diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 9c155159c..224cae3fb 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -40,11 +40,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3 + uses: github/codeql-action/init@a09933a12a80f87b87005513f0abb1494c27a716 # v2.21.4 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -55,7 +55,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3 + uses: github/codeql-action/autobuild@a09933a12a80f87b87005513f0abb1494c27a716 # v2.21.4 # Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -68,4 +68,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3 + uses: github/codeql-action/analyze@a09933a12a80f87b87005513f0abb1494c27a716 # v2.21.4 diff --git a/.github/workflows/depsreview.yml b/.github/workflows/depsreview.yml index de9243f16..b314bd48a 100644 --- a/.github/workflows/depsreview.yml +++ b/.github/workflows/depsreview.yml @@ -9,6 +9,6 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: 'Dependency Review' - uses: actions/dependency-review-action@f46c48ed6d4f1227fb2d9ea62bf6bcbed315589e # v3.0.4 + uses: actions/dependency-review-action@7d90b4f05fea31dde1c4a1fb3fa787e197ea93ab # v3.0.7 diff --git a/.github/workflows/e2e.schedule.cli.yml b/.github/workflows/e2e.schedule.cli.yml index b78a0c6e1..e1b57ba1d 100644 --- a/.github/workflows/e2e.schedule.cli.yml +++ b/.github/workflows/e2e.schedule.cli.yml @@ -28,7 +28,7 @@ jobs: ctned="true" fi echo "continue=$ctned" >> $GITHUB_OUTPUT - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 if: steps.name.outputs.continue == 'true' with: ref: main diff --git a/.github/workflows/e2e.schedule.installer.yml b/.github/workflows/e2e.schedule.installer.yml index 5d059d074..9124df803 100644 --- a/.github/workflows/e2e.schedule.installer.yml +++ b/.github/workflows/e2e.schedule.installer.yml @@ -27,14 +27,14 @@ jobs: version: ${{ steps.generate-versions.outputs.version }} steps: - name: Checkout - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: # NOTE: the example-package needs to be checked out in the default workspace. repository: slsa-framework/example-package ref: main - name: Checkout - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: path: __THIS_REPO__ @@ -77,7 +77,7 @@ jobs: - name: Checkout this repository # Skip release candidates unless specified explicitly. if: ${{ inputs.version != '' || ! contains(matrix.version, '-rc' ) }} - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: ref: ${{ matrix.version }} @@ -196,7 +196,7 @@ jobs: contents: read issues: write steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: repository: slsa-framework/example-package ref: main @@ -210,7 +210,7 @@ jobs: contents: read issues: write steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: repository: slsa-framework/example-package ref: main diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml index 0f6c41cab..05c7a663b 100644 --- a/.github/workflows/pr-title.yml +++ b/.github/workflows/pr-title.yml @@ -4,6 +4,8 @@ on: pull_request: types: [opened, edited, reopened, synchronize] +permissions: read-all + jobs: validate: runs-on: ubuntu-latest diff --git a/.github/workflows/pre-submit.actions.yml b/.github/workflows/pre-submit.actions.yml index eb6f6482f..fb4c518c7 100644 --- a/.github/workflows/pre-submit.actions.yml +++ b/.github/workflows/pre-submit.actions.yml @@ -11,10 +11,10 @@ jobs: check-dist: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Set Node.js 16 - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 + uses: actions/setup-node@bea5baf987ba7aa777a8a0b4ace377a21c45c381 # v3.8.0 with: node-version: 16 diff --git a/.github/workflows/pre-submit.cli.yml b/.github/workflows/pre-submit.cli.yml index 728ba1bb8..04d5c1df8 100644 --- a/.github/workflows/pre-submit.cli.yml +++ b/.github/workflows/pre-submit.cli.yml @@ -15,12 +15,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: setup-go - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: "1.18" + go-version-file: "go.mod" - name: Save event name env: diff --git a/.github/workflows/pre-submit.e2e.yml b/.github/workflows/pre-submit.e2e.yml index 2709baa7a..9551b25c1 100644 --- a/.github/workflows/pre-submit.e2e.yml +++ b/.github/workflows/pre-submit.e2e.yml @@ -11,14 +11,14 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: path: __THIS_REPO__ - name: setup-go - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: "1.18" + go-version-file: "__THIS_REPO__/go.mod" - name: Build verifier at HEAD working-directory: __THIS_REPO__ @@ -27,7 +27,7 @@ jobs: go build -o slsa-verifier ./cli/slsa-verifier - name: Checkout e2e verification script - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: path: __EXAMPLE_PACKAGE__ repository: slsa-framework/example-package diff --git a/.github/workflows/pre-submit.lfs.yml b/.github/workflows/pre-submit.lfs.yml index 7ddbcf37f..6efc4060e 100644 --- a/.github/workflows/pre-submit.lfs.yml +++ b/.github/workflows/pre-submit.lfs.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - uses: actionsdesk/lfs-warning@e5f9a4c21f4bee104db7c0f23954dde59e5df909 # v3.2 with: token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/pre-submit.lint.yml b/.github/workflows/pre-submit.lint.yml index 8596daf58..da06ab044 100644 --- a/.github/workflows/pre-submit.lint.yml +++ b/.github/workflows/pre-submit.lint.yml @@ -10,13 +10,13 @@ jobs: golangci-lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 - - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: "1.18" + go-version-file: "go.mod" - env: - GOLANGCI_LINT_VERSION: "1.46.2" - GOLANGCI_LINT_CHECKSUM: "242cd4f2d6ac0556e315192e8555784d13da5d1874e51304711570769c4f2b9b" + GOLANGCI_LINT_VERSION: "1.53.2" + GOLANGCI_LINT_CHECKSUM: "2298f73b9bc03b88b91fee06c5d519fc7f9d7f328e2c388615bbd7e85a9d6cae" run: | set -euo pipefail @@ -34,7 +34,7 @@ jobs: yamllint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - env: YAMLLINT_VERSION: "1.26.3" run: | @@ -49,7 +49,7 @@ jobs: eslint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - uses: actions/setup-node@v3 with: node-version: 16 diff --git a/.github/workflows/pre-submit.references.yml b/.github/workflows/pre-submit.references.yml index 4bc7c43ae..4f3f7c1d1 100644 --- a/.github/workflows/pre-submit.references.yml +++ b/.github/workflows/pre-submit.references.yml @@ -13,7 +13,7 @@ jobs: env: BODY: ${{ github.event.pull_request.body }} steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Check documentation is up-to-date run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 50eda01bd..5fc6005f4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: version: ${{ steps.ldflags.outputs.version }} steps: - id: checkout - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: fetch-depth: 0 - id: ldflags @@ -49,9 +49,11 @@ jobs: actions: read # For the detection of GitHub Actions environment. id-token: write # For signing. contents: write # For asset uploads. - uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.5.