github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-08-18 02:56:31 +00:00
Code Issues Packages Projects Releases Wiki Activity
491 Commits 41 Branches 45 Tags
Hayden-IO-patch-1
Commit Graph
2 Commits
Author SHA1 Message Date
Ville SkyttäandGitHub 9108dc2890 docs(npm): "exmaple" spelling fix (#832) 
Signed-off-by: Ville Skyttä <ville.skytta@iki.fi>
 2025-02-14 16:46:36 -05:00
Ramon PetgraveandGitHub 7f3db9211e feat: support npm cli provenance v1 attestations (#776) 
Fixes #614, #450, #449, #515

Adds support for NPM CLIs build provenances, generated when running `npm
publish --provenance --access public` from a [GitHub Actions
workflow](https://github.com/ramonpetgrave64/gundam-visor/blob/599500821344b070902a7a5666064bfdaba715df/.github/workflows/npm-publish.yml#L21).

## Testing

- added unit tests for some new helper functions
- added regression test cases

## Future work

- https://github.com/slsa-framework/slsa-verifier/issues/493, so we can
do `--print-provenance`
- implemented in
https://github.com/slsa-framework/slsa-verifier/pull/768#discussion_r1662938115

---------

Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
 2024-07-30 19:46:04 +00:00