diff --git a/go.mod b/go.mod index 61f6cdd..166cb1d 100644 --- a/go.mod +++ b/go.mod @@ -7,7 +7,7 @@ require ( github.com/go-openapi/runtime v0.25.0 github.com/google/go-cmp v0.5.9 github.com/google/trillian v1.5.1-0.20220819043421-0a389c4bb8d9 // indirect - github.com/in-toto/in-toto-golang v0.6.1-0.20230207212643-96dcb8c596fb + github.com/in-toto/in-toto-golang v0.6.1-0.20230209184401-f8269f61247e github.com/secure-systems-lab/go-securesystemslib v0.4.0 github.com/sigstore/rekor v1.0.1 github.com/sigstore/sigstore v1.5.1 @@ -232,18 +232,18 @@ require ( go.uber.org/atomic v1.10.0 // indirect go.uber.org/multierr v1.8.0 // indirect go.uber.org/zap v1.24.0 // indirect - golang.org/x/crypto v0.5.0 // indirect + golang.org/x/crypto v0.6.0 // indirect golang.org/x/exp v0.0.0-20220823124025-807a23277127 // indirect - golang.org/x/net v0.5.0 // indirect + golang.org/x/net v0.6.0 // indirect golang.org/x/oauth2 v0.4.0 // indirect golang.org/x/sync v0.1.0 // indirect golang.org/x/sys v0.5.0 // indirect - golang.org/x/term v0.4.0 // indirect - golang.org/x/text v0.6.0 // indirect + golang.org/x/term v0.5.0 // indirect + golang.org/x/text v0.7.0 // indirect golang.org/x/time v0.3.0 // indirect golang.org/x/tools v0.5.0 // indirect google.golang.org/appengine v1.6.7 // indirect - google.golang.org/genproto v0.0.0-20230202175211-008b39050e57 // indirect + google.golang.org/genproto v0.0.0-20230209215440-0dfe4f8abfcc // indirect google.golang.org/grpc v1.53.0 // indirect google.golang.org/protobuf v1.28.1 gopkg.in/cheggaaa/pb.v1 v1.0.28 // indirect diff --git a/go.sum b/go.sum index 8de5226..bdb74ab 100644 --- a/go.sum +++ b/go.sum @@ -921,6 +921,10 @@ github.com/in-toto/in-toto-golang v0.6.1-0.20230207163334-3493691c6d9c h1:d50sx5 github.com/in-toto/in-toto-golang v0.6.1-0.20230207163334-3493691c6d9c/go.mod h1:AoOsIJkpD8RHrZIAQxXqhGPm7M38IzT4JAdgPpf4OZc= github.com/in-toto/in-toto-golang v0.6.1-0.20230207212643-96dcb8c596fb h1:lUoNEu/QPf8P52025Pk46e5godp1uRUzSJ3CQknuFdE= github.com/in-toto/in-toto-golang v0.6.1-0.20230207212643-96dcb8c596fb/go.mod h1:AoOsIJkpD8RHrZIAQxXqhGPm7M38IzT4JAdgPpf4OZc= +github.com/in-toto/in-toto-golang v0.6.1-0.20230209165403-64db848c2ff5 h1:rkgh5ngupN/AKqBOx1Iv6MMGvGjfGHmdp4m1G/V04w4= +github.com/in-toto/in-toto-golang v0.6.1-0.20230209165403-64db848c2ff5/go.mod h1:AoOsIJkpD8RHrZIAQxXqhGPm7M38IzT4JAdgPpf4OZc= +github.com/in-toto/in-toto-golang v0.6.1-0.20230209184401-f8269f61247e h1:GmiHh3s1OVNsSPBNsPSfehT+CcjJN8q6FQCkQphhBOA= +github.com/in-toto/in-toto-golang v0.6.1-0.20230209184401-f8269f61247e/go.mod h1:AoOsIJkpD8RHrZIAQxXqhGPm7M38IzT4JAdgPpf4OZc= github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8= github.com/inconshreveable/mousetrap v1.0.1 h1:U3uMjPSQEBMNp1lFxmllqCPM6P5u/Xq7Pgzkat/bFNc= github.com/inconshreveable/mousetrap v1.0.1/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= @@ -1651,6 +1655,8 @@ golang.org/x/crypto v0.4.0 h1:UVQgzMY87xqpKNgb+kDsll2Igd33HszWHFLmpaRMq/8= golang.org/x/crypto v0.4.0/go.mod h1:3quD/ATkf6oY+rnes5c3ExXTbLc8mueNue5/DoinL80= golang.org/x/crypto v0.5.0 h1:U/0M97KRkSFvyD/3FSmdP5W5swImpNgle/EHFhOsQPE= golang.org/x/crypto v0.5.0/go.mod h1:NK/OQwhpMQP3MwtdjgLlYHnH9ebylxKWv3e0fK+mkQU= +golang.org/x/crypto v0.6.0 h1:qfktjS5LUO+fFKeJXZ+ikTRijMmljikvG68fpMMruSc= +golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -1778,6 +1784,8 @@ golang.org/x/net v0.3.0/go.mod h1:MBQ8lrhLObU/6UmLb4fmbmk5OcyYmqtbGd/9yIeKjEE= golang.org/x/net v0.4.0/go.mod h1:MBQ8lrhLObU/6UmLb4fmbmk5OcyYmqtbGd/9yIeKjEE= golang.org/x/net v0.5.0 h1:GyT4nK/YDHSqa1c4753ouYCDajOYKTja9Xb/OHtgvSw= golang.org/x/net v0.5.0/go.mod h1:DivGGAXEgPSlEBzxGzZI+ZLohi+xUj054jfeKui00ws= +golang.org/x/net v0.6.0 h1:L4ZwwTvKW9gr0ZMS1yrHD9GZhIuVjOBBnaKH+SPQK0Q= +golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20181106182150-f42d05182288/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -1956,6 +1964,8 @@ golang.org/x/term v0.3.0 h1:qoo4akIqOcDME5bhc/NgxUdovd6BSS2uMsVjB56q1xI= golang.org/x/term v0.3.0/go.mod h1:q750SLmJuPmVoN1blW3UFBPREJfb1KmY3vwxfr+nFDA= golang.org/x/term v0.4.0 h1:O7UWfv5+A2qiuulQk30kVinPoMtoIPeVaKLEgLpVkvg= golang.org/x/term v0.4.0/go.mod h1:9P2UbLfCdcvo3p/nzKvsmas4TnlujnuoV9hGgYzW1lQ= +golang.org/x/term v0.5.0 h1:n2a8QNdAb0sZNpU9R1ALUXBbY+w51fCQDN+7EdxNBsY= +golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -1971,6 +1981,8 @@ golang.org/x/text v0.5.0 h1:OLmvp0KP+FVG99Ct/qFiL/Fhk4zp4QQnZ7b2U+5piUM= golang.org/x/text v0.5.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.6.0 h1:3XmdazWV+ubf7QgHSTWeykHOci5oeekaGJBLkrkaw4k= golang.org/x/text v0.6.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= +golang.org/x/text v0.7.0 h1:4BRB4x83lYWy72KwLD/qYDuTu7q9PjSagHvijDw7cLo= +golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= @@ -2249,6 +2261,8 @@ google.golang.org/genproto v0.0.0-20230125152338-dcaf20b6aeaa h1:qQPhfbPO23fwm/9 google.golang.org/genproto v0.0.0-20230125152338-dcaf20b6aeaa/go.mod h1:RGgjbofJ8xD9Sq1VVhDM1Vok1vRONV+rg+CjzG4SZKM= google.golang.org/genproto v0.0.0-20230202175211-008b39050e57 h1:vArvWooPH749rNHpBGgVl+U9B9dATjiEhJzcWGlovNs= google.golang.org/genproto v0.0.0-20230202175211-008b39050e57/go.mod h1:RGgjbofJ8xD9Sq1VVhDM1Vok1vRONV+rg+CjzG4SZKM= +google.golang.org/genproto v0.0.0-20230209215440-0dfe4f8abfcc h1:ijGwO+0vL2hJt5gaygqP2j6PfflOBrRot0IczKbmtio= +google.golang.org/genproto v0.0.0-20230209215440-0dfe4f8abfcc/go.mod h1:RGgjbofJ8xD9Sq1VVhDM1Vok1vRONV+rg+CjzG4SZKM= google.golang.org/grpc v1.8.0/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw= google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs= google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= diff --git a/verifiers/internal/gha/provenance.go b/verifiers/internal/gha/provenance.go index 7fc335b..7480dc2 100644 --- a/verifiers/internal/gha/provenance.go +++ b/verifiers/internal/gha/provenance.go @@ -18,7 +18,6 @@ import ( serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/options" "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" // Load provenance types. _ "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v0.2" @@ -249,7 +248,7 @@ func VerifyWorkflowInputs(prov slsaprovenance.Provenance, inputs map[string]stri // Verify all inputs. for k, v := range inputs { - value, err := utils.GetAsString(pyldInputs, k) + value, err := slsaprovenance.GetAsString(pyldInputs, k) if err != nil { return fmt.Errorf("%w: cannot retrieve value of '%s'", serrors.ErrorMismatchWorkflowInputs, k) } diff --git a/verifiers/internal/gha/provenance_test.go b/verifiers/internal/gha/provenance_test.go index ac411f3..999355e 100644 --- a/verifiers/internal/gha/provenance_test.go +++ b/verifiers/internal/gha/provenance_test.go @@ -3,6 +3,7 @@ package gha import ( "fmt" "os" + "strings" "testing" "github.com/google/go-cmp/cmp" @@ -586,6 +587,42 @@ func Test_VerifyBranch(t *testing.T) { branch: "main", expected: serrors.ErrorMismatchBranch, }, + + { + name: "ref main", + path: "./testdata/dsse-main-ref-v1.intoto.jsonl", + branch: "main", + }, + { + name: "ref branch3", + path: "./testdata/dsse-branch3-ref-v1.intoto.jsonl", + branch: "branch3", + }, + + { + name: "invalid ref type", + path: "./testdata/dsse-invalid-ref-type-v1.intoto.jsonl", + expected: serrors.ErrorInvalidDssePayload, + }, + + { + name: "tag branch2 push trigger", + path: "./testdata/dsse-branch2-tag-v1.intoto.jsonl", + branch: "branch2", + }, + + { + name: "v10.0.1 release trigger", + path: "./testdata/dsse-v10.0.1-release-v1.intoto.jsonl", + branch: "main", + }, + + { + name: "from commit push - no branch", + path: "./testdata/dsse-annotated-tag-v1.intoto.jsonl", + branch: "main", + expected: serrors.ErrorMismatchBranch, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -671,6 +708,60 @@ func Test_VerifyWorkflowInputs(t *testing.T) { }, expected: serrors.ErrorMismatchWorkflowInputs, }, + { + name: "match all", + path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", + inputs: map[string]string{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, + }, + { + name: "match subset", + path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", + inputs: map[string]string{ + "release_version": "v1.2.3", + "some_integer": "123", + }, + }, + { + name: "missing field", + path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", + inputs: map[string]string{ + "release_version": "v1.2.3", + "missing_field": "123", + }, + expected: serrors.ErrorMismatchWorkflowInputs, + }, + { + name: "mismatch field release_version", + path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", + inputs: map[string]string{ + "release_version": "v1.2.4", + "some_integer": "123", + }, + expected: serrors.ErrorMismatchWorkflowInputs, + }, + { + name: "mismatch field some_integer", + path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", + inputs: map[string]string{ + "release_version": "v1.2.3", + "some_integer": "124", + }, + expected: serrors.ErrorMismatchWorkflowInputs, + }, + { + name: "not workflow_dispatch trigger", + path: "./testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl", + inputs: map[string]string{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, + expected: serrors.ErrorMismatchWorkflowInputs, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -722,6 +813,26 @@ func Test_VerifyTag(t *testing.T) { path: "./testdata/dsse-vslsa1-tag.intoto.jsonl", tag: "vslsa1", }, + { + name: "ref main", + path: "./testdata/dsse-main-ref-v1.intoto.jsonl", + expected: serrors.ErrorMismatchTag, + }, + { + name: "ref branch3", + path: "./testdata/dsse-branch3-ref-v1.intoto.jsonl", + expected: serrors.ErrorMismatchTag, + }, + { + name: "invalid ref type", + path: "./testdata/dsse-invalid-ref-type-v1.intoto.jsonl", + expected: serrors.ErrorInvalidDssePayload, + }, + { + name: "tag vslsa1", + path: "./testdata/dsse-vslsa1-tag-v1.intoto.jsonl", + tag: "vslsa1", + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -1058,18 +1169,23 @@ func Test_VerifyVersionedTag(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - prov, err := provenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("provenanceFromBytes: %w", err)) - } + for _, version := range []string{"", "-v1"} { + pathParts := strings.Split(tt.path, ".intoto") + pathName := []string{pathParts[0] + version} + pathName = append(pathName, pathParts[1:]...) + content, err := os.ReadFile(strings.Join(pathName, ".intoto")) + if err != nil { + panic(fmt.Errorf("os.ReadFile: %w", err)) + } + prov, err := provenanceFromBytes(content) + if err != nil { + panic(fmt.Errorf("provenanceFromBytes: %w", err)) + } - err = VerifyVersionedTag(prov, tt.tag) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected)) + err = VerifyVersionedTag(prov, tt.tag) + if !errCmp(err, tt.expected) { + t.Errorf(cmp.Diff(err, tt.expected)) + } } }) } diff --git a/verifiers/internal/gha/slsaprovenance/common.go b/verifiers/internal/gha/slsaprovenance/common.go new file mode 100644 index 0000000..279a9f9 --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/common.go @@ -0,0 +1,220 @@ +package slsaprovenance + +import ( + "fmt" + "strings" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" +) + +// GetWorkflowInputs gets the workflow inputs from the GitHub environment map +// and converts the keys to the necessary casing depending on predicate type. +func GetWorkflowInputs(environment map[string]any, predicateType string) (map[string]any, error) { + // Verify it's a workflow_dispatch trigger. + eventKey, err := convertKey("github_event_name", predicateType) + if err != nil { + return nil, fmt.Errorf("%w: %s", + serrors.ErrorMismatchWorkflowInputs, err) + } + triggerName, err := GetAsString(environment, eventKey) + if err != nil { + return nil, err + } + if triggerName != "workflow_dispatch" { + return nil, fmt.Errorf("%w: expected 'workflow_dispatch' trigger, got %s", + serrors.ErrorMismatchWorkflowInputs, triggerName) + } + + payload, err := GetEventPayload(environment, predicateType) + if err != nil { + return nil, err + } + + payloadInputs, err := getAsAny(payload, "inputs") + if err != nil { + return nil, fmt.Errorf("%w: error retrieving 'inputs': %v", serrors.ErrorInvalidDssePayload, err) + } + + pyldInputs, ok := payloadInputs.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type inputs") + } + return pyldInputs, nil +} + +// GetEventPayload retrieves the GitHub event payload from the environment map +// that contains the GitHub context payload. +func GetEventPayload(environment map[string]any, predicateType string) (map[string]any, error) { + eventPayloadKey, err := convertKey("github_event_payload", predicateType) + if err != nil { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) + } + eventPayload, ok := environment[eventPayloadKey] + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type event payload") + } + + payload, ok := eventPayload.(map[string]any) + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type payload") + } + + return payload, nil +} + +func convertKey(key, predicateType string) (string, error) { + switch predicateType { + case ProvenanceV1DraftType: + return strings.ToUpper(key), nil + case ProvenanceV02Type: + return key, nil + default: + return "", fmt.Errorf("unrecognized predicate type %s", predicateType) + } +} + +func getAsAny(environment map[string]any, field string) (any, error) { + value, ok := environment[field] + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, + fmt.Sprintf("environment type for %s", field)) + } + return value, nil +} + +func getBranchForTag(environment map[string]any, predicateType string) (string, error) { + baseRefKey, err := convertKey("github_base_ref", predicateType) + if err != nil { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) + } + + baseRef, err := GetAsString(environment, baseRefKey) + if err != nil { + return "", err + } + + // This `base_ref` seems to always be "". + if baseRef != "" { + return baseRef, nil + } + + // Look at the event payload instead. + environmentKey, err := convertKey("github_event_name", predicateType) + if err != nil { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) + } + eventName, err := GetAsString(environment, environmentKey) + if err != nil { + return "", err + } + + payload, err := GetEventPayload(environment, predicateType) + if err != nil { + return "", err + } + + // We don't do that for all triggers because the payload + // is event-specific. Only `push` events seem to have a `base_ref`, and + // `release` events specify a branch in `target_commitish`. + switch eventName { + case "push": + value, err := getAsAny(payload, "base_ref") + if err != nil { + return "", err + } + + // The `base_ref` field may be nil if the build was from + // a specific commit rather than a branch. + v, ok := value.(string) + if !ok { + return "", nil + } + return v, nil + case "release": + // For a release event, we look for release.target_commitish. + releasePayload, ok := payload["release"] + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "release absent from payload") + } + + release, ok := releasePayload.