From 8c4d4ba5f26f8885762608c6a38f11308604ac42 Mon Sep 17 00:00:00 2001 From: pos Date: Sat, 5 Sep 2026 15:15:40 +0200 Subject: [PATCH] M1.28.1: harden nested transparency verifier execution --- scripts/verify-transparency-snapshot.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/verify-transparency-snapshot.sh b/scripts/verify-transparency-snapshot.sh index d32a365..ad62ebf 100644 --- a/scripts/verify-transparency-snapshot.sh +++ b/scripts/verify-transparency-snapshot.sh @@ -36,9 +36,9 @@ grep -Eq '^[0-9a-f]{64} release-index\.json$' "$checksum" || { script_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd) if [ -n "$root" ]; then - "$script_dir/verify-release-index.sh" "$index" "$root" >/dev/null + sh "$script_dir/verify-release-index.sh" "$index" "$root" >/dev/null else - "$script_dir/verify-release-index.sh" "$index" >/dev/null + sh "$script_dir/verify-release-index.sh" "$index" >/dev/null fi issuer=${TRANSPARENCY_OIDC_ISSUER:-https://token.actions.githubusercontent.com}