tree ff024a1a6ab1bd58779d1c2ff2209bef45ae6a8b
parent 21c91ab7c8aa04f5785bfba73279f72406aa8168
author Drew Roen <drewroen@google.com> 1660153733 +0000
committer CQ Bot Account <flutter-scoped@luci-project-accounts.iam.gserviceaccount.com> 1660153733 +0000

Add recipe that automatically uploads the latest version of cosign to CIPD

* Uses the github api to get the latest release from sigstore/cosign, then uses it to find the specific artifacts needed based on the os
* Downloads the binary/certificates
* Uses the current version of cosign to verify the new version is valid
* If it is verified to be ok, it is uploaded to CIPD if the version is a new version

Exmaple build: https://ci.chromium.org/raw/build/logs.chromium.org/flutter/led/drewroen_google.com/6adad536aa2eede8631c572002a2cdb852b11ce571820acc133d3cb1793b9a48/+/build.proto?server=chromium-swarm.appspot.com

Buganizer: https://b.corp.google.com/issues/238423446

Change-Id: I3ac83a04cf13911d2c8628fadc5e12972b40f336
Reviewed-on: https://flutter-review.googlesource.com/c/recipes/+/31780
Reviewed-by: Godofredo Contreras <godofredoc@google.com>
Reviewed-by: Jesse Seales <jseales@google.com>
Commit-Queue: Drew Roen <drewroen@google.com>