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type releasePayload") + } + + branch, err := GetAsString(release, "target_commitish") + if err != nil { + return "", fmt.Errorf("%w: %s", err, "target_commitish not present") + } + + return "refs/heads/" + branch, nil + default: + return "", nil + } +} + +func GetTag(environment map[string]any, predicateType string) (string, error) { + refTypeKey, err := convertKey("github_ref_type", predicateType) + if err != nil { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) + } + + refType, err := GetAsString(environment, refTypeKey) + if err != nil { + return "", err + } + + switch refType { + case "branch": + return "", nil + case "tag": + refKey, err := convertKey("github_ref", predicateType) + if err != nil { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) + } + return GetAsString(environment, refKey) + default: + return "", fmt.Errorf("%w: %s %s", serrors.ErrorInvalidDssePayload, + "unknown ref type", refType) + } +} + +func GetBranch(environment map[string]any, predicateType string) (string, error) { + refTypeKey, err := convertKey("github_ref_type", predicateType) + if err != nil { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) + } + + refType, err := GetAsString(environment, refTypeKey) + if err != nil { + return "", err + } + + switch refType { + case "branch": + refKey, err := convertKey("github_ref", predicateType) + if err != nil { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) + } + return GetAsString(environment, refKey) + case "tag": + return getBranchForTag(environment, predicateType) + default: + return "", fmt.Errorf("%w: %s %s", serrors.ErrorInvalidDssePayload, + "unknown ref type", refType) + } +} + +func GetAsString(environment map[string]any, field string) (string, error) { + value, ok := environment[field] + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, + fmt.Sprintf("environment type for %s", field)) + } + + i, ok := value.(string) + if !ok { + return "", fmt.Errorf("%w: %s '%s'", serrors.ErrorInvalidDssePayload, "environment type string", field) + } + return i, nil +} diff --git a/verifiers/internal/gha/slsaprovenance/slsaprovenance.go b/verifiers/internal/gha/slsaprovenance/slsaprovenance.go index 5466ee2..f7a3db9 100644 --- a/verifiers/internal/gha/slsaprovenance/slsaprovenance.go +++ b/verifiers/internal/gha/slsaprovenance/slsaprovenance.go @@ -11,6 +11,11 @@ import ( serrors "github.com/slsa-framework/slsa-verifier/v2/errors" ) +const ( + ProvenanceV1DraftType = "https://slsa.dev/provenance/v1.0?draft" + ProvenanceV02Type = "https://slsa.dev/provenance/v0.2" +) + type Provenance interface { // BuilderID returns the builder id in the predicate. BuilderID() (string, error) diff --git a/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go b/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go index 223d52d..74dc2da 100644 --- a/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go +++ b/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go @@ -6,7 +6,6 @@ import ( intoto "github.com/in-toto/in-toto-golang/in_toto" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" ) // TODO(https://github.com/slsa-framework/slsa-verifier/issues/473): Use a static mapping. @@ -14,7 +13,7 @@ import ( //nolint:gochecknoinits func init() { slsaprovenance.ProvenanceMap.Store( - "https://slsa.dev/provenance/v0.2", + slsaprovenance.ProvenanceV02Type, New) } @@ -57,20 +56,7 @@ func (prov *ProvenanceV02) GetBranch() (string, error) { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") } - refType, err := utils.GetAsString(environment, "github_ref_type") - if err != nil { - return "", err - } - - switch refType { - case "branch": - return utils.GetAsString(environment, "github_ref") - case "tag": - return getBranchForTag(prov) - default: - return "", fmt.Errorf("%w: %s %s", serrors.ErrorInvalidDssePayload, - "unknown ref type", refType) - } + return slsaprovenance.GetBranch(environment, prov.PredicateType) } func (prov *ProvenanceV02) GetTag() (string, error) { @@ -79,20 +65,7 @@ func (prov *ProvenanceV02) GetTag() (string, error) { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") } - refType, err := utils.GetAsString(environment, "github_ref_type") - if err != nil { - return "", err - } - - switch refType { - case "branch": - return "", nil - case "tag": - return utils.GetAsString(environment, "github_ref") - default: - return "", fmt.Errorf("%w: %s %s", serrors.ErrorInvalidDssePayload, - "unknown ref type", refType) - } + return slsaprovenance.GetTag(environment, prov.PredicateType) } func (prov *ProvenanceV02) GetWorkflowInputs() (map[string]interface{}, error) { @@ -102,119 +75,5 @@ func (prov *ProvenanceV02) GetWorkflowInputs() (map[string]interface{}, error) { return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") } - triggerName, err := utils.GetAsString(environment, "github_event_name") - if err != nil { - return nil, err - } - if triggerName != "workflow_dispatch" { - return nil, fmt.Errorf("%w: expected 'workflow_dispatch' trigger, got %s", - serrors.ErrorMismatchWorkflowInputs, triggerName) - } - - payload, err := getEventPayload(environment) - if err != nil { - return nil, err - } - - payloadInputs, err := getAsAny(payload, "inputs") - if err != nil { - return nil, fmt.Errorf("%w: error retrieving 'inputs': %v", serrors.ErrorInvalidDssePayload, err) - } - - pyldInputs, ok := payloadInputs.(map[string]interface{}) - if !ok { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type inputs") - } - return pyldInputs, nil -} - -func getBranchForTag(prov *ProvenanceV02) (string, error) { - // First try the base_ref. - environment, ok := prov.Predicate.Invocation.Environment.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") - } - - baseRef, err := utils.GetAsString(environment, "github_base_ref") - if err != nil { - return "", err - } - - // This `base_ref` seems to always be "". - if baseRef != "" { - return baseRef, nil - } - - // Look at the event payload instead. - eventName, err := utils.GetAsString(environment, "github_event_name") - if err != nil { - return "", err - } - - payload, err := getEventPayload(environment) - if err != nil { - return "", err - } - - // We don't do that for all triggers because the payload - // is event-specific. Only `push` events seem to have a `base_ref`, and - // `release` events specify a branch in `target_commitish`. - switch eventName { - case "push": - value, err := getAsAny(payload, "base_ref") - if err != nil { - return "", err - } - - // The `base_ref` field may be nil if the build was from - // a specific commit rather than a branch. - v, ok := value.(string) - if !ok { - return "", nil - } - return v, nil - case "release": - // For a release event, we look for release.target_commitish. - releasePayload, ok := payload["release"] - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "release absent from payload") - } - - release, ok := releasePayload.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type releasePayload") - } - - branch, err := utils.GetAsString(release, "target_commitish") - if err != nil { - return "", fmt.Errorf("%w: %s", err, "target_commitish not present") - } - - return "refs/heads/" + branch, nil - default: - return "", nil - } -} - -func getAsAny(environment map[string]any, field string) (any, error) { - value, ok := environment[field] - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, - fmt.Sprintf("environment type for %s", field)) - } - return value, nil -} - -func getEventPayload(environment map[string]any) (map[string]any, error) { - eventPayload, ok := environment["github_event_payload"] - if !ok { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type event payload") - } - - payload, ok := eventPayload.