Ian Lewis d2dc8193ae feat: Verify provenance by build type (#632) ...

Fixes #473

Updates handling of provenance by providing implementations based on
[buildType](https://slsa.dev/provenance/v1#buildType) since this
determines how to interpret parameters and dependencies. This is done
because we need a way to interpret parameters not just based on the
predicateType. The 3 major build types with format differences are:
  - non-BYOB SLSA v0.2
  - BYOB SLSA v0.2
  - BYOB SLSA v1.0

---------

Signed-off-by: Ian Lewis <ianlewis@google.com>

2023-06-16 09:54:20 +09:00

..

internal

feat: Verify provenance by build type (#632)

2023-06-16 09:54:20 +09:00

utils

fix: builder ID verification for testing (#635)

2023-06-06 08:32:20 -05:00

verifier.go

feat: npm default runner support (#495)

2023-03-02 21:53:29 +00:00