Appu a481a1974e feat: verify provenance for bcr modules produced by trusted reusable workflows (#840) ...

@fweikert these are the changes I think might be needed to get this to
work (it's somewhat hacky, I'm not sure I've fully covered what's
needed).

@ramonpetgrave64 is this kinda what's needed?

This now adds the `verify-github-attestation` sub command. Use this
instead of `verify-artifact`.

---------

Signed-off-by: Appu Goundan <appu@google.com>
Signed-off-by: Appu <appu@google.com>
Co-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>

2025-04-10 14:09:09 -04:00

..

internal

feat: verify provenance for bcr modules produced by trusted reusable workflows (#840)

2025-04-10 14:09:09 -04:00

utils

chore: update go and golanci lint (#810)

2024-10-10 13:07:08 -04:00

verifier.go

feat: verify provenance for bcr modules produced by trusted reusable workflows (#840)

2025-04-10 14:09:09 -04:00