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.8.0 with: - go-version: 1.18 + # TODO(2680): re-enable go-version-file + # go-version-file: "go.mod" + go-version: '1.20' config-file: .slsa-goreleaser/${{matrix.os}}-${{matrix.arch}}.yml compile-builder: true evaluated-envs: "VERSION:${{needs.args.outputs.version}}" @@ -59,11 +61,11 @@ jobs: verification: needs: [builder] runs-on: ubuntu-latest - if: github.event_name != 'schedule' + if: github.event_name != 'schedule' && github.event_name != 'workflow_dispatch' permissions: read-all steps: - name: Install the verifier - uses: slsa-framework/slsa-verifier/actions/installer@v2.2.0 + uses: slsa-framework/slsa-verifier/actions/installer@v2.3.0 - name: Download assets env: @@ -98,7 +100,7 @@ jobs: contents: read issues: write steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: repository: slsa-framework/example-package ref: main @@ -112,7 +114,7 @@ jobs: contents: read issues: write steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: repository: slsa-framework/example-package ref: main diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index ee4b1afcf..9d4501345 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -25,12 +25,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@80e868c13c90f172d68d1f4501dee99e2479f7af # v2.1.3 + uses: ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031 # v2.2.0 with: results_file: results.sarif results_format: sarif @@ -57,6 +57,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3 + uses: github/codeql-action/upload-sarif@a09933a12a80f87b87005513f0abb1494c27a716 # v2.21.4 with: sarif_file: results.sarif diff --git a/.github/workflows/scripts/e2e-cli.sh b/.github/workflows/scripts/e2e-cli.sh index 2eca968fb..053bb01c4 100755 --- a/.github/workflows/scripts/e2e-cli.sh +++ b/.github/workflows/scripts/e2e-cli.sh @@ -4,39 +4,29 @@ repo="slsa-framework/example-package" api_version="X-GitHub-Api-Version: 2022-11-28" # Verify provenance authenticity with slsa-verifier at HEAD -download_artifact() { - local run_id="$1" - local artifact_name="$2" - # Get the artifact ID for 'artifact1' - artifact_id=$(gh api -H "Accept: application/vnd.github+json" -H "$api_version" "/repos/$repo/actions/runs/$run_id/artifacts" | jq ".artifacts[] | select(.name == \"$artifact_name\") | .id") - echo "artifact_id:$artifact_id" - - gh api -H "Accept: application/vnd.github+json" -H "$api_version" "/repos/$repo/actions/artifacts/$artifact_id/zip" >"$artifact_name.zip" - unzip "$artifact_name".zip -} - # Get workflow ID. workflow_id=$(gh api -H "Accept: application/vnd.github+json" -H "$api_version" "/repos/$repo/actions/workflows?per_page=100" | jq '.workflows[] | select(.path == ".github/workflows/e2e.generic.schedule.main.multi-uses.slsa3.yml") | .id') -echo "workflow_id:$workflow_id" +echo "workflow_id:${workflow_id}" # Get the run ID for the most recent run. run_id=$(gh api -H "Accept: application/vnd.github+json" -H "$api_version" "/repos/$repo/actions/workflows/$workflow_id/runs?per_page=1" | jq '.workflow_runs[0].id') -echo "run_id:$run_id" +echo "run_id:${run_id}" -download_artifact "$run_id" "artifacts1" -download_artifact "$run_id" "attestation1.intoto.jsonl" +gh run download -R "${repo}" -n "artifacts1" "${run_id}" +gh run download -R "${repo}" -n "attestation1.intoto.jsonl" "${run_id}" cd __EXAMPLE_PACKAGE__ || exit 1 # shellcheck source=/dev/null source "./.github/workflows/scripts/e2e-verify.common.sh" +cd - || exit 1 -# Set THIS_FILE to correspond with the artifact properties +# HACK: Set THIS_FILE to correspond with the artifact properties export THIS_FILE=e2e.generic.schedule.main.multi-uses.slsa3.yml -export BRANCH=main # Set BINARY and PROVENANCE -cd - || exit 1 +export BRANCH=main export BINARY=artifact1 export PROVENANCE=attestation1.intoto.jsonl +export GITHUB_REPOSITORY="${repo}" -GITHUB_REPOSITORY="$repo" verify_provenance_authenticity "./__THIS_REPO__/slsa-verifier" "HEAD" +verify_provenance_authenticity "./__THIS_REPO__/slsa-verifier" "HEAD" diff --git a/.golangci.yml b/.golangci.yml index 8480a9dc7..d9ae8b53a 100644 --- a/.golangci.yml +++ b/.golangci.yml @@ -2,12 +2,17 @@ run: concurrency: 2 deadline: 5m + # For generics. + go: 1.18 issues: include: - EXC0012 - EXC0013 - EXC0014 - EXC0015 + exclude: + # TODO(#589): Remove after updating to Go 1.20 + - "non-wrapping format verb for fmt.Errorf. Use `%w` to format errors" # Maximum issues count per one linter. # Set to 0 to disable. # Default: 50 @@ -76,6 +81,88 @@ linters: # TODO(https://github.com/slsa-framework/slsa-verifier/issues/363): Restore linter # - wrapcheck linters-settings: + depguard: + rules: + global: + files: + - $all + - "!$test" + - "!**/experimental/**" + + # This is an exception for the existing code. + # TODO(#642): Don't allow go-cmp in non-test code. + - "!**/verifiers/internal/gcb/provenance.go" + allow: + - $gostd + + # Approved orgs. + - "github.com/slsa-framework" + - "github.com/in-toto" + - "github.com/sigstore" + - "github.com/secure-systems-lab" + - "github.com/go-openapi" + + # Approved packages. + - "sigs.k8s.io/release-utils/version" + - "github.com/spf13/cobra" # For CLI + - "github.com/docker/go/canonical/json" # For canonical json. + - "github.com/google/go-containerregistry" # For interacting with container registries. + deny: + - pkg: "reflect" + desc: Please don't use reflect package + - pkg: "unsafe" + desc: Please don't use unsafe package + + test: + files: + - "$test" + # - "!**/experimental/**" + # This is an exception for the existing code. + # TODO(#642): Don't allow go-cmp in non-test code. + - "!**/verifiers/internal/gcb/provenance.go" + # NOTE: test code is allowed to use github.com/google/go-cmp (there is no + # deny for it) but non-test code is not. + allow: + - $gostd + + # Approved orgs. + - "github.com/slsa-framework" + - "github.com/in-toto" + - "github.com/sigstore" + - "github.com/secure-systems-lab" + - "github.com/go-openapi" + + # Approved packages. + - "sigs.k8s.io/release-utils/version" + - "github.com/spf13/cobra" # For CLI + - "github.com/docker/go/canonical/json" # For canonical json. + - "github.com/google/go-containerregistry" # For interacting with container registries. + + # Allowed in test code. + - "github.com/google/go-cmp" + deny: + - pkg: "reflect" + desc: Please don't use reflect package + - pkg: "unsafe" + desc: Please don't use unsafe package + + experimental: + files: + - "**/experimental/**/*.go" + allow: + - $gostd + + # Approved orgs. + - "github.com/slsa-framework" + + # Allowed in experimental. + - "github.com/gorilla/mux" + deny: + - pkg: "reflect" + desc: Please don't use reflect package + - pkg: "unsafe" + desc: Please don't use unsafe package + errcheck: check-type-assertions: true check-blank: true diff --git a/CODEOWNERS b/CODEOWNERS index 1717db8df..acbe8250f 100644 --- a/CODEOWNERS +++ b/CODEOWNERS @@ -1 +1 @@ -* @asraa @ianlewis @laurentsimon +* @asraa @ianlewis @laurentsimon @kpk47 diff --git a/Makefile b/Makefile index 050202fd4..6a87103d6 100644 --- a/Makefile +++ b/Makefile @@ -26,15 +26,25 @@ node_modules/.installed: package.json package-lock.json .PHONY: unit-test unit-test: ## Runs all unit tests. - go mod vendor - # NOTE: go test builds packages even if there are no tests. - go test -mod=vendor -v ./... + @ # NOTE: go test builds packages even if there are no tests. + @set -e;\ + go mod vendor; \ + extraargs=""; \ + if [ "$(OUTPUT_FORMAT)" == "github" ]; then \ + extraargs="-v"; \ + fi; \ + go test -mod=vendor $$extraeargs ./... .PHONY: regression-test regression-test: ## Runs all regression and unit tests. - go mod vendor - # NOTE: go test builds packages even if there are no tests. - go test -mod=vendor -tags=regression -v -timeout=25m ./... + @ # NOTE: go test builds packages even if there are no tests. + @set -e;\ + go mod vendor; \ + extraargs=""; \ + if [ "$(OUTPUT_FORMAT)" == "github" ]; then \ + extraargs="-v"; \ + fi; \ + go test -mod=vendor -tags=regression $$extraeargs -timeout=25m ./... ## Tools ##################################################################### diff --git a/README.md b/README.md index 1ee3700ee..a02720e56 