[ci] Fix param casing (#32748)

Casing was incorrect.

Tested by running locally with a PAT.

```
$ scripts/release/download-experimental-build.js --commit=005725fe3f7e72a9da1ab34496f48a4bafb8b6ca
Command failed: gh attestation verify artifacts_combined.zip --repo=facebook/react

Error: failed to fetch attestations from facebook/react: HTTP 404: Not Found (https://api.github.com/repos/facebook/react/attestations/sha256:23d05644f9e49e02cbb441e3932cc4366b261826e58ce222ea249a6b786f0b5f?per_page=30)
`gh attestation verify artifacts_combined.zip --repo=facebook/react` (exited with error code 1)

$ scripts/release/download-experimental-build.js --commit=005725fe3f7e72a9da1ab34496f48a4bafb8b6ca --noVerify
⠼ Downloading artifacts from GitHub for commit 005725fe3f)  5%                  0.1m, estimated 1.6m
✓ Downloading artifacts from GitHub for commit 005725fe3f) 9.5 secs
An experimental build has been downloaded!

You can download this build again by running:
  scripts/download-experimental-build.js --commit=005725fe3f7e72a9da1ab34496f48a4bafb8b6ca
```
This commit is contained in:
lauren
2025-03-25 16:05:41 -04:00
committed by GitHub
parent 54ab7e9d04
commit bc0a41fb67
2 changed files with 3 additions and 3 deletions
+2 -2
View File
@@ -487,7 +487,7 @@ jobs:
#
# Note that this means that scripts/release/download-experimental-build.js must be run with
# --no-verify when downloading a build from a fork.
if: github.event.pull_request.head.repo.full_name == github.repository
if: github.event_name == 'push' && github.ref_name == 'main' || github.event.pull_request.head.repo.full_name == github.repository
with:
subject-name: artifacts_combined.zip
subject-digest: sha256:${{ steps.upload_artifacts_combined.outputs.artifact-digest }}
@@ -818,7 +818,7 @@ jobs:
# unverified artifact is not used. Additionally this workflow runs in the pull_request
# trigger so only restricted permissions are available.
run: |
GH_TOKEN=${{ github.token }} scripts/release/download-experimental-build.js --commit=$(git rev-parse ${{ github.event.pull_request.base.sha }}) ${{ (github.event.pull_request.head.repo.full_name != github.repository && '--no-verify') || ''}}
GH_TOKEN=${{ github.token }} scripts/release/download-experimental-build.js --commit=$(git rev-parse ${{ github.event.pull_request.base.sha }}) ${{ (github.event.pull_request.head.repo.full_name != github.repository && '--noVerify') || ''}}
mv ./build ./base-build
- name: Delete extraneous files
# TODO: The `download-experimental-build` script copies the npm
@@ -27,7 +27,7 @@ const argv = yargs.wrap(yargs.terminalWidth()).options({
demandOption: true,
type: 'string',
},
'no-verify': {
noVerify: {
describe: 'Skip verification',
requiresArg: false,
type: 'boolean',