feat: Bazel not experimental (#850)

Followup to #840 

Resolves #849 

Removes the experimental flag for verifying bazel attestations.

TODO:

- [ ] add example invocation for bazel
https://github.com/slsa-framework/slsa-verifier/pull/858#pullrequestreview-2947145690
- [ ] create a new release

---------

Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
This commit is contained in:
Ramon Petgrave
2025-06-23 13:46:07 -04:00
committed by GitHub
parent 08d54ab1de
commit 295020463f
2 changed files with 1 additions and 8 deletions

View File

@@ -196,7 +196,7 @@ func verifyGithubAttestation() *cobra.Command {
}
return nil
},
Short: "Verifies SLSA provenance for a github attestation [experimental]",
Short: "Verifies SLSA provenance for a GitHub artifact attestation",
Run: func(cmd *cobra.Command, args []string) {
v := verify.VerifyGithubAttestationCommand{
AttestationPath: o.AttestationPath,

View File

@@ -17,7 +17,6 @@ package verify
import (
"context"
"crypto/sha256"
"errors"
"fmt"
"os"
@@ -35,12 +34,6 @@ type VerifyGithubAttestationCommand struct {
}
func (c *VerifyGithubAttestationCommand) Exec(ctx context.Context, artifact string) (*utils.TrustedBuilderID, error) {
if !options.ExperimentalEnabled() {
err := errors.New("feature support is only provided in SLSA_VERIFIER_EXPERIMENTAL mode")
fmt.Fprintf(os.Stderr, "Verifying github attestation: FAILED: %v\n\n", err)
return nil, err
}
artifactHash, err := computeFileHash(artifact, sha256.New())
if err != nil {
fmt.Fprintf(os.Stderr, "Verifying artifact %s: FAILED: %v\n\n", artifact, err)