mirrors/electron
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions 1

Generate and upload checksums for released ZIPs to GitHub

Browse source 
When generating an Electron release, create a `sha256sum`-compatible
file for each ZIP file, and upload them to the corresponding GitHub release.
This is primarily to confirm that the download of a given ZIP completed
successfully, as opposed to verifying that an Electron team member uploaded
the given ZIP files (which would require using a trusted GPG key).
This commit is contained in:
Mark Lee 2016-07-24 19:19:23 -07:00
parent 01ebc77228
commit 5b07154b8e
2 changed files with 29 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

21
script/upload.py
View file

@ -203,20 +203,29 @@ def create_release_draft(github, tag):
def upload_electron(github, release, file_path):
# Delete the original file before uploading in CI.
checksum_path = '{}.sha256sum'.format(file_path)
# Delete the original file & its checksum before uploading in CI.
filename = os.path.basename(file_path)
checksum_filename = os.path.basename(checksum_path)
if os.environ.has_key('CI'):
try:
for asset in release['assets']:
if asset['name'] == os.path.basename(file_path):
if asset['name'] in [filename, checksum_filename]:
github.repos(ELECTRON_REPO).releases.assets(asset['id']).delete()
break
except Exception:
pass
# Upload the file.
params = {'name': os.path.basename(file_path)}
headers = {'Content-Type': 'application/zip'}
with open(file_path, 'rb') as f:
upload_asset_to_github(github, release, file_path, 'application/zip')
# Upload the file's checksum.
upload_asset_to_github(github, release, checksum_path, 'text/plain')
def upload_asset_to_github(github, release, asset_path, content_type):
params = {'name': os.path.dirname(asset_path)}
headers = {'Content-Type': content_type}
with open(asset_path) as f:
github.repos(ELECTRON_REPO).releases(release['id']).assets.post(
params=params, headers=headers, data=f, verify=False)