mirror of
https://github.com/slsa-framework/slsa-verifier.git
synced 2026-05-06 08:37:00 +00:00
e20f3cc7a3
* Remove limit of number of artifacts to verify Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Update short description Mention that we support multiple artifacts as long as they come from the same provenance. Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Verify all artifacts passed in cmdline Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Remove header of verify step output Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Format the `cobra.Command.Use` argument Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Don't return a slice of builderIDs. Since all images should come from the same provenance file, there's an invariant that we will always get exactly one builderID. So, no need to return a slice of them. Just to preempt the case when the invariant would be broken, add a specific check. Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Change existing tests to support multiple artifacts. No new tests added, just changing table test data type. Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * [nfc] Format test file Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Change test to allow passing multiple artifacts. For now, just allow passing the entire array of artifacts to command line / arguments. The functionality should still be the same. Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Fix typo Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Fix path to test artifacts Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Allow different provenance path Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Try 2 artifacts from existing testdata Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Add more tests for multiple artifacts Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Add failing test Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Fix artifact and error Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Add final test: no artifact match Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> * Update README.md Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com> Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com>