Skip to content

PIE does not check if gh attestation is a valid command (e.g. outdated gh CLI) #321

@asgrim

Description

@asgrim

As a side note, i first encountered this problem, because of the outdated gh:

$ pie self-update
🥧 PHP Installer for Extensions (PIE) 1.0.0, from The PHP Foundation
You are running PHP 8.4.10
Target PHP installation: 8.4.10 nts, on Linux/OSX/etc arm64 (from /opt/homebrew/Cellar/php/8.4.10/bin/php)
You are currently running PIE version 1.0.0
❌ Failed to verify the pie.phar release 1.1.0: `gh` CLI tool could not verify release 1.1.0
                                                                                                                                       
Error: unknown command "attestation" for "gh"                                                                                          
                                                                                                                                       
Usage:  gh <command> <subcommand> [flags]                                                                                              
                                                                                                                                       
Available commands:                                                                                                                    
  alias                                                                                                                                
  api                                                                                                                                  
  auth                                                                                                                                 
  browse                                                                                                                               
  cache                                                                                                                                
  co                                                                                                                                   
  codespace                                                                                                                            
  completion                                                                                                                           
  config                                                                                                                               
  extension                                                                                                                            
  gist                                                                                                                                 
  gpg-key                                                                                                                              
  issue                                                                                                                                
  label                                                                                                                                
  org                                                                                                                                  
  pr                                                                                                                                   
  project                                                                                                                              
  release                                                                                                                              
  repo                                                                                                                                 
  ruleset                                                                                                                              
  run                                                                                                                                  
  search                                                                                                                               
  secret                                                                                                                               
  ssh-key                                                                                                                              
  status                                                                                                                               
  variable                                                                                                                             
  workflow                                                                                                                             
This means I could not verify that the PHAR we tried to update to was authentic, so I am aborting the self-update.

Originally posted by @pronskiy in #320

Metadata

Metadata

Assignees

Labels

maintainer investigatingThis ticket is being investigated by maintainers. Please check with us before contributing PRs etc!

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions