 laurentsimon
|
3a4e992444
|
feat: verify claims in provenance match the certificate (#572)
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
---------
Signed-off-by: laurentsimon <laurentsimon@google.com>
|
2023-05-09 23:52:36 +00:00 |
|
 asraa
|
467e0820b6
|
chore: update slsa provenance to v1 (#579)
* chore: update slsa provenance to v1
Signed-off-by: Asra Ali <asraa@google.com>
* fix import path
Signed-off-by: Asra Ali <asraa@google.com>
* update dsse testcases
Signed-off-by: Asra Ali <asraa@google.com>
* fix cosign image verification in update
Signed-off-by: Asra Ali <asraa@google.com>
---------
Signed-off-by: Asra Ali <asraa@google.com>
|
2023-05-08 15:18:16 +00:00 |
|
 Ian Lewis
|
2e60ff0e48
|
fix: Read newer attestation file format (#564)
* Read newer attestation file format
Signed-off-by: Ian Lewis <ianlewis@google.com>
* Update error message
Signed-off-by: Ian Lewis <ianlewis@google.com>
* revert change
Signed-off-by: Ian Lewis <ianlewis@google.com>
* Update test data
Signed-off-by: Ian Lewis <ianlewis@google.com>
---------
Signed-off-by: Ian Lewis <ianlewis@google.com>
|
2023-04-21 07:38:16 +09:00 |
|
|
laurentsimon
|
82a12591ff
|
feat: npm default runner support (#495)
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
* update
Signed-off-by: laurentsimon <laurentsimon@google.com>
---------
Signed-off-by: laurentsimon <laurentsimon@google.com>
|
2023-03-02 21:53:29 +00:00 |
|
|
asraa
|
5d6c770d43
|
feat: support branch and tag from slsa v1 provenance (#476)
* feat: support branch and tag from slsa v1 provenance
Signed-off-by: Asra Ali <asraa@google.com>
Signed-off-by: Asra Ali <asraa@google.com>
|
2023-02-10 21:33:16 +00:00 |
|
|
asraa
|
239c4489ce
|
feat: add slsa v1?draft provenance experimental support (#470)
* feat: add slsa v1?draft provenance support
Signed-off-by: Asra Ali <asraa@google.com>
Signed-off-by: Asra Ali <asraa@google.com>
|
2023-02-09 17:21:15 +00:00 |
|
|
asraa
|
fec5b6a7b5
|
refactor: generalize provenance out of predicate type info (#463)
* refactor: generalize provenance out of predicate type info
Signed-off-by: Asra Ali <asraa@google.com>
|
2023-02-03 23:30:23 +00:00 |
|
|
asraa
|
362bd1a331
|
feat: add offline bundle signature verification (#457)
* feat: add bundle signature verification
Signed-off-by: Asra Ali <asraa@google.com>
|
2023-02-03 09:31:40 -06:00 |
|
|
laurentsimon
|
5bb13ef508
|
feat: add a -workflow-input option (#216)
* update
|
2022-08-15 19:38:15 +00:00 |
|
|
laurentsimonandIan Lewis
|
4ca6320994
|
feat: make branch optional (#192)
* update
* update
* update
* update
* Update verifiers/internal/gha/provenance.go
Co-authored-by: Ian Lewis <ianlewis@google.com>
* update
* update
* update
* update
* update
* update
* update
* update
Co-authored-by: Ian Lewis <ianlewis@google.com>
|
2022-08-09 22:49:36 +00:00 |
|
|
laurentsimon
|
edb792b342
|
feat: Create interface for verifiers (#187)
* update
* update
* unit tests
* update
* comments
* update
* update
* update
* update
* Use interface for builders
* update
* update
* update
* update
* fix
* update
* update
* update
* update
* update
* update
* update
* update
* update
* update
* update
* update
|
2022-08-05 14:31:34 -07:00 |
|