github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-02-14 09:39:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: Bazel not experimental (#850)

Browse Source 
Followup to #840 

Resolves #849 

Removes the experimental flag for verifying bazel attestations.

TODO:

- [ ] add example invocation for bazel
https://github.com/slsa-framework/slsa-verifier/pull/858#pullrequestreview-2947145690
- [ ] create a new release

---------

Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
This commit is contained in:
Ramon Petgrave
2025-06-23 13:46:07 -04:00
committed by GitHub
parent 08d54ab1de
commit 295020463f
2 changed files with 1 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cli/slsa-verifier/verify.go
View File

@@ -196,7 +196,7 @@ func verifyGithubAttestation() *cobra.Command {
} }
return nil return nil
}, },
Short: "Verifies SLSA provenance for a github attestation [experimental]", Short: "Verifies SLSA provenance for a GitHub artifact attestation",
Run: func(cmd *cobra.Command, args []string) { Run: func(cmd *cobra.Command, args []string) {
v := verify.VerifyGithubAttestationCommand{ v := verify.VerifyGithubAttestationCommand{
AttestationPath: o.AttestationPath, AttestationPath: o.AttestationPath,

7
cli/slsa-verifier/verify/verify_github_attestation.go
View File

@@ -17,7 +17,6 @@ package verify
import ( import (
"context" "context"
"crypto/sha256" "crypto/sha256"
"errors"
"fmt" "fmt"
"os" "os"
@@ -35,12 +34,6 @@ type VerifyGithubAttestationCommand struct {
} }
func (c *VerifyGithubAttestationCommand) Exec(ctx context.Context, artifact string) (*utils.TrustedBuilderID, error) { func (c *VerifyGithubAttestationCommand) Exec(ctx context.Context, artifact string) (*utils.TrustedBuilderID, error) {
if !options.ExperimentalEnabled() {
err := errors.New("feature support is only provided in SLSA_VERIFIER_EXPERIMENTAL mode")
fmt.Fprintf(os.Stderr, "Verifying github attestation: FAILED: %v\n\n", err)
return nil, err
}
artifactHash, err := computeFileHash(artifact, sha256.New()) artifactHash, err := computeFileHash(artifact, sha256.New())
if err != nil { if err != nil {
fmt.Fprintf(os.Stderr, "Verifying artifact %s: FAILED: %v\n\n", artifact, err) fmt.Fprintf(os.Stderr, "Verifying artifact %s: FAILED: %v\n\n", artifact, err)