(map[string]any) - if !ok { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type payload") - } - - return payload, nil + return slsaprovenance.GetWorkflowInputs(environment, prov.PredicateType) } diff --git a/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go b/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go index 60e3231..95c7687 100644 --- a/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go +++ b/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go @@ -1,7 +1,6 @@ package v1 import ( - "errors" "fmt" intoto "github.com/in-toto/in-toto-golang/in_toto" @@ -15,18 +14,21 @@ import ( //nolint:gochecknoinits func init() { slsaprovenance.ProvenanceMap.Store( - "https://slsa.dev/provenance/v1.0?draft", + slsaprovenance.ProvenanceV1DraftType, New) } type ProvenanceV1 struct { intoto.StatementHeader - Predicate slsa1.ProvenancePredicate `json:"predicate"` + Predicate slsa1.ProvenancePredicate `json:"predicate"` + predicateType string } // This returns a new, empty instance of the v0.2 provenance. func New() slsaprovenance.Provenance { - return &ProvenanceV1{} + return &ProvenanceV1{ + predicateType: slsaprovenance.ProvenanceV1DraftType, + } } func (prov *ProvenanceV1) BuilderID() (string, error) { @@ -64,14 +66,26 @@ func (prov *ProvenanceV1) Subjects() ([]intoto.Subject, error) { func (prov *ProvenanceV1) GetBranch() (string, error) { // TODO(https://github.com/slsa-framework/slsa-verifier/issues/472): Add GetBranch() support. - return "", errors.New("unimplemented") + sysParams, ok := prov.Predicate.BuildDefinition.SystemParameters.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + } + + return slsaprovenance.GetBranch(sysParams, prov.predicateType) } func (prov *ProvenanceV1) GetTag() (string, error) { - // TODO(https://github.com/slsa-framework/slsa-verifier/issues/472): Add GetTag() support. - return "", errors.New("unimplemented") + sysParams, ok := prov.Predicate.BuildDefinition.SystemParameters.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + } + return slsaprovenance.GetTag(sysParams, prov.predicateType) } func (prov *ProvenanceV1) GetWorkflowInputs() (map[string]interface{}, error) { - return nil, errors.New("unimplemented") + sysParams, ok := prov.Predicate.BuildDefinition.SystemParameters.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + } + return slsaprovenance.GetWorkflowInputs(sysParams, prov.predicateType) } diff --git a/verifiers/internal/gha/testdata/dsse-annotated-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-annotated-tag-v1.intoto.jsonl new file mode 100644 index 0000000..6ac6b98 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-annotated-tag-v1.intoto.jsonl @@ -0,0 +1,11 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "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", + "signatures": [ + { + "keyid": "", + "sig": "MEQCIDkvUKQpbCRy0vtbmOCjHyb6NcAZvVn8+pFePCWr8j6iAiB9cZBFGnuE19DaO1PCBCV72dFRqdLkiceCWS/JG6Kl9A==", + "cert": "-----BEGIN CERTIFICATE-----\nMIIDPjCCAsOgAwIBAgIUAMCNMIi+TBlK/3dXro7koENp/08wCgYIKoZIzj0EAwMw\nKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0y\nMjA4MDUxNTQ3MzJaFw0yMjA4MDUxNTU3MzFaMAAwWTATBgcqhkjOPQIBBggqhkjO\nPQMBBwNCAATtSRaJAp/3YS9RGt2JXWTQUo82IO9CKBl7GRR/Wn4F1DYgEA+r34pp\n+HNiYsHozL42qjWagmKaBDxgdIsIKzB0o4IB7zCCAeswDgYDVR0PAQH/BAQDAgeA\nMBMGA1UdJQQMMAoGCCsGAQUFBwMDMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFO/q\nSIy4zy74V5dEVtypObDo+xv+MB8GA1UdIwQYMBaAFFjAHl+RRaVmqXrMkKGTItAq\nxcX6MIGEBgNVHREBAf8EejB4hnZodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFt\nZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yLy5naXRodWIvd29ya2Zsb3dzL2dl\nbmVyYXRvcl9nZW5lcmljX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuMi4wMDIGCisG\nAQQBg78wAQUEJHNldGhtbGFyc29uL3B5dGhvbi1zbHNhLXJlbGVhc2UtdGVzdDA2\nBgorBgEEAYO/MAEDBChjOGY4OTk2ZTQwZWY3ZTA1MzlkMGIwYWQ0MDVjZjNhYmRi\nZDIwODY1MDkGCisGAQQBg78wAQEEK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRo\ndWJ1c2VyY29udGVudC5jb20wHQYKKwYBBAGDvzABBgQPcmVmcy90YWdzLzAuMS45\nMBUGCisGAQQBg78wAQQEB1JlbGVhc2UwEgYKKwYBBAGDvzABAgQEcHVzaDAKBggq\nhkjOPQQDAwNpADBmAjEA4cZAjJPMV4vIpdwGE7sFt/j9fgSNTB3HhKCOMbAWD9dZ\npBf9Yv0GUP+duHSsjW6FAjEAgpqc5Z3hjvm98DO2fIKxXT/jEC7BLbjJB4Mfpmhi\njH2IwOwnU1BPDrtPLv9K9eGJ\n-----END CERTIFICATE-----\n" + } + ] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-branch2-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-branch2-tag-v1.intoto.jsonl new file mode 100644 index 0000000..8201c24 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-branch2-tag-v1.intoto.jsonl @@ -0,0 +1,10 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJzdWJqZWN0IjogWwogICAgewogICAgICAiZGlnZXN0IjogewogICAgICAgICJzaGEyNTYiOiAiMGFlN2U0ZmE3MTY4NjUzODQ0MDAxMmVlMzZhMjYzNGRiYWExOWRmMmRkMTZhNDY2ZjUyNDExZmIzNDhiYmM0ZSIKICAgICAgfSwKICAgICAgIm5hbWUiOiAiYmluYXJ5LWxpbnV4LWFtZDY0IgogICAgfQogIF0sCiAgInByZWRpY2F0ZVR5cGUiOiAiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxLjA/ZHJhZnQiLAogICJwcmVkaWNhdGUiOiB7CiAgICAiYnVpbGREZWZpbml0aW9uIjogewogICAgICAiYnVpbGRUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9BdHRlc3RhdGlvbnMvR2l0SHViQWN0aW9uc1dvcmtmbG93QHYxIiwKICAgICAgImV4dGVybmFsUGFyYW1ldGVycyI6IHsKICAgICAgICAic291cmNlIjogewogICAgICAgICAgInVyaSI6ICJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsCiAgICAgICAgICAiZGlnZXN0IjogewogICAgICAgICAgICAic2hhMSI6ICI0ZTZjNWY2ZDBiNGExMjZmYTIzNzNkN2U1N2I3YTBhZjA1MTA4NzkxIgogICAgICAgICAgfQogICAgICAgIH0KICAgICAgfSwKICAgICAgInN5c3RlbVBhcmFtZXRlcnMiOiB7CiAgICAgICAgIlJVTk5FUl9BUkNIIjogIlg2NCIsCiAgICAgICAgIkdJVEhVQl9BQ1RPUiI6ICJhc3JhYSIsCiAgICAgICAgIkdJVEhVQl9CQVNFX1JFRiI6ICIiLAogICAgICAgICJHSVRIVUJfRVZFTlRfTkFNRSI6ICJwdXNoIiwKICAgICAgICAiR0lUSFVCX0VWRU5UX1BBWUxPQUQiOiB7CiAgICAgICAgICAiYWZ0ZXIiOiAiZjYyYTgxODg4NTUxNzhhYmRmMTVhMDcwNzY5MDBhYzRiYmU5NTFlZSIsCiAgICAgICAgICAiYmFzZV9yZWYiOiAicmVmcy9oZWFkcy9icmFuY2gyIiwKICAgICAgICAgICJiZWZvcmUiOiAiMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMCIsCiAgICAgICAgICAiY29tbWl0cyI6IFtdLAogICAgICAgICAgImNvbXBhcmUiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS9zbHNhMSIsCiAgICAgICAgICAiY3JlYXRlZCI6IHRydWUsCiAgICAgICAgICAiZGVsZXRlZCI6IGZhbHNlLAogICAgICAgICAgImZvcmNlZCI6IGZhbHNlLAogICAgICAgICAgImhlYWRfY29tbWl0IjogewogICAgICAgICAgICAiYXV0aG9yIjogewogICAgICAgICAgICAgICJlbWFpbCI6ICJhc3JhYUBnb29nbGUuY29tIiwKICAgICAgICAgICAgICAibmFtZSI6ICJBc3JhIEFsaSIsCiAgICAgICAgICAgICAgInVzZXJuYW1lIjogImFzcmFhIgogICAgICAgICAgICB9LAogICAgICAgICAgICAiY29tbWl0dGVyIjogewogICAgICAgICAgICAgICJlbWFpbCI6ICJhc3JhYUBnb29nbGUuY29tIiwKICAgICAgICAgICAgICAibmFtZSI6ICJBc3JhIEFsaSIsCiAgICAgICAgICAgICAgInVzZXJuYW1lIjogImFzcmFhIgogICAgICAgICAgICB9LAogICAgICAgICAgICAiZGlzdGluY3QiOiB0cnVlLAogICAgICAgICAgICAiaWQiOiAiZjYyYTgxODg4NTUxNzhhYmRmMTVhMDcwNzY5MDBhYzRiYmU5NTFlZSIsCiAgICAgICAgICAgICJtZXNzYWdlIjogImFkZCB3b3JrZmxvd1xuXG5TaWduZWQtb2ZmLWJ5OiBBc3JhIEFsaSA8YXNyYWFAZ29vZ2xlLmNvbT4iLAogICAgICAgICAgICAidGltZXN0YW1wIjogIjIwMjItMDUtMDJUMTM6MDQ6NTMtMDU6MDAiLAogICAgICAgICAgICAidHJlZV9pZCI6ICI2OWQwNjlhZWRmMWQwOTE0NDVkMjM1MGVhYjA0MmE1ZDU5YzY2NWNjIiwKICAgICAgICAgICAgInVybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXQvZjYyYTgxODg4NTUxNzhhYmRmMTVhMDcwNzY5MDBhYzRiYmU5NTFlZSIKICAgICAgICAgIH0sCiAgICAgICAgICAicHVzaGVyIjogewogICAgICAgICAgICAiZW1haWwiOiAiYXNyYWFAZ29vZ2xlLmNvbSIsCiAgICAgICAgICAgICJuYW1lIjogImFzcmFhIgogICAgICAgICAgfSwKICAgICAgICAgICJyZWYiOiAicmVmcy90YWdzL3Nsc2ExIiwKICAgICAgICAgICJyZXBvc2l0b3J5IjogewogICAgICAgICAgICAiYWxsb3dfZm9ya2luZyI6IHRydWUsCiAgICAgICAgICAgICJhcmNoaXZlX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsCiAgICAgICAgICAgICJhcmNoaXZlZCI6IGZhbHNlLAogICAgICAgICAgICAiYXNzaWduZWVzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvYXNzaWduZWVzey91c2VyfSIsCiAgICAgICAgICAgICJibG9ic191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9ibG9ic3svc2hhfSIsCiAgICAgICAgICAgICJicmFuY2hlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2JyYW5jaGVzey9icmFuY2h9IiwKICAgICAgICAgICAgImNsb25lX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLAogICAgICAgICAgICAiY29sbGFib3JhdG9yc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbGxhYm9yYXRvcnN7L2NvbGxhYm9yYXRvcn0iLAogICAgICAgICAgICAiY29tbWVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21tZW50c3svbnVtYmVyfSIsCiAgICAgICAgICAgICJjb21taXRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tbWl0c3svc2hhfSIsCiAgICAgICAgICAgICJjb21wYXJlX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS97YmFzZX0uLi57aGVhZH0iLAogICAgICAgICAgICAiY29udGVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb250ZW50cy97K3BhdGh9IiwKICAgICAgICAgICAgImNvbnRyaWJ1dG9yc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbnRyaWJ1dG9ycyIsCiAgICAgICAgICAgICJjcmVhdGVkX2F0IjogMTY0NDkzOTIyOSwKICAgICAgICAgICAgImRlZmF1bHRfYnJhbmNoIjogIm1haW4iLAogICAgICAgICAgICAiZGVwbG95bWVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9kZXBsb3ltZW50cyIsCiAgICAgICAgICAgICJkZXNjcmlwdGlvbiI6ICJUZXN0IGZvciBTTFNBIiwKICAgICAgICAgICAgImRpc2FibGVkIjogZmFsc2UsCiAgICAgICAgICAgICJkb3dubG9hZHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9kb3dubG9hZHMiLAogICAgICAgICAgICAiZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZXZlbnRzIiwKICAgICAgICAgICAgImZvcmsiOiB0cnVlLAogICAgICAgICAgICAiZm9ya3MiOiAwLAogICAgICAgICAgICAiZm9ya3NfY291bnQiOiAwLAogICAgICAgICAgICAiZm9ya3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9mb3JrcyIsCiAgICAgICAgICAgICJmdWxsX25hbWUiOiAiYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsCiAgICAgICAgICAgICJnaXRfY29tbWl0c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9jb21taXRzey9zaGF9IiwKICAgICAgICAgICAgImdpdF9yZWZzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L3JlZnN7L3NoYX0iLAogICAgICAgICAgICAiZ2l0X3RhZ3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdGFnc3svc2hhfSIsCiAgICAgICAgICAgICJnaXRfdXJsIjogImdpdDovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLAogICAgICAgICAgICAiaGFzX2Rvd25sb2FkcyI6IHRydWUsCiAgICAgICAgICAgICJoYXNfaXNzdWVzIjogZmFsc2UsCiAgICAgICAgICAgICJoYXNfcGFnZXMiOiBmYWxzZSwKICAgICAgICAgICAgImhhc19wcm9qZWN0cyI6IHRydWUsCiAgICAgICAgICAgICJoYXNfd2lraSI6IHRydWUsCiAgICAgICAgICAgICJob21lcGFnZSI6IG51bGwsCiAgICAgICAgICAgICJob29rc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2hvb2tzIiwKICAgICAgICAgICAgImh0bWxfdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwKICAgICAgICAgICAgImlkIjogNDU5NjM5MTUwLAogICAgICAgICAgICAiaXNfdGVtcGxhdGUiOiBmYWxzZSwKICAgICAgICAgICAgImlzc3VlX2NvbW1lbnRfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXMvY29tbWVudHN7L251bWJlcn0iLAogICAgICAgICAgICAiaXNzdWVfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzL2V2ZW50c3svbnVtYmVyfSIsCiAgICAgICAgICAgICJpc3N1ZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXN7L251bWJlcn0iLAogICAgICAgICAgICAia2V5c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2tleXN7L2tleV9pZH0iLAogICAgICAgICAgICAibGFiZWxzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbGFiZWxzey9uYW1lfSIsCiAgICAgICAgICAgICJsYW5ndWFnZSI6ICJHbyIsCiAgICAgICAgICAgICJsYW5ndWFnZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9sYW5ndWFnZXMiLAogICAgICAgICAgICAibGljZW5zZSI6IHsKICAgICAgICAgICAgICAia2V5IjogImFwYWNoZS0yLjAiLAogICAgICAgICAgICAgICJuYW1lIjogIkFwYWNoZSBMaWNlbnNlIDIuMCIsCiAgICAgICAgICAgICAgIm5vZGVfaWQiOiAiTURjNlRHbGpaVzV6WlRJPSIsCiAgICAgICAgICAgICAgInNwZHhfaWQiOiAiQXBhY2hlLTIuMCIsCiAgICAgICAgICAgICAgInVybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL2xpY2Vuc2VzL2FwYWNoZS0yLjAiCiAgICAgICAgICAgIH0sCiAgICAgICAgICAgICJtYXN0ZXJfYnJhbmNoIjogIm1haW4iLAogICAgICAgICAgICAibWVyZ2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbWVyZ2VzIiwKICAgICAgICAgICAgIm1pbGVzdG9uZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9taWxlc3RvbmVzey9udW1iZXJ9IiwKICAgICAgICAgICAgIm1pcnJvcl91cmwiOiBudWxsLAogICAgICAgICAgICAibmFtZSI6ICJzbHNhLW9uLWdpdGh1Yi10ZXN0IiwKICAgICAgICAgICAgIm5vZGVfaWQiOiAiUl9rZ0RPRzJXSmJnIiwKICAgICAgICAgICAgIm5vdGlmaWNhdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ub3RpZmljYXRpb25zez9zaW5jZSxhbGwscGFydGljaXBhdGluZ30iLAogICAgICAgICAgICAib3Blbl9pc3N1ZXMiOiAwLAogICAgICAgICAgICAib3Blbl9pc3N1ZXNfY291bnQiOiAwLAogICAgICAgICAgICAib3duZXIiOiB7CiAgICAgICAgICAgICAgImF2YXRhcl91cmwiOiAiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwKICAgICAgICAgICAgICAiZW1haWwiOiAiYXNyYWFAZ29vZ2xlLmNvbSIsCiAgICAgICAgICAgICAgImV2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9ldmVudHN7L3ByaXZhY3l9IiwKICAgICAgICAgICAgICAiZm9sbG93ZXJzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsCiAgICAgICAgICAgICAgImZvbGxvd2luZ191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwKICAgICAgICAgICAgICAiZ2lzdHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZ2lzdHN7L2dpc3RfaWR9IiwKICAgICAgICAgICAgICAiZ3JhdmF0YXJfaWQiOiAiIiwKICAgICAgICAgICAgICAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwKICAgICAgICAgICAgICAiaWQiOiA1MTk0NTY5LAogICAgICAgICAgICAgICJsb2dpbiI6ICJhc3JhYSIsCiAgICAgICAgICAgICAgIm5hbWUiOiAiYXNyYWEiLAogICAgICAgICAgICAgICJub2RlX2lkIjogIk1EUTZWWE5sY2pVeE9UUTFOams9IiwKICAgICAgICAgICAgICAib3JnYW5pemF0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwKICAgICAgICAgICAgICAicmVjZWl2ZWRfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsCiAgICAgICAgICAgICAgInJlcG9zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlcG9zIiwKICAgICAgICAgICAgICAic2l0ZV9hZG1pbiI6IGZhbHNlLAogICAgICAgICAgICAgICJzdGFycmVkX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLAogICAgICAgICAgICAgICJzdWJzY3JpcHRpb25zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N1YnNjcmlwdGlvbnMiLAogICAgICAgICAgICAgICJ0eXBlIjogIlVzZXIiLAogICAgICAgICAgICAgICJ1cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSIKICAgICAgICAgICAgfSwKICAgICAgICAgICAgInByaXZhdGUiOiBmYWxzZSwKICAgICAgICAgICAgInB1bGxzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcHVsbHN7L251bWJlcn0iLAogICAgICAgICAgICAicHVzaGVkX2F0IjogMTY1MTUxNDc0NywKICAgICAgICAgICAgInJlbGVhc2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcmVsZWFzZXN7L2lkfSIsCiAgICAgICAgICAgICJzaXplIjogMTIxNCwKICAgICAgICAgICAgInNzaF91cmwiOiAiZ2l0QGdpdGh1Yi5jb206YXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLAogICAgICAgICAgICAic3RhcmdhemVycyI6IDAsCiAgICAgICAgICAgICJzdGFyZ2F6ZXJzX2NvdW50IjogMCwKICAgICAgICAgICAgInN0YXJnYXplcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGFyZ2F6ZXJzIiwKICAgICAgICAgICAgInN0YXR1c2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhdHVzZXMve3NoYX0iLAogICAgICAgICAgICAic3Vic2NyaWJlcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpYmVycyIsCiAgICAgICAgICAgICJzdWJzY3JpcHRpb25fdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpcHRpb24iLAogICAgICAgICAgICAic3ZuX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsCiAgICAgICAgICAgICJ0YWdzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGFncyIsCiAgICAgICAgICAgICJ0ZWFtc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3RlYW1zIiwKICAgICAgICAgICAgInRvcGljcyI6IFtdLAogICAgICAgICAgICAidHJlZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdHJlZXN7L3NoYX0iLAogICAgICAgICAgICAidXBkYXRlZF9hdCI6ICIyMDIyLTAyLTE1VDE1OjM2OjQxWiIsCiAgICAgICAgICAgICJ1cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLAogICAgICAgICAgICAidmlzaWJpbGl0eSI6ICJwdWJsaWMiLAogICAgICAgICAgICAid2F0Y2hlcnMiOiAwLAogICAgICAgICAgICAid2F0Y2hlcnNfY291bnQiOiAwCiAgICAgICAgICB9LAogICAgICAgICAgInNlbmRlciI6IHsKICAgICAgICAgICAgImF2YXRhcl91cmwiOiAiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwKICAgICAgICAgICAgImV2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9ldmVudHN7L3ByaXZhY3l9IiwKICAgICAgICAgICAgImZvbGxvd2Vyc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dlcnMiLAogICAgICAgICAgICAiZm9sbG93aW5nX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLAogICAgICAgICAgICAiZ2lzdHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZ2lzdHN7L2dpc3RfaWR9IiwKICAgICAgICAgICAgImdyYXZhdGFyX2lkIjogIiIsCiAgICAgICAgICAgICJodG1sX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEiLAogICAgICAgICAgICAiaWQiOiA1MTk0NTY5LAogICAgICAgICAgICAibG9naW4iOiAiYXNyYWEiLAogICAgICAgICAgICAibm9kZV9pZCI6ICJNRFE2VlhObGNqVXhPVFExTmprPSIsCiAgICAgICAgICAgICJvcmdhbml6YXRpb25zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL29yZ3MiLAogICAgICAgICAgICAicmVjZWl2ZWRfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsCiAgICAgICAgICAgICJyZXBvc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZXBvcyIsCiAgICAgICAgICAgICJzaXRlX2FkbWluIjogZmFsc2UsCiAgICAgICAgICAgICJzdGFycmVkX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLAogICAgICAgICAgICAic3Vic2NyaXB0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdWJzY3JpcHRpb25zIiwKICAgICAgICAgICAgInR5cGUiOiAiVXNlciIsCiAgICAgICAgICAgICJ1cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSIKICAgICAgICAgIH0KICAgICAgICB9LAogICAgICAgICJHSVRIVUJfUkVGIjogInJlZnMvdGFncy9zbHNhMSIsCiAgICAgICAgIkdJVEhVQl9SRUZfVFlQRSI6ICJ0YWciLAogICAgICAgICJHSVRIVUJfUlVOX0FUVEVNUFQiOiAiMSIsCiAgICAgICAgIkdJVEhVQl9STk5fSUQiOiAiMjI1OTcwOTA3OSIsCiAgICAgICAgIkdJVEhVQl9SVU5fTlVNQkVSIjogIjEyNyIsCiAgICAgICAgIkdJVEhVQl9TSEEiOiAiYTI4ODBkNjRkMTJiMjk1NzYxODk5ZDUyM2UzM2MyMjY3MDk4MjA1NCIsCiAgICAgICAgIklNQUdFX09TIjogInVidW50dTIwIgogICAgICB9CiAgICB9LAogICAgInJ1bkRldGFpbHMiOiB7CiAgICAgICJidWlsZGVyIjogewogICAgICAgICJpZCI6ICJodHRwczovL2dpdGh1Yi5jb20vQXR0ZXN0YXRpb25zL0dpdEh1Ykhvc3RlZEFjdGlvbnNAdjEiCiAgICAgIH0sCiAgICAgICJtZXRhZGF0YSI6IHsKICAgICAgICAiaW52b2NhdGlvbklkIjogImh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYWN0aW9ucy9ydW5zLzQxMzU0NjM3NDEvYXR0ZW1wdHMvMSIKICAgICAgfQogICAgfQogIH0KfQo=", + "signatures": [ + { + "keyid": "", + "sig": "MEQCIHq5jMEDDCjNbWKSiXAtKUUP+Emsd8PgVmriuoGaWLOzAiAoElOb2LzO9fAcT426g8RKi9YO6C4W1Ds15jvMwPUoSw==" + } + ] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-branch3-ref-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-branch3-ref-v1.intoto.jsonl new file mode 100644 index 0000000..97d68a2 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-branch3-ref-v1.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIBO/t/MjFal4P4pPgklZu5LF/1gA1761TB42NQH5tJ1aAiAVwD7Wn2zLNz9KNn99NGfU1jwumMhFWIpJqKpBseYHsA=="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-invalid-ref-type-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-invalid-ref-type-v1.intoto.jsonl new file mode 100644 index 0000000..05dd28b --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-invalid-ref-type-v1.intoto.jsonl @@ -0,0 +1,10 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "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", + "signatures": [ + { + "keyid": "", + "sig": "MEUCIEwWbVseiTC9e2Ry29kJgihB7KtS9rwqQz8cAs4NLTVRAiEA8CYarEs2Ri+iIgJ82Hjr3Ht999ZP0H/EbOm1ZWiEUeY=" + } + ] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-main-ref-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-main-ref-v1.intoto.jsonl new file mode 100644 index 0000000..be4c110 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-main-ref-v1.intoto.jsonl @@ -0,0 +1,10 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "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", + "signatures": [ + { + "keyid": "", + "sig": "MEUCIQCK4oDlkJj6MVx97cAJteccWxOyHNSGECxNOvG8MWcktgIgdpbPJP7EZvKPcP9KW3t8Ekd1sQjVpSau/JFiHL8V8y8=" + } + ] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-not-slsa-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-not-slsa-v1.intoto.jsonl index 4c04f07..4b2acc1 100644 --- a/verifiers/internal/gha/testdata/dsse-not-slsa-v1.intoto.jsonl +++ b/verifiers/internal/gha/testdata/dsse-not-slsa-v1.intoto.jsonl @@ -1,6 +1,6 @@ { "payloadType": "application/vnd.in-toto+json", - "payload": "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", + "payload": "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", "signatures": [ { "keyid": "", diff --git a/verifiers/internal/gha/testdata/dsse-v1-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1-tag-v1.intoto.jsonl new file mode 100644 index 0000000..2fb5fd7 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-v1-tag-v1.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQDOJ6RZ0bdsfNebunBpm/t3iGvoB9QzxdgTqczV3UwvSAIgGNV8KjAOxlT5r4uFFd05b3aGPKRE/mgmMsfI3CPsTw4="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2-tag-v1.intoto.jsonl new file mode 100644 index 0000000..50e3b78 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-v1.2-tag-v1.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag-v1.intoto.jsonl new file mode 100644 index 0000000..9bfc751 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag-v1.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCBJVcEpEfRQNlxr1s/HBk2Vrr/RpnXgnwKZjnOZeDrSAIgcDJwM7awJvFKfiNukhYeN/jek7BhQOACUXFGsG36vyA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag-v1.intoto.jsonl new file mode 100644 index 0000000..362bf73 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag-v1.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag-v1.intoto.jsonl new file mode 100644 index 0000000..23f1a28 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag-v1.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-tag-v1.intoto.jsonl new file mode 100644 index 0000000..76f87c5 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-v1.2.3-tag-v1.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCBJVcEpEfRQNlxr1s/HBk2Vrr/RpnXgnwKZjnOZeDrSAIgcDJwM7awJvFKfiNukhYeN/jek7BhQOACUXFGsG36vyA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v10.0.1-release-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v10.0.1-release-v1.intoto.jsonl new file mode 100644 index 0000000..fd6d3dd --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-v10.0.1-release-v1.intoto.jsonl @@ -0,0 +1,10 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "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", + "signatures": [ + { + "keyid": "", + "sig": "MEQCIDOfrIqWkHmrHJcW3qx7csxTndprBX/Y/QuDiL5KHa0FAiBGoYBFK/4lrXDpzG2ch+WAqU4WPxgx7nRulmyLhWVxIg==" + } + ] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-valid-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-valid-v1.intoto.jsonl index d339e61..0780c27 100644 --- a/verifiers/internal/gha/testdata/dsse-valid-v1.intoto.jsonl +++ b/verifiers/internal/gha/testdata/dsse-valid-v1.intoto.jsonl @@ -1,6 +1,6 @@ { "payloadType": "application/vnd.in-toto+json", - "payload": "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", + "payload": "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", "signatures": [ { "keyid": "", diff --git a/verifiers/internal/gha/testdata/dsse-vslsa1-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-vslsa1-tag-v1.intoto.jsonl new file mode 100644 index 0000000..5123445 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-vslsa1-tag-v1.intoto.jsonl @@ -0,0 +1,10 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "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", + "signatures": [ + { + "keyid": "", + "sig": "MEQCIDOfrIqWkHmrHJcW3qx7csxTndprBX/Y/QuDiL5KHa0FAiBGoYBFK/4lrXDpzG2ch+WAqU4WPxgx7nRulmyLhWVxIg==" + } + ] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-workflow-inputs-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-workflow-inputs-v1.intoto.jsonl new file mode 100644 index 0000000..3ee3c74 --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-workflow-inputs-v1.intoto.jsonl @@ -0,0 +1,11 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "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", + "signatures": [ + { + "keyid": "", + "sig": "MEUCIHBtbLeV5WMsyLpPrZcxFU1wuEYHFUrJnzizsg17dL4hAiEAkoTLa49Vrf/g5mSaWY6Oab99YNvqByNgR773ikJXQ5I=", + "cert": "-----BEGIN CERTIFICATE-----\nMIIDVDCCAtqgAwIBAgITLCk1E2/wH2/mCjCYAovMeTTHnDAKBggqhkjOPQQDAzAq\nMRUwEwYDVQQKEwxzaWdzdG9yZS5kZXYxETAPBgNVBAMTCHNpZ3N0b3JlMB4XDTIy\nMDgxNTE3MDQxMloXDTIyMDgxNTE3MTQxMVowADBZMBMGByqGSM49AgEGCCqGSM49\nAwEHA0IABCw6VO5lksfxcjt+4cEbgBnLuPB2wDgj3I9UQZh45xW4KRYKM7/oSLfD\nP8QGLfgNkv3ZDwBZUDLbBk0hNoMq0bejggIHMIICAzAOBgNVHQ8BAf8EBAMCB4Aw\nEwYDVR0lBAwwCgYIKwYBBQUHAwMwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUyxfq\nz2Pr2VR+K9FdiLbOSxqIYgQwHwYDVR0jBBgwFoAUWMAeX5FFpWapesyQoZMi0CrF\nxfowgYQGA1UdEQEB/wR6MHiGdmh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2Vu\nZXJhdG9yX2dlbmVyaWNfc2xzYTMueW1sQHJlZnMvdGFncy92MS4yLjAwHwYKKwYB\nBAGDvzABAgQRd29ya2Zsb3dfZGlzcGF0Y2gwLgYKKwYBBAGDvzABBQQgbGF1cmVu\ndHNpbW9uL3Nsc2Etb24tZ2l0aHViLXRlc3QwJAYKKwYBBAGDvzABBAQWU0xTQSBn\nZW5lcmljIGdlbmVyYXRvcjAdBgorBgEEAYO/MAEGBA9yZWZzL2hlYWRzL21haW4w\nOQYKKwYBBAGDvzABAQQraHR0cHM6Ly90b2tlbi5hY3Rpb25zLmdpdGh1YnVzZXJj\nb250ZW50LmNvbTA2BgorBgEEAYO/MAEDBCg0NjZjMTEzZWQzZDVhYzc1NjgxNzRk\nNGI2YWQ2YmI2YTgwZTE1M2IyMAoGCCqGSM49BAMDA2gAMGUCMQCx4+iMpFBvnFV9\nX6goGjQfdgliPcNa4cdd2K0nmrn79cOpslyzcJLAlL/qSYsGlocCMC/P/gL2B16i\nMp6YQZUiSMwzUohrr7V3nJsMPcLgETGyiZoR3UijZG74FobZ/+3pCw==\n-----END CERTIFICATE-----\n" + } + ] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl new file mode 100644 index 0000000..b7cf2da --- /dev/null +++ b/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl @@ -0,0 +1,10 @@ +{ + "payloadType": "application/vnd.in-toto+json", + "payload": "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJzdWJqZWN0IjogWwogICAgewogICAgICAiZGlnZXN0IjogewogICAgICAgICJzaGEyNTYiOiAiMGFlN2U0ZmE3MTY4NjUzODQ0MDAxMmVlMzZhMjYzNGRiYWExOWRmMmRkMTZhNDY2ZjUyNDExZmIzNDhiYmM0ZSIKICAgICAgfSwKICAgICAgIm5hbWUiOiAiYmluYXJ5LWxpbnV4LWFtZDY0IgogICAgfQogIF0sCiAgInByZWRpY2F0ZVR5cGUiOiAiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxLjA/ZHJhZnQiLAogICJwcmVkaWNhdGUiOiB7CiAgICAiYnVpbGREZWZpbml0aW9uIjogewogICAgICAiYnVpbGRUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9BdHRlc3RhdGlvbnMvR2l0SHViQWN0aW9uc1dvcmtmbG93QHYxIiwKICAgICAgImV4dGVybmFsUGFyYW1ldGVycyI6IHsKICAgICAgICAic291cmNlIjogewogICAgICAgICAgInVyaSI6ICJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsCiAgICAgICAgICAiZGlnZXN0IjogewogICAgICAgICAgICAic2hhMSI6ICI0ZTZjNWY2ZDBiNGExMjZmYTIzNzNkN2U1N2I3YTBhZjA1MTA4NzkxIgogICAgICAgICAgfQogICAgICAgIH0KICAgICAgfSwKICAgICAgInN5c3RlbVBhcmFtZXRlcnMiOiB7CiAgICAgICAgIlJVTk5FUl9BUkNIIjogIlg2NCIsCiAgICAgICAgIkdJVEhVQl9BQ1RPUiI6ICJhc3JhYSIsCiAgICAgICAgIkdJVEhVQl9CQVNFX1JFRiI6ICIiLAogICAgICAgICJHSVRIVUJfRVZFTlRfTkFNRSI6ICJwdXNoIiwKICAgICAgICAiR0lUSFVCX0VWRU5UX1BBWUxPQUQiOiB7CiAgICAgICAgICAiYWZ0ZXIiOiAiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIsCiAgICAgICAgICAiYmFzZV9yZWYiOiAicmVmcy9oZWFkcy9tYWluIiwKICAgICAgICAgICJiZWZvcmUiOiAiMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMCIsCiAgICAgICAgICAiY29tbWl0cyI6IFtdLAogICAgICAgICAgImNvbXBhcmUiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS92MSIsCiAgICAgICAgICAiY3JlYXRlZCI6IHRydWUsCiAgICAgICAgICAiZGVsZXRlZCI6IGZhbHNlLAogICAgICAgICAgImZvcmNlZCI6IGZhbHNlLAogICAgICAgICAgImhlYWRfY29tbWl0IjogewogICAgICAgICAgICAiYXV0aG9yIjogewogICAgICAgICAgICAgICJlbWFpbCI6ICJhc3JhYUBnb29nbGUuY29tIiwKICAgICAgICAgICAgICAibmFtZSI6ICJBc3JhIEFsaSIsCiAgICAgICAgICAgICAgInVzZXJuYW1lIjogImFzcmFhIgogICAgICAgICAgICB9LAogICAgICAgICAgICAiY29tbWl0dGVyIjogewogICAgICAgICAgICAgICJlbWFpbCI6ICJhc3JhYUBnb29nbGUuY29tIiwKICAgICAgICAgICAgICAibmFtZSI6ICJBc3JhIEFsaSIsCiAgICAgICAgICAgICAgInVzZXJuYW1lIjogImFzcmFhIgogICAgICAgICAgICB9LAogICAgICAgICAgICAiZGlzdGluY3QiOiB0cnVlLAogICAgICAgICAgICAiaWQiOiAiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIsCiAgICAgICAgICAgICJtZXNzYWdlIjogInVwZGF0ZVxuXG5TaWduZWQtb2ZmLWJ5OiBBc3JhIEFsaSA8YXNyYWFAZ29vZ2xlLmNvbT4iLAogICAgICAgICAgICAidGltZXN0YW1wIjogIjIwMjItMDUtMDNUMTQ6Mjc6MzUtMDU6MDAiLAogICAgICAgICAgICAidHJlZV9pZCI6ICIyZDNhNzg5NGM5MzBhZmQ2YmYwZTM2N2M5NjhlY2JhNDJmNzQ0ODFmIiwKICAgICAgICAgICAgInVybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXQvYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIKICAgICAgICAgIH0sCiAgICAgICAgICAicHVzaGVyIjogewogICAgICAgICAgICAiZW1haWwiOiAiYXNyYWFAZ29vZ2xlLmNvbSIsCiAgICAgICAgICAgICJuYW1lIjogImFzcmFhIgogICAgICAgICAgfSwKICAgICAgICAgICJyZWYiOiAicmVmcy90YWdzL3YxIiwKICAgICAgICAgICJyZXBvc2l0b3J5IjogewogICAgICAgICAgICAiYWxsb3dfZm9ya2luZyI6IHRydWUsCiAgICAgICAgICAgICJhcmNoaXZlX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsCiAgICAgICAgICAgICJhcmNoaXZlZCI6IGZhbHNlLAogICAgICAgICAgICAiYXNzaWduZWVzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvYXNzaWduZWVzey91c2VyfSIsCiAgICAgICAgICAgICJibG9ic191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9ibG9ic3svc2hhfSIsCiAgICAgICAgICAgICJicmFuY2hlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2JyYW5jaGVzey9icmFuY2h9IiwKICAgICAgICAgICAgImNsb25lX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLAogICAgICAgICAgICAiY29sbGFib3JhdG9yc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbGxhYm9yYXRvcnN7L2NvbGxhYm9yYXRvcn0iLAogICAgICAgICAgICAiY29tbWVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21tZW50c3svbnVtYmVyfSIsCiAgICAgICAgICAgICJjb21taXRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tbWl0c3svc2hhfSIsCiAgICAgICAgICAgICJjb21wYXJlX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS97YmFzZX0uLi57aGVhZH0iLAogICAgICAgICAgICAiY29udGVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb250ZW50cy97K3BhdGh9IiwKICAgICAgICAgICAgImNvbnRyaWJ1dG9yc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbnRyaWJ1dG9ycyIsCiAgICAgICAgICAgICJjcmVhdGVkX2F0IjogMTY0NDkzOTIyOSwKICAgICAgICAgICAgImRlZmF1bHRfYnJhbmNoIjogIm1haW4iLAogICAgICAgICAgICAiZGVwbG95bWVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9kZXBsb3ltZW50cyIsCiAgICAgICAgICAgICJkZXNjcmlwdGlvbiI6ICJUZXN0IGZvciBTTFNBIiwKICAgICAgICAgICAgImRpc2FibGVkIjogZmFsc2UsCiAgICAgICAgICAgICJkb3dubG9hZHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9kb3dubG9hZHMiLAogICAgICAgICAgICAiZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZXZlbnRzIiwKICAgICAgICAgICAgImZvcmsiOiB0cnVlLAogICAgICAgICAgICAiZm9ya3MiOiAwLAogICAgICAgICAgICAiZm9ya3NfY291bnQiOiAwLAogICAgICAgICAgICAiZm9ya3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9mb3JrcyIsCiAgICAgICAgICAgICJmdWxsX25hbWUiOiAiYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsCiAgICAgICAgICAgICJnaXRfY29tbWl0c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9jb21taXRzey9zaGF9IiwKICAgICAgICAgICAgImdpdF9yZWZzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L3JlZnN7L3NoYX0iLAogICAgICAgICAgICAiZ2l0X3RhZ3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdGFnc3svc2hhfSIsCiAgICAgICAgICAgICJnaXRfdXJsIjogImdpdDovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLAogICAgICAgICAgICAiaGFzX2Rvd25sb2FkcyI6IHRydWUsCiAgICAgICAgICAgICJoYXNfaXNzdWVzIjogZmFsc2UsCiAgICAgICAgICAgICJoYXNfcGFnZXMiOiBmYWxzZSwKICAgICAgICAgICAgImhhc19wcm9qZWN0cyI6IHRydWUsCiAgICAgICAgICAgICJoYXNfd2lraSI6IHRydWUsCiAgICAgICAgICAgICJob21lcGFnZSI6IG51bGwsCiAgICAgICAgICAgICJob29rc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2hvb2tzIiwKICAgICAgICAgICAgImh0bWxfdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwKICAgICAgICAgICAgImlkIjogNDU5NjM5MTUwLAogICAgICAgICAgICAiaXNfdGVtcGxhdGUiOiBmYWxzZSwKICAgICAgICAgICAgImlzc3VlX2NvbW1lbnRfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXMvY29tbWVudHN7L251bWJlcn0iLAogICAgICAgICAgICAiaXNzdWVfