feat: Regression tests for builder v1.10.0 (#745)

We need the pre-submit to pass. Merging can happen after the builder
release

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>

cli/slsa-verifier/main_regression_test.go

@@ -801,7 +801,7 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) {
 			source:      "github.com/slsa-framework/example-package",
 			pversiontag: pString("v1"),
 			minversion:  "v1.9.0",
-			err:         serrors.ErrorMismatchTag,
+			err:         serrors.ErrorMismatchVersionedTag,
 		},
 	}
 	for _, tt := range tests {

cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v13.0.30

@@ -0,0 +1 @@
+hello

cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14

@@ -0,0 +1 @@
+hello

cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14.2

@@ -0,0 +1 @@
+hello

cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-workflow_dispatch

@@ -0,0 +1 @@
+hello

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch.digest

@@ -0,0 +1 @@
+sha256:e0a0a765d690a5104331cfbac88ebbbf01736c1f87aaa3cd455c516a5ea586a5

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/blobs/sha256/947e733ef0317305d7b9cfc38f85605fcc8afde85b3d1ed77df4ca0402562427

@@ -0,0 +1 @@
+{"architecture":"","created":"0001-01-01T00:00:00Z","history":[{"created":"0001-01-01T00:00:00Z"}],"os":"","rootfs":{"type":"layers","diff_ids":["sha256:20b16d5835eceaa7b9dbb7e4fdf4db52a8b9159c1416dd73e54cade07e838917"]},"config":{}}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/blobs/sha256/ae01bed04d3f41efa80182824a50345cd1430f4d1a9308eda4369122bd94c85e

@@ -0,0 +1,61 @@
+{
+  "schemaVersion": 2,
+  "mediaType": "application/vnd.oci.image.manifest.v1+json",
+  "config": {
+    "mediaType": "application/vnd.oci.image.config.v1+json",
+    "digest": "sha256:c317e96c3edb7271ab734e75c589c324ca34795f948382a7a2aeaaf6eba89041",
+    "size": 2145
+  },
+  "layers": [
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:6b16ad2aede1c00fe5f9765419c2165fd72902e768db3126ee68d127cae394ea",
+      "size": 103775
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58",
+      "size": 21202
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:be1681d2fb7c6bc072dddd952d4fa0428a3a3c60b53cdde852e30aaa86f7e1ab",
+      "size": 755290
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265",
+      "size": 317
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0",
+      "size": 198
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c",
+      "size": 113
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f",
+      "size": 385
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c",
+      "size": 355
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a",
+      "size": 130562
+    },
+    {
+      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
+      "digest": "sha256:c79fb0d3c97247b432f3ba033a58e6226f53b468b9a4dd79703bd8f29e3fcd5b",
+      "size": 651164
+    }
+  ]
+}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/blobs/sha256/b276155e3c74e740a8bff1dd562f028dc0107551c97776c44246cb2dce55092c

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": 2,
+  "mediaType": "application/vnd.oci.image.manifest.v1+json",
+  "config": {
+    "mediaType": "application/vnd.oci.image.config.v1+json",
+    "digest": "sha256:b753573f49e97b2f90335fde5664432cbbce0623b5554ab738c643d95569a434",
+    "size": 167
+  },
+  "layers": [
+    {
+      "mediaType": "application/vnd.in-toto+json",
+      "digest": "sha256:c1944d4717b644d2c7e1eccab4cc6e963cefbe288d75b7f7c3dfee4f4a894406",
+      "size": 1886,
+      "annotations": {
+        "in-toto.io/predicate-type": "https://slsa.dev/provenance/v0.2"
+      }
+    }
+  ]
+}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/blobs/sha256/b753573f49e97b2f90335fde5664432cbbce0623b5554ab738c643d95569a434

@@ -0,0 +1 @@
+{"architecture":"unknown","os":"unknown","config":{},"rootfs":{"type":"layers","diff_ids":["sha256:c1944d4717b644d2c7e1eccab4cc6e963cefbe288d75b7f7c3dfee4f4a894406"]}}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/blobs/sha256/c1944d4717b644d2c7e1eccab4cc6e963cefbe288d75b7f7c3dfee4f4a894406

@@ -0,0 +1 @@
+{"_type":"https://in-toto.io/Statement/v0.1","predicateType":"https://slsa.dev/provenance/v0.2","subject":[{"name":"pkg:docker/ghcr.io/slsa-framework/example-package.verifier-e2e.all.tag.main.default.slsa3@v13.0.30?platform=linux%2Famd64","digest":{"sha256":"ae01bed04d3f41efa80182824a50345cd1430f4d1a9308eda4369122bd94c85e"}},{"name":"pkg:docker/ghcr.io/slsa-framework/example-package.verifier-e2e.all.tag.main.default.slsa3@latest?platform=linux%2Famd64","digest":{"sha256":"ae01bed04d3f41efa80182824a50345cd1430f4d1a9308eda4369122bd94c85e"}}],"predicate":{"builder":{"id":""},"buildType":"https://mobyproject.org/buildkit@v1","materials":[{"uri":"pkg:docker/golang@1.21?digest=sha256:c82d4ad02c062cf2b393bf0374df26638c6fed3dfe52cdbd3635d4a7befab86e\u0026platform=linux%2Famd64","digest":{"sha256":"c82d4ad02c062cf2b393bf0374df26638c6fed3dfe52cdbd3635d4a7befab86e"}},{"uri":"pkg:docker/gcr.io/distroless/static?digest=sha256:072d78bc452a2998929a9579464e55067db4bf6d2c5f9cde582e33c10a415bd1\u0026platform=linux%2Famd64","digest":{"sha256":"072d78bc452a2998929a9579464e55067db4bf6d2c5f9cde582e33c10a415bd1"}},{"uri":"https://github.com/slsa-framework/example-package.git#d37a7f740ee7404914456f24dcd90e865a0509e8","digest":{"sha1":"d37a7f740ee7404914456f24dcd90e865a0509e8"}}],"invocation":{"configSource":{"uri":"https://github.com/slsa-framework/example-package.git#d37a7f740ee7404914456f24dcd90e865a0509e8","digest":{"sha1":"d37a7f740ee7404914456f24dcd90e865a0509e8"},"entryPoint":"Dockerfile"},"parameters":{"frontend":"dockerfile.v0"},"environment":{"platform":"linux/amd64"}},"metadata":{"buildInvocationID":"ommxtc3qv65c8aogpjlg4dcxl","buildStartedOn":"2024-03-21T10:32:59.326230397Z","buildFinishedOn":"2024-03-21T10:33:18.64977976Z","completeness":{"parameters":false,"environment":true,"materials":true},"reproducible":false,"https://mobyproject.org/buildkit@v1#metadata":{}}}}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/blobs/sha256/c317e96c3edb7271ab734e75c589c324ca34795f948382a7a2aeaaf6eba89041

