github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-05-10 02:26:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

✨ Update package names and other references (#9)

Browse Source 
* Update repo/project names

* update
This commit is contained in:
laurentsimon
2022-03-29 07:41:56 -07:00
committed by GitHub
parent 6cdcbf9a66
commit 31311a3151
5 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@@ -1 +1 @@
# slsa-provenance
# slsa-verifier

2
go.mod
View File

@@ -1,4 +1,4 @@
module github.com/gossts/slsa-provenance
module github.com/slsa-framework/slsa-verifier
go 1.17

4
main.go
View File

@@ -11,8 +11,8 @@ import (
"log"
"os"
"github.com/gossts/slsa-provenance/pkg"
"github.com/sigstore/cosign/cmd/cosign/cli/rekor"
"github.com/slsa-framework/slsa-verifier/pkg"
)
func usage(p string) {
@@ -89,7 +89,7 @@ func verify(ctx context.Context, provenancePath, artifactHash, source string) er
func main() {
flag.StringVar(&provenancePath, "provenance", "", "path to a provenance file")
flag.StringVar(&binaryPath, "binary", "", "path to a binary to verify")
flag.StringVar(&source, "source", "", "expected source repository that should have produced the binary, e.g. github.com/gossts/example")
flag.StringVar(&source, "source", "", "expected source repository that should have produced the binary, e.g. github.com/some/repo")
flag.Parse()
if provenancePath == "" || binaryPath == "" || source == "" {

2
pkg/provenance.go
View File

@@ -41,7 +41,7 @@ const (
defaultRekorAddr = "https://rekor.sigstore.dev"
certOidcIssuer = "https://token.actions.githubusercontent.com"
// TODO: Make this into a list.
trustedReusableWorkflow = "gossts/slsa-go/.github/workflows/builder.yml"
trustedReusableWorkflow = "slsa-framework/slsa-github-generator-go/.github/workflows/builder.yml"
)
var (

8
pkg/provenance_test.go
View File

@@ -193,7 +193,7 @@ func TestVerifyWorkflowIdentity(t *testing.T) {
workflow: &WorkflowIdentity{
CallerRepository: "asraa/slsa-on-github-test",
CallerHash: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b",
JobWobWorkflowRef: "/gossts/slsa-go/.github/workflows/builder.yml@refs/heads/main",
JobWobWorkflowRef: "/slsa-framework/slsa-github-generator-go/.github/workflows/builder.yml@refs/heads/main",
Trigger: "workflow_dispatch",
Issuer: "https://bad.issuer.com",
},
@@ -205,7 +205,7 @@ func TestVerifyWorkflowIdentity(t *testing.T) {
workflow: &WorkflowIdentity{
CallerRepository: "malicious/slsa-on-github-test",
CallerHash: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b",
JobWobWorkflowRef: "/gossts/slsa-go/.github/workflows/builder.yml@refs/heads/main",
JobWobWorkflowRef: "/slsa-framework/slsa-github-generator-go/.github/workflows/builder.yml@refs/heads/main",
Trigger: "workflow_dispatch",
Issuer: "https://token.actions.githubusercontent.com",
},
@@ -217,7 +217,7 @@ func TestVerifyWorkflowIdentity(t *testing.T) {
workflow: &WorkflowIdentity{
CallerRepository: "asraa/slsa-on-github-test",
CallerHash: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b",
JobWobWorkflowRef: "/gossts/slsa-go/.github/workflows/builder.yml@refs/heads/main",
JobWobWorkflowRef: "/slsa-framework/slsa-github-generator-go/.github/workflows/builder.yml@refs/heads/main",
Trigger: "workflow_dispatch",
Issuer: "https://token.actions.githubusercontent.com",
},
@@ -229,7 +229,7 @@ func TestVerifyWorkflowIdentity(t *testing.T) {
workflow: &WorkflowIdentity{
CallerRepository: "asraa/slsa-on-github-test",
CallerHash: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b",
JobWobWorkflowRef: "/gossts/slsa-go/.github/workflows/builder.yml@refs/heads/main",
JobWobWorkflowRef: "/slsa-framework/slsa-github-generator-go/.github/workflows/builder.yml@refs/heads/main",
Trigger: "workflow_dispatch",
Issuer: "https://token.actions.githubusercontent.com",
},