From edde0a8acae1928184a58314abe73ecdf9f76e7a Mon Sep 17 00:00:00 2001 From: Ramon Petgrave Date: Tue, 18 Jun 2024 18:48:42 +0000 Subject: [PATCH] cleanup, more skeleton Signed-off-by: Ramon Petgrave --- verifiers/internal/vsa/verifier.go | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/verifiers/internal/vsa/verifier.go b/verifiers/internal/vsa/verifier.go index d03e3cf..301bb92 100644 --- a/verifiers/internal/vsa/verifier.go +++ b/verifiers/internal/vsa/verifier.go @@ -33,12 +33,10 @@ func VerifyVSA(ctx context.Context, if err != nil { return nil, nil, err } - fmt.Println(sigstoreStatement) vsa, err := vsa10.VSAFromStatement(sigstoreStatement) if err != nil { return nil, nil, err } - fmt.Println(vsa) // verify the envelope. signature err = verifyEnvelopeSignature(ctx, &sigstoreEnvelope) @@ -48,6 +46,12 @@ func VerifyVSA(ctx context.Context, // TODO: // verify the metadata + err = matchExpectedValues(vsa, vsaOpts) + if err != nil { + return nil, nil, err + } + + // TODO: // print the attestation return nil, nil, nil } @@ -78,3 +82,8 @@ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeGa6ZCZn0q6WpaUwJrSk+PPYEsca } return nil } + +func matchExpectedValues(vsa *vsa10.VSA, vsaOpts *options.VSAOpts) error { + // TODO: implement this function + return nil +}