"@@@",
      "@@@STEP_LOG_LINE@json.output@  }@@@",
      "@@@STEP_LOG_LINE@json.output@}@@@",
      "@@@STEP_LOG_END@json.output@@@"
    ]
  },
  {
    "cmd": [
      "cipd",
      "pkg-register",
      "cosign.zip",
      "-ref",
      "latest",
      "-json-output",
      "/path/to/tmp/json"
    ],
    "name": "register flutter/tools/cosign/linux-amd64",
    "~followup_annotations": [
      "@@@STEP_LOG_LINE@json.output@{@@@",
      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
      "@@@STEP_LOG_LINE@json.output@    \"instance_id\": \"40-chars-fake-of-the-package-instance_id\", @@@",
      "@@@STEP_LOG_LINE@json.output@    \"package\": \"flutter/tools/cosign/linux-amd64\"@@@",
      "@@@STEP_LOG_LINE@json.output@  }@@@",
      "@@@STEP_LOG_LINE@json.output@}@@@",
      "@@@STEP_LOG_END@json.output@@@",
      "@@@STEP_LINK@flutter/tools/cosign/linux-amd64@https://chrome-infra-packages.appspot.com/p/flutter/tools/cosign/linux-amd64/+/40-chars-fake-of-the-package-instance_id@@@"
    ]
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-windows-amd64.exe",
      "-o",
      "[START_DIR]/cosign/windows/bin/cosign.exe",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download windows cosign binary"
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-windows-amd64.exe-keyless.pem",
      "-o",
      "[START_DIR]/cosign/windows/certificate/cosign-cert.exe.pem",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download windows cosign certificate"
  },
  {
    "cmd": [
      "curl",
      "-L",
      "cosign-windows-amd64.exe-keyless.sig",
      "-o",
      "[START_DIR]/cosign/windows/certificate/cosign-sig.exe.sig",
      "--create-dirs"
    ],
    "infra_step": true,
    "name": "Download windows cosign signature"
  },
  {
    "cmd": [
      "cosign",
      "verify-blob",
      "--cert",
      "[START_DIR]/cosign/windows/certificate/cosign-cert.exe.pem",
      "--signature",
      "[START_DIR]/cosign/windows/certificate/cosign-sig.exe.sig",
      "[START_DIR]/cosign/windows/bin/cosign.exe"
    ],
    "name": "Verify windows cosign binary is legitimate"
  },
  {
    "cmd": [
      "cipd",
      "pkg-build",
      "-in",
      "[START_DIR]/cosign/windows",
      "-name",
      "flutter/tools/cosign/windows-amd64",
      "-out",
      "cosign.zip",
      "-hash-algo",
      "sha256",
      "-json-output",
      "/path/to/tmp/json"
    ],
    "name": "build windows-amd64",
    "~followup_annotations": [
      "@@@STEP_LOG_LINE@json.output@{@@@",
      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
      "@@@STEP_LOG_LINE@json.output@    \"instance_id\": \"40-chars-fake-of-the-package-instance_id\", @@@",
      "@@@STEP_LOG_LINE@json.output@    \"package\": \"flutter/tools/cosign/windows-amd64\"@@@",
      "@@@STEP_LOG_LINE@json.output@  }@@@",
      "@@@STEP_LOG_LINE@json.output@}@@@",
      "@@@STEP_LOG_END@json.output@@@"
    ]
  },
  {
    "cmd": [
      "cipd",
      "pkg-register",
      "cosign.zip",
      "-ref",
      "latest",
      "-json-output",
      "/path/to/tmp/json"
    ],
    "name": "register flutter/tools/cosign/windows-amd64",
    "~followup_annotations": [
      "@@@STEP_LOG_LINE@json.output@{@@@",
      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
      "@@@STEP_LOG_LINE@json.output@    \"instance_id\": \"40-chars-fake-of-the-package-instance_id\", @@@",
      "@@@STEP_LOG_LINE@json.output@    \"package\": \"flutter/tools/cosign/windows-amd64\"@@@",
      "@@@STEP_LOG_LINE@json.output@  }@@@",
      "@@@STEP_LOG_LINE@json.output@}@@@",
      "@@@STEP_LOG_END@json.output@@@",
      "@@@STEP_LINK@flutter/tools/cosign/windows-amd64@https://chrome-infra-packages.appspot.com/p/flutter/tools/cosign/windows-amd64/+/40-chars-fake-of-the-package-instance_id@@@"
    ]
  },
  {
    "name": "$result"
  }
]