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzL2V2ZW50c3svbnVtYmVyfSIsCiAgICAgICAgICAgICJpc3N1ZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXN7L251bWJlcn0iLAogICAgICAgICAgICAia2V5c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2tleXN7L2tleV9pZH0iLAogICAgICAgICAgICAibGFiZWxzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbGFiZWxzey9uYW1lfSIsCiAgICAgICAgICAgICJsYW5ndWFnZSI6ICJHbyIsCiAgICAgICAgICAgICJsYW5ndWFnZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9sYW5ndWFnZXMiLAogICAgICAgICAgICAibGljZW5zZSI6IHsKICAgICAgICAgICAgICAia2V5IjogImFwYWNoZS0yLjAiLAogICAgICAgICAgICAgICJuYW1lIjogIkFwYWNoZSBMaWNlbnNlIDIuMCIsCiAgICAgICAgICAgICAgIm5vZGVfaWQiOiAiTURjNlRHbGpaVzV6WlRJPSIsCiAgICAgICAgICAgICAgInNwZHhfaWQiOiAiQXBhY2hlLTIuMCIsCiAgICAgICAgICAgICAgInVybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL2xpY2Vuc2VzL2FwYWNoZS0yLjAiCiAgICAgICAgICAgIH0sCiAgICAgICAgICAgICJtYXN0ZXJfYnJhbmNoIjogIm1haW4iLAogICAgICAgICAgICAibWVyZ2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbWVyZ2VzIiwKICAgICAgICAgICAgIm1pbGVzdG9uZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9taWxlc3RvbmVzey9udW1iZXJ9IiwKICAgICAgICAgICAgIm1pcnJvcl91cmwiOiBudWxsLAogICAgICAgICAgICAibmFtZSI6ICJzbHNhLW9uLWdpdGh1Yi10ZXN0IiwKICAgICAgICAgICAgIm5vZGVfaWQiOiAiUl9rZ0RPRzJXSmJnIiwKICAgICAgICAgICAgIm5vdGlmaWNhdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ub3RpZmljYXRpb25zez9zaW5jZSxhbGwscGFydGljaXBhdGluZ30iLAogICAgICAgICAgICAib3Blbl9pc3N1ZXMiOiAwLAogICAgICAgICAgICAib3Blbl9pc3N1ZXNfY291bnQiOiAwLAogICAgICAgICAgICAib3duZXIiOiB7CiAgICAgICAgICAgICAgImF2YXRhcl91cmwiOiAiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwKICAgICAgICAgICAgICAiZW1haWwiOiAiYXNyYWFAZ29vZ2xlLmNvbSIsCiAgICAgICAgICAgICAgImV2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9ldmVudHN7L3ByaXZhY3l9IiwKICAgICAgICAgICAgICAiZm9sbG93ZXJzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsCiAgICAgICAgICAgICAgImZvbGxvd2luZ191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwKICAgICAgICAgICAgICAiZ2lzdHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZ2lzdHN7L2dpc3RfaWR9IiwKICAgICAgICAgICAgICAiZ3JhdmF0YXJfaWQiOiAiIiwKICAgICAgICAgICAgICAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwKICAgICAgICAgICAgICAiaWQiOiA1MTk0NTY5LAogICAgICAgICAgICAgICJsb2dpbiI6ICJhc3JhYSIsCiAgICAgICAgICAgICAgIm5hbWUiOiAiYXNyYWEiLAogICAgICAgICAgICAgICJub2RlX2lkIjogIk1EUTZWWE5sY2pVeE9UUTFOams9IiwKICAgICAgICAgICAgICAib3JnYW5pemF0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwKICAgICAgICAgICAgICAicmVjZWl2ZWRfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsCiAgICAgICAgICAgICAgInJlcG9zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlcG9zIiwKICAgICAgICAgICAgICAic2l0ZV9hZG1pbiI6IGZhbHNlLAogICAgICAgICAgICAgICJzdGFycmVkX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLAogICAgICAgICAgICAgICJzdWJzY3JpcHRpb25zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N1YnNjcmlwdGlvbnMiLAogICAgICAgICAgICAgICJ0eXBlIjogIlVzZXIiLAogICAgICAgICAgICAgICJ1cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSIKICAgICAgICAgICAgfSwKICAgICAgICAgICAgInByaXZhdGUiOiBmYWxzZSwKICAgICAgICAgICAgInB1bGxzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcHVsbHN7L251bWJlcn0iLAogICAgICAgICAgICAicHVzaGVkX2F0IjogMTY1MTYwNjM0MSwKICAgICAgICAgICAgInJlbGVhc2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcmVsZWFzZXN7L2lkfSIsCiAgICAgICAgICAgICJzaXplIjogMTIxNSwKICAgICAgICAgICAgInNzaF91cmwiOiAiZ2l0QGdpdGh1Yi5jb206YXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLAogICAgICAgICAgICAic3RhcmdhemVycyI6IDAsCiAgICAgICAgICAgICJzdGFyZ2F6ZXJzX2NvdW50IjogMCwKICAgICAgICAgICAgInN0YXJnYXplcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGFyZ2F6ZXJzIiwKICAgICAgICAgICAgInN0YXR1c2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhdHVzZXMve3NoYX0iLAogICAgICAgICAgICAic3Vic2NyaWJlcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpYmVycyIsCiAgICAgICAgICAgICJzdWJzY3JpcHRpb25fdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpcHRpb24iLAogICAgICAgICAgICAic3ZuX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsCiAgICAgICAgICAgICJ0YWdzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGFncyIsCiAgICAgICAgICAgICJ0ZWFtc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3RlYW1zIiwKICAgICAgICAgICAgInRvcGljcyI6IFtdLAogICAgICAgICAgICAidHJlZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdHJlZXN7L3NoYX0iLAogICAgICAgICAgICAidXBkYXRlZF9hdCI6ICIyMDIyLTAyLTE1VDE1OjM2OjQxWiIsCiAgICAgICAgICAgICJ1cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLAogICAgICAgICAgICAidmlzaWJpbGl0eSI6ICJwdWJsaWMiLAogICAgICAgICAgICAid2F0Y2hlcnMiOiAwLAogICAgICAgICAgICAid2F0Y2hlcnNfY291bnQiOiAwCiAgICAgICAgICB9LAogICAgICAgICAgInNlbmRlciI6IHsKICAgICAgICAgICAgImF2YXRhcl91cmwiOiAiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwKICAgICAgICAgICAgImV2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9ldmVudHN7L3ByaXZhY3l9IiwKICAgICAgICAgICAgImZvbGxvd2Vyc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dlcnMiLAogICAgICAgICAgICAiZm9sbG93aW5nX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLAogICAgICAgICAgICAiZ2lzdHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZ2lzdHN7L2dpc3RfaWR9IiwKICAgICAgICAgICAgImdyYXZhdGFyX2lkIjogIiIsCiAgICAgICAgICAgICJodG1sX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEiLAogICAgICAgICAgICAiaWQiOiA1MTk0NTY5LAogICAgICAgICAgICAibG9naW4iOiAiYXNyYWEiLAogICAgICAgICAgICAibm9kZV9pZCI6ICJNRFE2VlhObGNqVXhPVFExTmprPSIsCiAgICAgICAgICAgICJvcmdhbml6YXRpb25zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL29yZ3MiLAogICAgICAgICAgICAicmVjZWl2ZWRfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsCiAgICAgICAgICAgICJyZXBvc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZXBvcyIsCiAgICAgICAgICAgICJzaXRlX2FkbWluIjogZmFsc2UsCiAgICAgICAgICAgICJzdGFycmVkX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLAogICAgICAgICAgICAic3Vic2NyaXB0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdWJzY3JpcHRpb25zIiwKICAgICAgICAgICAgInR5cGUiOiAiVXNlciIsCiAgICAgICAgICAgICJ1cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSIKICAgICAgICAgIH0KICAgICAgICB9LAogICAgICAgICJHSVRIVUJfUkVGIjogInJlZnMvdGFncy92MSIsCiAgICAgICAgIkdJVEhVQl9SRUZfVFlQRSI6ICJ0YWciLAogICAgICAgICJHSVRIVUJfUlVOX0FUVEVNUFQiOiAiMSIsCiAgICAgICAgIkdJVEhVQl9STk5fSUQiOiAiMjI1OTcwOTA3OSIsCiAgICAgICAgIkdJVEhVQl9SVU5fTlVNQkVSIjogIjEyNyIsCiAgICAgICAgIkdJVEhVQl9TSEEiOiAiYTI4ODBkNjRkMTJiMjk1NzYxODk5ZDUyM2UzM2MyMjY3MDk4MjA1NCIsCiAgICAgICAgIklNQUdFX09TIjogInVidW50dTIwIgogICAgICB9CiAgICB9LAogICAgInJ1bkRldGFpbHMiOiB7CiAgICAgICJidWlsZGVyIjogewogICAgICAgICJpZCI6ICJodHRwczovL2dpdGh1Yi5jb20vQXR0ZXN0YXRpb25zL0dpdEh1Ykhvc3RlZEFjdGlvbnNAdjEiCiAgICAgIH0sCiAgICAgICJtZXRhZGF0YSI6IHsKICAgICAgICAiaW52b2NhdGlvbklkIjogImh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYWN0aW9ucy9ydW5zLzQxMzU0NjM3NDEvYXR0ZW1wdHMvMSIKICAgICAgfQogICAgfQogIH0KfQo=", + "signatures": [ + { + "keyid": "", + "sig": "MEUCIQDOJ6RZ0bdsfNebunBpm/t3iGvoB9QzxdgTqczV3UwvSAIgGNV8KjAOxlT5r4uFFd05b3aGPKRE/mgmMsfI3CPsTw4=" + } + ] +} \ No newline at end of file diff --git a/verifiers/utils/provenance.go b/verifiers/utils/provenance.go deleted file mode 100644 index 6cbeb62..0000000 --- a/verifiers/utils/provenance.go +++ /dev/null @@ -1,21 +0,0 @@ -package utils - -import ( - "fmt" - - serrors "github.com/slsa-framework/slsa-verifier/v2/errors" -) - -func GetAsString(environment map[string]any, field string) (string, error) { - value, ok := environment[field] - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, - fmt.Sprintf("environment type for %s", field)) - } - - i, ok := value.(string) - if !ok { - return "", fmt.Errorf("%w: %s '%s'", serrors.ErrorInvalidDssePayload, "environment type string", field) - } - return i, nil -}