github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-08-18 19:18:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

rename to public-key-signing-hash-algo

Browse Source 
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
This commit is contained in:
Ramon Petgrave
2024-06-25 23:47:06 +00:00
parent d33cbc3170
commit a71e44a34e
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2 -2
View File
@@ -505,7 +505,7 @@ Flags:
--attestations-path string path to a file containing the attestations
-h, --help help for verify-vsa
--print-attestation [optional] print the contents of attestation to stdout
--public-key-hash-algo string [optional] the hash algorithm used to compute the digest to be signed, one of SHA256 [default], SHA384, or SHA512
--public-key-signing-hash-algo string [optional] the hash algorithm used to compute the digest to be signed, one of SHA256 [default], SHA384, or SHA512
--public-key-id string [optional] the ID of the public key, defaults to the SHA256 digest of the base64-encoded public key
--public-key-path string path to a public key file
--resource-uri string the resource URI to be verified
@@ -525,7 +525,7 @@ $ slsa-verifier verify-vsa \
--verified-levels "BCID_L1, SLSA_BUILD_LEVEL_2" \
--public-key-path ./cli/slsa-verifier/testdata/vsa/gce/v1/vsa_signing_public_key.pem \
--public-key-id keystore://76574:prod:vsa_signing_public_key \
--public-key-hash-algo SHA256 \
--public-key-signing-hash-algo SHA256 \
--print-attestation
```
cli/slsa-verifier/verify/options.go
+2 -2
View File
@@ -168,7 +168,7 @@ func (o *VerifyVSAOptions) AddFlags(cmd *cobra.Command) {
cmd.Flags().StringVar(&o.PublicKeyID, "public-key-id", "",
"[optional] the ID of the public key, defaults to the SHA256 digest of the base64-encoded public key")
cmd.Flags().StringVar(&o.PublicKeyHashAlgo, "public-key-hash-algo", "SHA256",
cmd.Flags().StringVar(&o.PublicKeyHashAlgo, "public-key-signing-hash-algo", "SHA256",
"[optional] the hash algorithm used to compute the digest to be signed, one of SHA256 [default], SHA384, or SHA512")
cmd.MarkFlagRequired("subject-digests")
@@ -176,7 +176,7 @@ func (o *VerifyVSAOptions) AddFlags(cmd *cobra.Command) {
cmd.MarkFlagRequired("verifier-id")
cmd.MarkFlagRequired("resource-uri")
cmd.MarkFlagRequired("public-key-path")
// public-key-id" and "public-key-hash-algo" are optional since they have useful defaults
// public-key-id" and "public-key-signing-hash-algo" are optional since they have useful defaults
}
type workflowInputs struct {