100644 --- a/README.md +++ b/README.md @@ -28,12 +28,14 @@ - [Verification for GitHub builders](#verification-for-github-builders) - [Artifacts](#artifacts) - [Containers](#containers) + - [npm packages](#npm-packages) + - [The verify-npm-package command](#the-verify-npm-package-command) + - [npm packages built using the SLSA3 Node.js builder](#npm-packages-built-using-the-slsa3-nodejs-builder) + - [npm packages built using the npm CLI](#npm-packages-built-using-the-npm-cli) + - [Container-based builds](#container-based-builds) - [Verification for Google Cloud Build](#verification-for-google-cloud-build) - [Artifacts](#artifacts-1) - [Containers](#containers-1) -- [Verification for npm packages](#verification-for-npm-packages) - - [The verify-npm-package command](#the-verify-npm-package-command) - - [Verify npm packages built using the SLSA3 Node.js builder](#verify-npm-packages-built-using-the-slsa3-nodejs-builder) - [Known Issues](#known-issues) - [tuf: invalid key](#tuf-invalid-key) - [panic: assignment to entry in nil map](#panic-assignment-to-entry-in-nil-map) @@ -95,7 +97,7 @@ You have two options to install the verifier. If you want to install the verifier, you can run the following command: ```bash -$ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.2.0 +$ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.3.0 $ slsa-verifier ``` @@ -141,7 +143,7 @@ $ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier ```bash $ git clone git@github.com:slsa-framework/slsa-verifier.git -$ cd slsa-verifier && git checkout v2.2.0 +$ cd slsa-verifier && git checkout v2.3.0 $ go run ./cli/slsa-verifier ``` @@ -151,7 +153,7 @@ If you need to install the verifier to run in a GitHub workflow, use the install ### Download the binary -Download the binary from the latest release at [https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.2.0](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.2.0) +Download the binary from the latest release at [https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.3.0](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.3.0) Download the [SHA256SUM.md](https://github.com/slsa-framework/slsa-verifier/blob/main/SHA256SUM.md). @@ -282,59 +284,11 @@ Verified build using builder https://github.com/slsa-framework/slsa-github-gener PASSED: Verified SLSA provenance ``` -## Verification for Google Cloud Build - -### Artifacts - -This is WIP and currently not supported. - -### Containers - -To verify a container image, you need to pass a container image name that is _immutable_ by providing its digest, in order to avoid [TOCTOU attacks](#toctou-attacks). - -First set the image name: - -```shell -IMAGE=laurentsimon/slsa-gcb-v0.3:test -``` - -Download the provenance: - -```shell -gcloud artifacts docker images describe $IMAGE --format json --show-provenance > provenance.json -``` - -Get the digest for your container _without_ pulling it using the [crane](https://github.com/google/go-containerregistry/blob/main/cmd/crane/doc/crane.md) command: - -```shell -IMAGE="${IMAGE}@"$(crane digest "${IMAGE}") -``` - -Verify the image: - -```shell -slsa-verifier verify-image "$IMAGE" \ - --provenance-path provenance.json \ - --source-uri github.com/laurentsimon/gcb-tests \ - --builder-id=https://cloudbuild.googleapis.com/GoogleHostedWorker -``` - -You should see that the verification passed in the output. - -``` -PASSED: Verified SLSA provenance -``` - -The verified in-toto statement may be written to stdout with the -`--print-provenance` flag to pipe into policy engines. - -Note that `--source-uri` supports GitHub repository URIs like `github.com/$OWNER/$REPO` when the build was enabled with a Cloud Build [GitHub trigger](https://cloud.google.com/build/docs/automating-builds/github/build-repos-from-github). Otherwise, the build provenance will contain the name of the Cloud Storage bucket used to host the source files, usually of the form `gs://[PROJECT_ID]_cloudbuild/source` (see [Running build](https://cloud.google.com/build/docs/running-builds/submit-build-via-cli-api#running_builds)). We recommend using GitHub triggers in order to preserve the source provenance and valiate that the source came from an expected, version-controlled repository. You _may_ match on the fully-qualified tar like `gs://[PROJECT_ID]_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz`. - -## Verification for npm packages +### npm packages Verification of npm packages is currently an experimental feature. -### The verify-npm-package command +#### The verify-npm-package command ```bash $ slsa-verifier verify-npm-package --help @@ -348,8 +302,8 @@ Flags: --build-workflow-input map[] [optional] a workflow input provided by a user at trigger time in the format 'key=value'. (Only for 'workflow_dispatch' events on GitHub Actions). (default map[]) --builder-id string [optional] the unique builder ID who created the provenance -h, --help help for verify-npm-package - --package-name string [optional] the package name - --package-version string [optional] the package version + --package-name string the package name + --package-version string the package version --print-provenance [optional] print the verified provenance to stdout --source-branch string [optional] expected branch the binary was compiled from --source-tag string [optional] expected tag the binary was compiled from @@ -357,29 +311,65 @@ Flags: --source-versioned-tag string [optional] expected version the binary was compiled from. Uses semantic version to match the tag ``` -### Verify npm packages built using the SLSA3 Node.js builder +#### npm packages built using the SLSA3 Node.js builder This section describes how to verify packages built using the SLSA Build L3 [Node.js builder](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/nodejs/README.md). -To verify a npm packages, first download the package tarball and attestations. +To verify an npm package, first download the package tarball and attestations. ```shell -curl -Sso attestations.json $(npm view @ianlewis/actions-test@0.1.126 --json | jq -r '.dist.attestations.url') && \ -curl -Sso actions-test.tgz "$(npm view @ianlewis/actions-test@0.1.126 --json | jq -r '.dist.tarball')" +curl -Sso attestations.json $(npm view @ianlewis/actions-test@0.1.127 --json | jq -r '.dist.attestations.url') && \ +curl -Sso actions-test.tgz "$(npm view @ianlewis/actions-test@0.1.127 --json | jq -r '.dist.tarball')" ``` You can then verify the package by running the following command: ```shell -$ SLSA_VERIFIER_EXPERIMENTAL=1 slsa-verifier verify-npm-package actions-test.tgz \ +SLSA_VERIFIER_EXPERIMENTAL=1 slsa-verifier verify-npm-package actions-test.tgz \ --attestations-path attestations.json \ --builder-id "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml" \ --package-name "@ianlewis/actions-test" \ - --package-version 0.1.126 \ + --package-version 0.1.127 \ + --source-uri github.com/ianlewis/actions-test +``` + +The verified in-toto statement may be written to stdout with the +`--print-provenance` flag to pipe into policy engines. + +Only GitHub URIs are supported with the `--source-uri` flag. A tag should not +be specified, even if the provenance was built at some tag. If you intend to do +source versioning validation, you can use `--source-tag` to validate the +release tag and `--package-version` to validate the package version. For commit +SHA validation, use `--print-provenance` and inspect the commit SHA of the +config source or materials. + +#### npm packages built using the npm CLI + +This section describes how to verify packages built using the npm CLI on GitHub. + +To verify an npm package, first download the package tarball and attestations. + +```shell +curl -Sso attestations.json $(npm view @ianlewis/actions-test@0.1.132 --json | jq -r '.dist.attestations.url') && \ +curl -Sso actions-test.tgz "$(npm view @ianlewis/actions-test@0.1.132 --json | jq -r '.dist.tarball')" +``` + +You can then verify the package by running the following command: + +```shell +SLSA_VERIFIER_EXPERIMENTAL=1 slsa-verifier verify-npm-package actions-test.tgz \ + --attestations-path attestations.json \ + --builder-id "https://github.com/actions/runner/github-hosted" \ + --package-name "@ianlewis/actions-test" \ + --package-version 0.1.132 \ --source-uri github.com/ianlewis/actions-test ``` +If the package was built with self-hosted runners, replace +"https://github.com/actions/runner/github-hosted" with +"https://github.com/actions/runner/self-hosted". + The verified in-toto statement may be written to stdout with the `--print-provenance` flag to pipe into policy engines. @@ -390,6 +380,80 @@ release tag and `--package-version` to validate the package version. For commit SHA validation, use `--print-provenance` and inspect the commit SHA of the config source or materials. +### Container-based builds + +To verify an artifact produced by the [Container-based builder](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/docker/README.md), you will first need to run the following command to verify the provenance like the section above for general [Artifacts](#artifacts): + +```bash +$ slsa-verifier verify-artifact slsa-test-linux-amd64 \ + --provenance-path slsa-test-linux-amd64.sigstore \ + --source-uri github.com/slsa-framework/slsa-test \ + --source-tag v1.0.3 +Verified signature against tlog entry index 3189970 at URL: https://rekor.sigstore.dev/api/v1/log/entries/206071d5ca7a2346e4db4dcb19a648c7f13b4957e655f4382b735894059bd199 +Verified build using builder https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_container-based_slsa3.yml@refs/tags/v1.7.0 at commit 5bb13ef508b2b8ded49f9264d7712f1316830d10 +PASSED: Verified SLSA provenance +``` + +The input provenance is a `.sigstore` file, which is a [Sigstore bundle](https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_bundle.proto#L63) that contains the in-toto statement containing the SLSA provenance along with verification material. The verified in-toto statement contained in the bundle may be written to stdout with the `--print-provenance` flag to pipe into policy engines. + +To verify the user-specified builder image that was used to produce the artifact, extract the builder image with the following command and validate in a policy engine: + +```bash +$ cat verifier-statement.intoto | jq -r '.predicate.buildDefinition.externalParameters.builderImage' +``` + +The builder image is described using an [in-toto Resource Descriptor](https://github.com/in-toto/attestation/blob/main/spec/v1/resource_descriptor.md). + +In case the builds are reproducible, you may also use the internal [docker CLI tool](https://github.com/slsa-framework/slsa-github-generator/tree/main/internal/builders/docker#the-verify-command) to verify the artifact by rebuilding the artifact with the provided provenance. + +## Verification for Google Cloud Build + +### Artifacts + +This is WIP and currently not supported. + +### Containers + +To verify a container image, you need to pass a container image name that is _immutable_ by providing its digest, in order to avoid [TOCTOU attacks](#toctou-attacks). + +First set the image name: + +```shell +IMAGE=laurentsimon/slsa-gcb-v0.3:test +``` + +Download the provenance: + +```shell +gcloud artifacts docker images describe $IMAGE --format json --show-provenance > provenance.json +``` + +Get the digest for your container _without_ pulling it using the [crane](https://github.com/google/go-containerregistry/blob/main/cmd/crane/doc/crane.md) command: + +```shell +IMAGE="${IMAGE}@"$(crane digest "${IMAGE}") +``` + +Verify the image: + +```shell +slsa-verifier verify-image "$IMAGE" \ + --provenance-path provenance.json \ + --source-uri github.com/laurentsimon/gcb-tests \ + --builder-id=https://cloudbuild.googleapis.com/GoogleHostedWorker +``` + +You should see that the verification passed in the output. + +``` +PASSED: Verified SLSA provenance +``` + +The verified in-toto statement may be written to stdout with the +`--print-provenance` flag to pipe into policy engines. + +Note that `--source-uri` supports GitHub repository URIs like `github.com/$OWNER/$REPO` when the build was enabled with a Cloud Build [GitHub trigger](https://cloud.google.com/build/docs/automating-builds/github/build-repos-from-github). Otherwise, the build provenance will contain the name of the Cloud Storage bucket used to host the source files, usually of the form `gs://[PROJECT_ID]_cloudbuild/source` (see [Running build](https://cloud.google.com/build/docs/running-builds/submit-build-via-cli-api#running_builds)). We recommend using GitHub triggers in order to preserve the source provenance and valiate that the source came from an expected, version-controlled repository. You _may_ match on the fully-qualified tar like `gs://[PROJECT_ID]_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz`. + ## Known Issues ### tuf: invalid key diff --git a/SHA256SUM.md b/SHA256SUM.md index 7f31522b5..10421bbb4 100644 --- a/SHA256SUM.md +++ b/SHA256SUM.md @@ -1,3 +1,12 @@ +### [v2.3.0](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.3.0) + +44ae609925c2dddafa45b2f98da62b40abcf739bbbe6f9dc792f3aba6e236e9c slsa-verifier-darwin-amd64 +16e028a9306c622aecfc1e286082a2cbdd71418f39054fab98612fcf2ce4716e slsa-verifier-darwin-arm64 +ea687149d658efecda64d69da999efb84bb695a3212f29548d4897994027172d slsa-verifier-linux-amd64 +59cadeaee0705dfe453e487188528a9d18864f95f5b1a34492ff69264692d327 slsa-verifier-linux-arm64 +2a9e77e97045ba6a3d033011a9fa0ced7dbf60354738420591ec31beaee43830 slsa-verifier-windows-amd64.exe +2e3713d93662060dbe5116c3e8cdfa4d93b8f33e97ef256fd82b9f0d160eb7ce slsa-verifier-windows-arm64.exe + ### [v2.2.0](https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.2.0) 8aaf12ce7691ca203c2ab000cbbc68140112acb3d08c4d338c06eb125dfd6b10 slsa-verifier-linux-amd64 diff --git a/actions/installer/README.md b/actions/installer/README.md index 3e9c95b63..40bac4f34 100644 --- a/actions/installer/README.md +++ b/actions/installer/README.md @@ -11,7 +11,7 @@ For more information about SLSA in general, see [https://slsa.dev](https://slsa. To install a specific version of `slsa-verifier`, use: ```yaml -uses: slsa-framework/slsa-verifier/actions/installer@v2.2.0 +uses: slsa-framework/slsa-verifier/actions/installer@v2.3.0 ``` See https://github.com/slsa-framework/slsa-verifier/releases for the list of available `slsa-verifier` releases. Only versions greater or equal to 2.0.1 are supported. diff --git a/actions/installer/package-lock.json b/actions/installer/package-lock.json index e50dee949..45984b120 100644 --- a/actions/installer/package-lock.json +++ b/actions/installer/package-lock.json @@ -16,14 +16,14 @@ "nodejs": "^0.0.0" }, "devDependencies": { - "@types/jasmine": "4.3.1", - "@types/node": "18.16.6", + "@types/jasmine": "4.3.2", + "@types/node": "18.16.17", "@vercel/ncc": "0.36.1", - "eslint": "8.40.0", - "eslint-plugin-github": "4.7.0", - "jasmine": "4.6.0", + "eslint": "8.42.0", + "eslint-plugin-github": "4.8.0", + "jasmine": "5.0.1", "prettier": "2.8.8", - "typescript": "5.0.4" + "typescript": "5.1.3" } }, "node_modules/@actions/core": { @@ -149,9 +149,9 @@ } }, "node_modules/@eslint/js": { - "version": "8.40.0", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.40.0.tgz", - "integrity": "sha512-ElyB54bJIhXQYVKjDSvCkPO1iU1tSAeVQJbllWJq1XQSmmA4dgFk8CbiBGpiOPxleE48vDogxCtmMYku4HSVLA==", + "version": "8.42.0", + "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.42.0.tgz", + "integrity": "sha512-6SWlXpWU5AvId8Ac7zjzmIOqMOba/JWY8XZ4A7q7Gn1Vlfg/SFFIlrtHXt9nPn4op9ZPAkl91Jao+QQv3r/ukw==", "dev": true, "engines": { "node": "^12.22.0 || ^14.17.0 || >=16.0.0" @@ -164,9 +164,9 @@ "dev": true }, "node_modules/@humanwhocodes/config-array": { - "version": "0.11.8", - "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.11.8.tgz", - "integrity": "sha512-UybHIJzJnR5Qc/MsD9Kr+RpO2h+/P1GhOwdiLPXK5TWk5sgTdu88bTD9UP+CKbPPh5Rni1u0GjAdYQLemG8g+g==", + "version": "0.11.10", + "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.11.10.tgz", + "integrity": "sha512-KVVjQmNUepDVGXNuoRRdmmEjruj0KfiGSbS8LVc12LMsWDQzRXJ0qdhN8L8uUigKpfEHRhlaQFY0ib1tnUbNeQ==", "dev": true, "dependencies": { "@humanwhocodes/object-schema": "^1.2.1", @@ -196,6 +196,50 @@ "integrity": "sha512-ZnQMnLV4e7hDlUvw8H+U8ASL02SS2Gn6+9Ac3wGGLIe7+je2AeAOxPY+izIPJDfFDb7eDjev0Us8MO1iFRN8hA==", "dev": true }, + "node_modules/@isaacs/cliui": { + "version": "8.0.2", + "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz", + "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==", + "dev": true, + "dependencies": { + "string-width": "^5.1.2", + "string-width-cjs": "npm:string-width@^4.2.0", + "strip-ansi": "^7.0.1", + "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", + "wrap-ansi": "^8.1.0", + "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/@isaacs/cliui/node_modules/ansi-regex": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz", + "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==", + "dev": true, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/@isaacs/cliui/node_modules/strip-ansi": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.0.1.tgz", + "integrity": "sha512-cXNxvT8dFNRVfhVME3JAe98mkXDYN2O1l7jmcwMnOslDeESg1rF/OZMtK0nRAhiari1unG5cD4jG3rapUAkLbw==", + "dev": true, + "dependencies": { + "ansi-regex": "^6.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, "node_modules/@nodelib/fs.scandir": { "version": "2.1.5", "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz", @@ -332,10 +376,20 @@ "@octokit/openapi-types": "^12.11.0" } }, + "node_modules/@pkgjs/parseargs": { + "version": "0.11.0", + "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz", + "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==", + "dev": true, + "optional": true, + "engines": { + "node": ">=14" + } + }, "node_modules/@types/jasmine": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/@types/jasmine/-/jasmine-4.3.1.tgz", - "integrity": "sha512-Vu8l+UGcshYmV1VWwULgnV/2RDbBaO6i2Ptx7nd//oJPIZGhoI1YLST4VKagD2Pq/Bc2/7zvtvhM7F3p4SN7kQ==", + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/@types/jasmine/-/jasmine-4.3.2.tgz", + "integrity": "sha512-lKkWBcbxEZX/7nxPqEtv/OjPLaBa2j0o+hmv5Yn83b/+11C1kfBAkgvmrb13WDkmizUJ3B+jYrWh4M0YRtrzEQ==", "dev": true }, "node_modules/@types/json-schema": { @@ -351,9 +405,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "18.16.6", - "resolved": "https://registry.npmjs.org/@types/node/-/node-18.16.6.tgz", - "integrity": "sha512-N7KINmeB8IN3vRR8dhgHEp+YpWvGFcpDoh5XZ8jB5a00AdFKCKEyyGTOPTddUf4JqU1ZKTVxkOxakDvchNVI2Q==", + "version": "18.16.17", + "resolved": "https://registry.npmjs.org/@types/node/-/node-18.16.17.tgz", + "integrity": "sha512-QAkjjRA1N7gPJeAP4WLXZtYv6+eMXFNviqktCDt4GLcmCugMr5BcRHfkOjCQzvCsnMp+L79a54zBkbw356xv9Q==", "dev": true }, "node_modules/@typescript-eslint/eslint-plugin": { @@ -1033,6 +1087,12 @@ "node": ">=6.0.0" } }, + "node_modules/eastasianwidth": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", + "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", + "dev": true + }, "node_modules/electron-to-chromium": { "version": "1.4.238", "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.238.tgz", @@ -1174,16 +1234,16 @@ } }, "node_modules/eslint": { - "version": "8.40.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.40.0.tgz", - "integrity": "sha512-bvR+TsP9EHL3TqNtj9sCNJVAFK3fBN8Q7g5waghxyRsPLIMwL73XSKnZFK0hk/O2ANC+iAoq6PWMQ+IfBAJIiQ==", + "version": "8.42.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.42.0.tgz", + "integrity": "sha512-ulg9Ms6E1WPf67PHaEY4/6E2tEn5/f7FXGzr3t9cBMugOmf1INYvuUwwh1aXQN4MfJ6a5K2iNwP3w4AColvI9A==", "dev": true, "dependencies": { "@eslint-community/eslint-utils": "^4.2.0", "@eslint-community/regexpp": "^4.4.0", "@eslint/eslintrc": "^2.0.3", - "@eslint/js": "8.40.0", - "@humanwhocodes/config-array": "^0.11.8", + "@eslint/js": "8.42.0", + "@humanwhocodes/config-array": "^0.11.10", "@humanwhocodes/module-importer": "^1.0.1", "@nodelib/fs.walk": "^1.2.8", "ajv": "^6.10.0", @@ -1202,13 +1262,12 @@ "find-up": "^5.0.0", "glob-parent": "^6.0.2", "globals": "^13.19.0", - "grapheme-splitter": "^1.0.4", + "graphemer": "^1.4.0", "ignore": "^5.2.0", "import-fresh": "^3.0.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "is-path-inside": "^3.0.3", - "js-sdsl": "^4.1.4", "js-yaml": "^4.1.0", "json-stable-stringify-without-jsonify": "^1.0.1", "levn": "^0.4.1", @@ -1343,9 +1402,9 @@ } }, "node_modules/eslint-plugin-github": { - "version": "4.7.0", - "resolved": "https://registry.npmjs.org/eslint-plugin-github/-/eslint-plugin-github-4.7.0.tgz", - "integrity": "sha512-SIFSy6IXtN3aGQ6YyFWg/oxRUyAcYwg5G0wh+ov1HQCvmp+Pzs1GzeVjU8QcIQSSJfverQzuxWrJCAln/d2PuQ==", + "version": "4.8.0", + "resolved": "https://registry.npmjs.org/eslint-plugin-github/-/eslint-plugin-github-4.8.0.tgz", + "integrity": "sha512-1qu1qcyac4FfZmT9KNPr5250DwWzwp6uy6xAqHD2boE4OquUpeTni05yPn1b6y6vUYm/q8+npTdyYiRSqvg+BQ==", "dev": true, "dependencies": { "@github/browserslist-config": "^1.0.0", @@ -1748,6 +1807,22 @@ "is-callable": "^1.1.3" } }, + "node_modules/foreground-child": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.1.1.tgz", + "integrity": "sha512-TMKDUnIte6bfb5nWv7V/caI169OHgvwjb7V4WkeUvbQQdjr5rWKqHFiKWb/fcOwB+CzBT+qbWjvj+DVwRskpIg==", + "dev": true, + "dependencies": { + "cross-spawn": "^7.0.0", + "signal-exit": "^4.0.1" + }, + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, "node_modules/fs.realpath": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", @@ -1917,10 +1992,10 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/grapheme-splitter": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/grapheme-splitter/-/grapheme-splitter-1.0.4.tgz", - "integrity": "sha512-bzh50DW9kTPM00T8y4o8vQg89Di9oLJVLW/KaOGIXJWP/iqCN6WKYkbNOF04vFLJhwcpYUh9ydh/+5vpOqV4YQ==", + "node_modules/graphemer": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/graphemer/-/graphemer-1.4.0.tgz", + "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==", "dev": true }, "node_modules/has": { @@ -2174,6 +2249,15 @@ "node": ">=0.10.0" } }, + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", + "dev": true, + "engines": { + "node": ">=8" + } + }, "node_modules/is-glob": { "version": "4.0.3", "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz", @@ -2380,30 +2464,88 @@ "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", "dev": true }, + "node_modules/jackspeak": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-2.2.0.tgz", + "integrity": "sha512-r5XBrqIJfwRIjRt/Xr5fv9Wh09qyhHfKnYddDlpM+ibRR20qrYActpCAgU6U+d53EOEjzkvxPMVHSlgR7leXrQ==", + "dev": true, + "dependencies": { + "@isaacs/cliui": "^8.0.2" + }, + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + }, + "optionalDependencies": { + "@pkgjs/parseargs": "^0.11.0" + } + }, "node_modules/jasmine": { - "version": "4.6.0", - "resolved": "https://registry.npmjs.org/jasmine/-/jasmine-4.6.0.tgz", - "integrity": "sha512-iq7HQ5M8ydNUspjd9vbFW9Lu+6lQ1QLDIqjl0WysEllF5EJZy8XaUyNlhCJVwOx2YFzqTtARWbS56F/f0PzRFw==", + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/jasmine/-/jasmine-5.0.1.tgz", + "integrity": "sha512-cLAGOzZyTaDF/T4J8AvBg3Jthp/CAFZNuzxMNBdc0IrNXMhbxxMIY7eLn+1hFjo+QJ0Pvj3ifahBCQDE6i08Ug==", "dev": true, "dependencies": { - "glob": "^7.1.6", - "jasmine-core": "^4.6.0" + "glob": "^10.2.2", + "jasmine-core": "~5.0.1" }, "bin": { "jasmine": "bin/jasmine.js" } }, "node_modules/jasmine-core": { - "version": "4.6.0", - "resolved": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-4.6.0.tgz", - "integrity": "sha512-O236+gd0ZXS8YAjFx8xKaJ94/erqUliEkJTDedyE7iHvv4ZVqi+q+8acJxu05/WJDKm512EUNn809In37nWlAQ==", + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-5.0.1.tgz", + "integrity": "sha512-D4bRej8CplwNtNGyTPD++cafJlZUphzZNV+MSAnbD3er4D0NjL4x9V+mu/SI+5129utnCBen23JwEuBZA9vlpQ==", "dev": true }, - "node_modules/js-sdsl": { - "version": "4.1.5", - "resolved": "https://registry.npmjs.org/js-sdsl/-/js-sdsl-4.1.5.tgz", - "integrity": "sha512-08bOAKweV2NUC1wqTtf3qZlnpOX/R2DU9ikpjOHs0H+ibQv3zpncVQg6um4uYtRtrwIX8M4Nh3ytK4HGlYAq7Q==", - "dev": true + "node_modules/jasmine/node_modules/brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", + "dev": true, + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/jasmine/node_modules/glob": { + "version": "10.2.7", + "resolved": "https://registry.npmjs.org/glob/-/glob-10.2.7.tgz", + "integrity": "sha512-jTKehsravOJo8IJxUGfZILnkvVJM/MOfHRs8QcXolVef2zNI9Tqyy5+SeuOAZd3upViEZQLyFpQhYiHLrMUNmA==", + "dev": true, + "dependencies": { + "foreground-child": "^3.1.0", + "jackspeak": "^2.0.3", + "minimatch": "^9.0.1", + "minipass": "^5.0.0 || ^6.0.2", + "path-scurry": "^1.7.0" + }, + "bin": { + "glob": "dist/cjs/src/bin.js" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/jasmine/node_modules/minimatch": { + "version": "9.0.1", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.1.tgz", + "integrity": "sha512-0jWhJpD/MdhPXwPuiRkCbfYfSKp2qnn2eOc279qI7f+osl/l+prKSrvhg157zSYvx/1nmgn2NqdT6k2Z7zSH9w==", + "dev": true, + "dependencies": { + "brace-expansion": "^2.0.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } }, "node_modules/js-yaml": { "version": "4.1.0", @@ -2579,6 +2721,15 @@ "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", "dev": true }, + "node_modules/minipass": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==", + "dev": true, + "engines": { + "node": ">=8" + } + }, "node_modules/ms": { "version": "2.1.2", "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", @@ -2821,6 +2972,31 @@ "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==", "dev": true }, + "node_modules/path-scurry": { + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.9.0.tgz", + "integrity": "sha512-KLejx+14koDZLnb3JNDZbjcmHC/IO2Imd3rNoyt5mynieVd+MT4b1aaGaXAHw06H3P+aZ3Q+56VKJ6BCHMO3WA==", + "dev": true, + "dependencies": { + "lru-cache": "^9.1.1", + "minipass": "^5.0.0" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/path-scurry/node_modules/lru-cache": { + "version": "9.1.1", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-9.1.1.tgz", + "integrity": "sha512-65/Jky17UwSb0BuB9V+MyDpsOtXKmYwzhyl+cOa9XUiI4uV2Ouy/2voFP3+al0BjZbJgMBD8FojMpAf+Z+qn4A==", + "dev": true, + "engines": { + "node": "14 || >=16.14" + } + }, "node_modules/path-type": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz", @@ -3079,6 +3255,18 @@ "url": "https://github.com/sponsors/ljharb" } }, + "node_modules/signal-exit": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.0.2.tgz", + "integrity": "sha512-MY2/qGx4enyjprQnFaZsHib3Yadh3IXyV2C321GY0pjGfVBu4un0uDJkwgdxqO+Rdx8JMT8IfJIRwbYVz3Ob3Q==", + "dev": true, + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, "node_modules/slash": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz", @@ -3100,6 +3288,71 @@ "node": ">= 0.4" } }, + "node_modules/string-width": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", + "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", + "dev": true, + "dependencies": { + "eastasianwidth": "^0.2.0", + "emoji-regex": "^9.2.2", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/string-width-cjs": { + "name": "string-width", + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/string-width-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true + }, + "node_modules/string-width/node_modules/ansi-regex": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz", + "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==", + "dev": true, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/string-width/node_modules/strip-ansi": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.0.1.tgz", + "integrity": "sha512-cXNxvT8dFNRVfhVME3JAe98mkXDYN2O1l7jmcwMnOslDeESg1rF/OZMtK0nRAhiari1unG5cD4jG3rapUAkLbw==", + "dev": true, + "dependencies": { + "ansi-regex": "^6.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, "node_modules/string.prototype.trimend": { "version": "1.0.6", "resolved": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.6.tgz", @@ -3140,6 +3393,19 @@ "node": ">=8" } }, + "node_modules/strip-ansi-cjs": { + "name": "strip-ansi", + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, "node_modules/strip-bom": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz", @@ -3298,16 +3564,16 @@ } }, "node_modules/typescript": { - "version": "5.0.4", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.0.4.tgz", - "integrity": "sha512-cW9T5W9xY37cc+jfEnaUvX91foxtHkza3Nw3wkoF4sSlKn0MONdkdEndig/qPBWXNkmplh3NzayQzCiHM4/hqw==", + "version": "5.1.3", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.1.3.tgz", + "integrity": "sha512-XH627E9vkeqhlZFQuL+UsyAXEnibT0kWR2FWONlr4sTjvxyJYnyefgrkyECLzM5NenmKzRAy2rR/OlYLA1HkZw==", "dev": true, "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" }, "engines": { - "node": ">=12.20" + "node": ">=14.17" } }, "node_modules/unbox-primitive": { @@ -3462,6 +3728,100 @@ "node": ">=0.10.0" } }, + "node_modules/wrap-ansi": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", + "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", + "dev": true, + "dependencies": { + "ansi-styles": "^6.1.0", + "string-width": "^5.0.1", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs": { + "name": "wrap-ansi", + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "dev": true, + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true + }, + "node_modules/wrap-ansi-cjs/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi/node_modules/ansi-regex": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz", + "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==", + "dev": true, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/wrap-ansi/node_modules/ansi-styles": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz", + "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==", + "dev": true, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/wrap-ansi/node_modules/strip-ansi": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.0.1.tgz", + "integrity": "sha512-cXNxvT8dFNRVfhVME3JAe98mkXDYN2O1l7jmcwMnOslDeESg1rF/OZMtK0nRAhiari1unG5cD4jG3rapUAkLbw==", + "dev": true, + "dependencies": { + "ansi-regex": "^6.