From 9060e0e129da048335f6d2d84ddb5c40898301b1 Mon Sep 17 00:00:00 2001 From: "Tapabrata \"Topo\" Pal" Date: Thu, 22 Oct 2026 09:38:14 -0400 Subject: [PATCH] ci: verify job installs a released prism instead of building mason's pin Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_011Ai1qs5rPZ1cXyu74s4cdB --- .github/workflows/ci.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index eeb35a3..90a22f9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -40,8 +40,10 @@ jobs: with: go-version: ${{ env.GO_VERSION }} cache: true - - name: build prism (pinned dep) - run: go build -o /tmp/prism github.com/provasign/prism/cmd/prism + - name: install prism (release) + # A released binary, not a build of mason's go.mod pin: that pin + # (v0.55.11) no longer builds standalone (missing go.sum entries). + run: curl -fsSL https://raw.githubusercontent.com/provasign/prism/main/install.sh | VERSION=v1.0.1 INSTALL_DIR=/tmp bash - name: verify diff vs base continue-on-error: true run: |