Commit Graph

471 Commits

Author SHA1 Message Date
Ramon Petgrave
3d6e498ec5 caps
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:49:32 +00:00
Ramon Petgrave
e8ed9ccaa6 algo help
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:48:49 +00:00
Ramon Petgrave
311b211a48 func doc comment
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:47:24 +00:00
Ramon Petgrave
719e118767 typo
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:46:13 +00:00
Ramon Petgrave
721eee5f2d singular attestation
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:43:34 +00:00
Ramon Petgrave
781304651e remove experimental
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:39:11 +00:00
Ramon Petgrave
e45249353a fix cap
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:38:44 +00:00
Ramon Petgrave
9b2554e400 cli about print-attestation
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:32:31 +00:00
Ramon Petgrave
f9a4b35ff6 cli help about default options
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:32:17 +00:00
Ramon Petgrave
92ce34e767 fix capitalization
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:28:18 +00:00
Ramon Petgrave
1ccec0e405 comment doc
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-25 15:22:34 +00:00
Ramon Petgrave
bf38fb0e9c help docs
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-22 00:52:47 +00:00
Ramon Petgrave
23d8e33dfd singular attestation path
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-22 00:46:28 +00:00
Ramon Petgrave
e0919a83e0 hash-algo description
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-22 00:41:08 +00:00
Ramon Petgrave
f3b63b7194 reword simple hash
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-22 00:39:13 +00:00
Ramon Petgrave
b9c6de5635 flag descriptions, optional --verified-levels
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-22 00:34:53 +00:00
Ramon Petgrave
519a928c72 clarify comments
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-22 00:19:46 +00:00
Ramon Petgrave
968a34d1dd typo
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-21 15:32:11 +00:00
Ramon Petgrave
e27f99f15d no need for sigstoreEnvelope
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 23:07:05 +00:00
Ramon Petgrave
0172a12823 lint
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 22:17:11 +00:00
Ramon Petgrave
73c9884da6 lint: no pointer for crypto.publickkey
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 22:10:46 +00:00
Ramon Petgrave
942d8bbe3d remove accidental binary
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 20:50:28 +00:00
Ramon Petgrave
ff1cf43ce9 undo regression tag change
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 20:48:19 +00:00
Ramon Petgrave
cba639f855 specific errors and test cases
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 20:43:26 +00:00
Ramon Petgrave
e47312f593 literl hash algo
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 19:56:21 +00:00
Ramon Petgrave
00fed87dbc typo
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 19:53:45 +00:00
Ramon Petgrave
fbe83fb372 change error type
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 19:50:18 +00:00
Ramon Petgrave
7fb5bf933c switch wanted, got order
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 18:13:06 +00:00
Ramon Petgrave
8befbc6e94 use plain bool
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 18:12:51 +00:00
Ramon Petgrave
fec61b1f27 use pointers
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 18:03:48 +00:00
Ramon Petgrave
5636d0a832 rename to resource URI
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 16:58:13 +00:00
Ramon Petgrave
f5362e5a4a rename to PublicKeyHashAlgo
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 16:49:43 +00:00
Ramon Petgrave
ad1b81dc5d update README
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 16:33:38 +00:00
Ramon Petgrave
f0fedec1dd verify vsa passed message
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 15:59:09 +00:00
Ramon Petgrave
2ef9a40437 minify test data
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-20 15:52:17 +00:00
Ramon Petgrave
944c9a6f4c singular print-attestation
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-19 00:32:31 +00:00
Ramon Petgrave
610ef6f1af verify reamining fields, print attestations
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-19 00:30:15 +00:00
Ramon Petgrave
13a74b5b4a embed the google vsa key, match against all signatures, match the subject digests
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-18 22:18:25 +00:00
Ramon Petgrave
ead4e9bf4e use utility to parse envelope, docs, use keyID
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-18 20:23:24 +00:00
Ramon Petgrave
edde0a8aca cleanup, more skeleton
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-18 18:48:42 +00:00
Ramon Petgrave
1f123f3c1d attempt to verify envelope
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-18 18:35:53 +00:00
Ramon Petgrave
2dc64f7bda vsa parser
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-18 18:35:24 +00:00
Ramon Petgrave
2f76f12ff3 different test example
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-18 18:34:37 +00:00
Ramon Petgrave
9704c97a22 parse dsse envelope
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-17 16:07:41 +00:00
Ramon Petgrave
a3a573a800 cleanup
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-17 16:06:50 +00:00
Ramon Petgrave
b90ede0bde rename to TrustedProducerID, allow muyltiple --subject-digest flags
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-14 18:15:25 +00:00
Ramon Petgrave
a25abe2323 testdata, sample invocation in README.md
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-13 22:28:58 +00:00
Ramon Petgrave
b5eb1473b8 skeletion verify-vsa command
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-13 22:28:08 +00:00
Ramon Petgrave
7980fdebf6 Changed success message to a more general "PASSED: SLSA verification passed"
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-06-13 22:22:56 +00:00
Ramon Petgrave
18c5f13b3e fix: signoff commit (#767)
Followup to https://github.com/slsa-framework/slsa-verifier/pull/760

Fix the .github/workflows/update-actions-dist-post-commit.yml workflow
to also signoff commit

# Testing

- [x] Invoked this PR's branch copy of the workflow against #717, and it
did signoff the commit.
-
9670f76ab8

Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
2024-05-22 16:45:20 +00:00