@@ -0,0 +1 @@
+{"architecture":"amd64","config":{"User":"0","Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Entrypoint":["/app"],"WorkingDir":"/","Labels":{"org.opencontainers.image.created":"2024-03-21T10:32:58.193Z","org.opencontainers.image.description":"","org.opencontainers.image.licenses":"Apache-2.0","org.opencontainers.image.revision":"d37a7f740ee7404914456f24dcd90e865a0509e8","org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","org.opencontainers.image.title":"example-package","org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","org.opencontainers.image.version":"v13.0.30"}},"created":"2024-03-21T10:33:18.559431269Z","history":[{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"2024-03-21T10:33:18.559431269Z","created_by":"COPY /app/app /app # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2024-03-21T10:33:18.559431269Z","created_by":"ENTRYPOINT [\"/app\"]","comment":"buildkit.dockerfile.v0","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:70c35736547b3e931b1a31e6d5e7df15ca445f3923da9c5bf966e67fe7f08564","sha256:6fbdf253bbc2490dcfede5bdb58ca0db63ee8aff565f6ea9f918f3bce9e2d5aa","sha256:1df9699731f7846ad827986563c27981294fd53a7ce7b4665f87936b0d9a7945","sha256:ff5700ec54186528cbae40f54c24b1a34fb7c01527beaa1232868c16e2353f52","sha256:d52f02c6501c9c4410568f0bf6ff30d30d8290f57794c308fe36ea78393afac2","sha256:e624a5370eca2b8266e74d179326e2a8767d361db14d13edd9fb57e408731784","sha256:1a73b54f556b477f0a8b939d13c504a3b4f4db71f7a09c63afbc10acb3de5849","sha256:d2d7ec0f6756eb51cf1602c6f8ac4dd811d3d052661142e0110357bf0b581457","sha256:4cb10dd2545bd173858450b80853b850e49608260f1a0789e0d0b39edf12f500","sha256:5e30cd99a95f0b4ba2f2b8f829f002298e1ad4eeeba1ac179e847656a38ea1c2"]}}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/blobs/sha256/e0a0a765d690a5104331cfbac88ebbbf01736c1f87aaa3cd455c516a5ea586a5

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 2,
+  "mediaType": "application/vnd.oci.image.index.v1+json",
+  "manifests": [
+    {
+      "mediaType": "application/vnd.oci.image.manifest.v1+json",
+      "digest": "sha256:ae01bed04d3f41efa80182824a50345cd1430f4d1a9308eda4369122bd94c85e",
+      "size": 2183,
+      "platform": {
+        "architecture": "amd64",
+        "os": "linux"
+      }
+    },
+    {
+      "mediaType": "application/vnd.oci.image.manifest.v1+json",
+      "digest": "sha256:b276155e3c74e740a8bff1dd562f028dc0107551c97776c44246cb2dce55092c",
+      "size": 566,
+      "annotations": {
+        "vnd.docker.reference.digest": "sha256:ae01bed04d3f41efa80182824a50345cd1430f4d1a9308eda4369122bd94c85e",
+        "vnd.docker.reference.type": "attestation-manifest"
+      },
+      "platform": {
+        "architecture": "unknown",
+        "os": "unknown"
+      }
+    }
+  ]
+}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/index.json

@@ -0,0 +1,22 @@
+{
+   "schemaVersion": 2,
+   "mediaType": "application/vnd.oci.image.index.v1+json",
+   "manifests": [
+      {
+         "mediaType": "application/vnd.oci.image.index.v1+json",
+         "size": 856,
+         "digest": "sha256:e0a0a765d690a5104331cfbac88ebbbf01736c1f87aaa3cd455c516a5ea586a5",
+         "annotations": {
+            "kind": "dev.cosignproject.cosign/imageIndex"
+         }
+      },
+      {
+         "mediaType": "application/vnd.oci.image.manifest.v1+json",
+         "size": 10572,
+         "digest": "sha256:31cc4fb663c8d34e2e6a0bd5f183d576c2811ee286e0998b4c2965e3b35a0d86",
+         "annotations": {
+            "kind": "dev.cosignproject.cosign/atts"
+         }
+      }
+   ]
+}

cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch/oci-layout

@@ -0,0 +1,3 @@
+{
+    "imageLayoutVersion": "1.0.0"
+}