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, "node_modules/wrappy": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", @@ -3590,9 +3950,9 @@ } }, "@eslint/js": { - "version": "8.40.0", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.40.0.tgz", - "integrity": "sha512-ElyB54bJIhXQYVKjDSvCkPO1iU1tSAeVQJbllWJq1XQSmmA4dgFk8CbiBGpiOPxleE48vDogxCtmMYku4HSVLA==", + "version": "8.42.0", + "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.42.0.tgz", + "integrity": "sha512-6SWlXpWU5AvId8Ac7zjzmIOqMOba/JWY8XZ4A7q7Gn1Vlfg/SFFIlrtHXt9nPn4op9ZPAkl91Jao+QQv3r/ukw==", "dev": true }, "@github/browserslist-config": { @@ -3602,9 +3962,9 @@ "dev": true }, "@humanwhocodes/config-array": { - "version": "0.11.8", - "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.11.8.tgz", - "integrity": "sha512-UybHIJzJnR5Qc/MsD9Kr+RpO2h+/P1GhOwdiLPXK5TWk5sgTdu88bTD9UP+CKbPPh5Rni1u0GjAdYQLemG8g+g==", + "version": "0.11.10", + "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.11.10.tgz", + "integrity": "sha512-KVVjQmNUepDVGXNuoRRdmmEjruj0KfiGSbS8LVc12LMsWDQzRXJ0qdhN8L8uUigKpfEHRhlaQFY0ib1tnUbNeQ==", "dev": true, "requires": { "@humanwhocodes/object-schema": "^1.2.1", @@ -3624,6 +3984,37 @@ "integrity": "sha512-ZnQMnLV4e7hDlUvw8H+U8ASL02SS2Gn6+9Ac3wGGLIe7+je2AeAOxPY+izIPJDfFDb7eDjev0Us8MO1iFRN8hA==", "dev": true }, + "@isaacs/cliui": { + "version": "8.0.2", + "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz", + "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==", + "dev": true, + "requires": { + "string-width": "^5.1.2", + "string-width-cjs": "npm:string-width@^4.2.0", + "strip-ansi": "^7.0.1", + "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", + "wrap-ansi": "^8.1.0", + "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" + }, + "dependencies": { + "ansi-regex": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz", + "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==", + "dev": true + }, + "strip-ansi": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.0.1.tgz", + "integrity": "sha512-cXNxvT8dFNRVfhVME3JAe98mkXDYN2O1l7jmcwMnOslDeESg1rF/OZMtK0nRAhiari1unG5cD4jG3rapUAkLbw==", + "dev": true, + "requires": { + "ansi-regex": "^6.0.1" + } + } + } + }, "@nodelib/fs.scandir": { "version": "2.1.5", "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz", @@ -3745,10 +4136,17 @@ "@octokit/openapi-types": "^12.11.0" } }, + "@pkgjs/parseargs": { + "version": "0.11.0", + "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz", + "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==", + "dev": true, + "optional": true + }, "@types/jasmine": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/@types/jasmine/-/jasmine-4.3.1.tgz", - "integrity": "sha512-Vu8l+UGcshYmV1VWwULgnV/2RDbBaO6i2Ptx7nd//oJPIZGhoI1YLST4VKagD2Pq/Bc2/7zvtvhM7F3p4SN7kQ==", + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/@types/jasmine/-/jasmine-4.3.2.tgz", + "integrity": "sha512-lKkWBcbxEZX/7nxPqEtv/OjPLaBa2j0o+hmv5Yn83b/+11C1kfBAkgvmrb13WDkmizUJ3B+jYrWh4M0YRtrzEQ==", "dev": true }, "@types/json-schema": { @@ -3764,9 +4162,9 @@ "dev": true }, "@types/node": { - "version": "18.16.6", - "resolved": "https://registry.npmjs.org/@types/node/-/node-18.16.6.tgz", - "integrity": "sha512-N7KINmeB8IN3vRR8dhgHEp+YpWvGFcpDoh5XZ8jB5a00AdFKCKEyyGTOPTddUf4JqU1ZKTVxkOxakDvchNVI2Q==", + "version": "18.16.17", + "resolved": "https://registry.npmjs.org/@types/node/-/node-18.16.17.tgz", + "integrity": "sha512-QAkjjRA1N7gPJeAP4WLXZtYv6+eMXFNviqktCDt4GLcmCugMr5BcRHfkOjCQzvCsnMp+L79a54zBkbw356xv9Q==", "dev": true }, "@typescript-eslint/eslint-plugin": { @@ -4221,6 +4619,12 @@ "esutils": "^2.0.2" } }, + "eastasianwidth": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", + "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", + "dev": true + }, "electron-to-chromium": { "version": "1.4.238", "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.238.tgz", @@ -4335,16 +4739,16 @@ "dev": true }, "eslint": { - "version": "8.40.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.40.0.tgz", - "integrity": "sha512-bvR+TsP9EHL3TqNtj9sCNJVAFK3fBN8Q7g5waghxyRsPLIMwL73XSKnZFK0hk/O2ANC+iAoq6PWMQ+IfBAJIiQ==", + "version": "8.42.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.42.0.tgz", + "integrity": "sha512-ulg9Ms6E1WPf67PHaEY4/6E2tEn5/f7FXGzr3t9cBMugOmf1INYvuUwwh1aXQN4MfJ6a5K2iNwP3w4AColvI9A==", "dev": true, "requires": { "@eslint-community/eslint-utils": "^4.2.0", "@eslint-community/regexpp": "^4.4.0", "@eslint/eslintrc": "^2.0.3", - "@eslint/js": "8.40.0", - "@humanwhocodes/config-array": "^0.11.8", + "@eslint/js": "8.42.0", + "@humanwhocodes/config-array": "^0.11.10", "@humanwhocodes/module-importer": "^1.0.1", "@nodelib/fs.walk": "^1.2.8", "ajv": "^6.10.0", @@ -4363,13 +4767,12 @@ "find-up": "^5.0.0", "glob-parent": "^6.0.2", "globals": "^13.19.0", - "grapheme-splitter": "^1.0.4", + "graphemer": "^1.4.0", "ignore": "^5.2.0", "import-fresh": "^3.0.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "is-path-inside": "^3.0.3", - "js-sdsl": "^4.1.4", "js-yaml": "^4.1.0", "json-stable-stringify-without-jsonify": "^1.0.1", "levn": "^0.4.1", @@ -4470,9 +4873,9 @@ } }, "eslint-plugin-github": { - "version": "4.7.0", - "resolved": "https://registry.npmjs.org/eslint-plugin-github/-/eslint-plugin-github-4.7.0.tgz", - "integrity": "sha512-SIFSy6IXtN3aGQ6YyFWg/oxRUyAcYwg5G0wh+ov1HQCvmp+Pzs1GzeVjU8QcIQSSJfverQzuxWrJCAln/d2PuQ==", + "version": "4.8.0", + "resolved": "https://registry.npmjs.org/eslint-plugin-github/-/eslint-plugin-github-4.8.0.tgz", + "integrity": "sha512-1qu1qcyac4FfZmT9KNPr5250DwWzwp6uy6xAqHD2boE4OquUpeTni05yPn1b6y6vUYm/q8+npTdyYiRSqvg+BQ==", "dev": true, "requires": { "@github/browserslist-config": "^1.0.0", @@ -4777,6 +5180,16 @@ "is-callable": "^1.1.3" } }, + "foreground-child": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.1.1.tgz", + "integrity": "sha512-TMKDUnIte6bfb5nWv7V/caI169OHgvwjb7V4WkeUvbQQdjr5rWKqHFiKWb/fcOwB+CzBT+qbWjvj+DVwRskpIg==", + "dev": true, + "requires": { + "cross-spawn": "^7.0.0", + "signal-exit": "^4.0.1" + } + }, "fs.realpath": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", @@ -4898,10 +5311,10 @@ "get-intrinsic": "^1.1.3" } }, - "grapheme-splitter": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/grapheme-splitter/-/grapheme-splitter-1.0.4.tgz", - "integrity": "sha512-bzh50DW9kTPM00T8y4o8vQg89Di9oLJVLW/KaOGIXJWP/iqCN6WKYkbNOF04vFLJhwcpYUh9ydh/+5vpOqV4YQ==", + "graphemer": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/graphemer/-/graphemer-1.4.0.tgz", + "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==", "dev": true }, "has": { @@ -5074,6 +5487,12 @@ "integrity": "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==", "dev": true }, + "is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", + "dev": true + }, "is-glob": { "version": "4.0.3", "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz", @@ -5214,26 +5633,63 @@ "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", "dev": true }, + "jackspeak": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-2.2.0.tgz", + "integrity": "sha512-r5XBrqIJfwRIjRt/Xr5fv9Wh09qyhHfKnYddDlpM+ibRR20qrYActpCAgU6U+d53EOEjzkvxPMVHSlgR7leXrQ==", + "dev": true, + "requires": { + "@isaacs/cliui": "^8.0.2", + "@pkgjs/parseargs": "^0.11.0" + } + }, "jasmine": { - "version": "4.6.0", - "resolved": "https://registry.npmjs.org/jasmine/-/jasmine-4.6.0.tgz", - "integrity": "sha512-iq7HQ5M8ydNUspjd9vbFW9Lu+6lQ1QLDIqjl0WysEllF5EJZy8XaUyNlhCJVwOx2YFzqTtARWbS56F/f0PzRFw==", + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/jasmine/-/jasmine-5.0.1.tgz", + "integrity": "sha512-cLAGOzZyTaDF/T4J8AvBg3Jthp/CAFZNuzxMNBdc0IrNXMhbxxMIY7eLn+1hFjo+QJ0Pvj3ifahBCQDE6i08Ug==", "dev": true, "requires": { - "glob": "^7.1.6", - "jasmine-core": "^4.6.0" + "glob": "^10.2.2", + "jasmine-core": "~5.0.1" + }, + "dependencies": { + "brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", + "dev": true, + "requires": { + "balanced-match": "^1.0.0" + } + }, + "glob": { + "version": "10.2.7", + "resolved": "https://registry.npmjs.org/glob/-/glob-10.2.7.tgz", + "integrity": "sha512-jTKehsravOJo8IJxUGfZILnkvVJM/MOfHRs8QcXolVef2zNI9Tqyy5+SeuOAZd3upViEZQLyFpQhYiHLrMUNmA==", + "dev": true, + "requires": { + "foreground-child": "^3.1.0", + "jackspeak": "^2.0.3", + "minimatch": "^9.0.1", + "minipass": "^5.0.0 || ^6.0.2", + "path-scurry": "^1.7.0" + } + }, + "minimatch": { + "version": "9.0.1", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.1.tgz", + "integrity": "sha512-0jWhJpD/MdhPXwPuiRkCbfYfSKp2qnn2eOc279qI7f+osl/l+prKSrvhg157zSYvx/1nmgn2NqdT6k2Z7zSH9w==", + "dev": true, + "requires": { + "brace-expansion": "^2.0.1" + } + } } }, "jasmine-core": { - "version": "4.6.0", - "resolved": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-4.6.0.tgz", - "integrity": "sha512-O236+gd0ZXS8YAjFx8xKaJ94/erqUliEkJTDedyE7iHvv4ZVqi+q+8acJxu05/WJDKm512EUNn809In37nWlAQ==", - "dev": true - }, - "js-sdsl": { - "version": "4.1.5", - "resolved": "https://registry.npmjs.org/js-sdsl/-/js-sdsl-4.1.5.tgz", - "integrity": "sha512-08bOAKweV2NUC1wqTtf3qZlnpOX/R2DU9ikpjOHs0H+ibQv3zpncVQg6um4uYtRtrwIX8M4Nh3ytK4HGlYAq7Q==", + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-5.0.1.tgz", + "integrity": "sha512-D4bRej8CplwNtNGyTPD++cafJlZUphzZNV+MSAnbD3er4D0NjL4x9V+mu/SI+5129utnCBen23JwEuBZA9vlpQ==", "dev": true }, "js-yaml": { @@ -5380,6 +5836,12 @@ "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", "dev": true }, + "minipass": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==", + "dev": true + }, "ms": { "version": "2.1.2", "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", @@ -5551,6 +6013,24 @@ "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==", "dev": true }, + "path-scurry": { + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.9.0.tgz", + "integrity": "sha512-KLejx+14koDZLnb3JNDZbjcmHC/IO2Imd3rNoyt5mynieVd+MT4b1aaGaXAHw06H3P+aZ3Q+56VKJ6BCHMO3WA==", + "dev": true, + "requires": { + "lru-cache": "^9.1.1", + "minipass": "^5.0.0" + }, + "dependencies": { + "lru-cache": { + "version": "9.1.1", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-9.1.1.tgz", + "integrity": "sha512-65/Jky17UwSb0BuB9V+MyDpsOtXKmYwzhyl+cOa9XUiI4uV2Ouy/2voFP3+al0BjZbJgMBD8FojMpAf+Z+qn4A==", + "dev": true + } + } + }, "path-type": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz", @@ -5708,6 +6188,12 @@ "object-inspect": "^1.9.0" } }, + "signal-exit": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.0.2.tgz", + "integrity": "sha512-MY2/qGx4enyjprQnFaZsHib3Yadh3IXyV2C321GY0pjGfVBu4un0uDJkwgdxqO+Rdx8JMT8IfJIRwbYVz3Ob3Q==", + "dev": true + }, "slash": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz", @@ -5723,6 +6209,53 @@ "internal-slot": "^1.0.4" } }, + "string-width": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", + "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", + "dev": true, + "requires": { + "eastasianwidth": "^0.2.0", + "emoji-regex": "^9.2.2", + "strip-ansi": "^7.0.1" + }, + "dependencies": { + "ansi-regex": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz", + "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==", + "dev": true + }, + "strip-ansi": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.0.1.tgz", + "integrity": "sha512-cXNxvT8dFNRVfhVME3JAe98mkXDYN2O1l7jmcwMnOslDeESg1rF/OZMtK0nRAhiari1unG5cD4jG3rapUAkLbw==", + "dev": true, + "requires": { + "ansi-regex": "^6.0.1" + } + } + } + }, + "string-width-cjs": { + "version": "npm:string-width@4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "requires": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "dependencies": { + "emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true + } + } + }, "string.prototype.trimend": { "version": "1.0.6", "resolved": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.6.tgz", @@ -5754,6 +6287,15 @@ "ansi-regex": "^5.0.1" } }, + "strip-ansi-cjs": { + "version": "npm:strip-ansi@6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "requires": { + "ansi-regex": "^5.0.1" + } + }, "strip-bom": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz", @@ -5866,9 +6408,9 @@ } }, "typescript": { - "version": "5.0.4", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.0.4.tgz", - "integrity": "sha512-cW9T5W9xY37cc+jfEnaUvX91foxtHkza3Nw3wkoF4sSlKn0MONdkdEndig/qPBWXNkmplh3NzayQzCiHM4/hqw==", + "version": "5.1.3", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.1.3.tgz", + "integrity": "sha512-XH627E9vkeqhlZFQuL+UsyAXEnibT0kWR2FWONlr4sTjvxyJYnyefgrkyECLzM5NenmKzRAy2rR/OlYLA1HkZw==", "dev": true }, "unbox-primitive": { @@ -5980,6 +6522,70 @@ "integrity": "sha512-Hz/mrNwitNRh/HUAtM/VT/5VH+ygD6DV7mYKZAtHOrbs8U7lvPS6xf7EJKMF0uW1KJCl0H701g3ZGus+muE5vQ==", "dev": true }, + "wrap-ansi": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", + "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", + "dev": true, + "requires": { + "ansi-styles": "^6.1.0", + "string-width": "^5.0.1", + "strip-ansi": "^7.0.1" + }, + "dependencies": { + "ansi-regex": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz", + "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==", + "dev": true + }, + "ansi-styles": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz", + "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==", + "dev": true + }, + "strip-ansi": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.0.1.tgz", + "integrity": "sha512-cXNxvT8dFNRVfhVME3JAe98mkXDYN2O1l7jmcwMnOslDeESg1rF/OZMtK0nRAhiari1unG5cD4jG3rapUAkLbw==", + "dev": true, + "requires": { + "ansi-regex": "^6.0.1" + } + } + } + }, + "wrap-ansi-cjs": { + "version": "npm:wrap-ansi@7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "dev": true, + "requires": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "dependencies": { + "emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true + }, + "string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "requires": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + } + } + } + }, "wrappy": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", diff --git a/actions/installer/package.json b/actions/installer/package.json index 5c2733fa3..beda30763 100644 --- a/actions/installer/package.json +++ b/actions/installer/package.json @@ -23,13 +23,13 @@ "nodejs": "^0.0.0" }, "devDependencies": { - "@types/jasmine": "4.3.1", - "@types/node": "18.16.6", + "@types/jasmine": "4.3.2", + "@types/node": "18.16.17", "@vercel/ncc": "0.36.1", - "eslint": "8.40.0", - "eslint-plugin-github": "4.7.0", - "jasmine": "4.6.0", + "eslint": "8.42.0", + "eslint-plugin-github": "4.8.0", + "jasmine": "5.0.1", "prettier": "2.8.8", - "typescript": "5.0.4" + "typescript": "5.1.3" } } diff --git a/cli/experimental/service/Dockerfile b/cli/experimental/service/Dockerfile index 64ddc6481..bfa2c383a 100644 --- a/cli/experimental/service/Dockerfile +++ b/cli/experimental/service/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.19@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3 AS base +FROM golang:1.21@sha256:ec457a2fcd235259273428a24e09900c496d0c52207266f96a330062a01e3622 AS base WORKDIR /src ENV CGO_ENABLED=0 COPY . ./ @@ -9,6 +9,6 @@ RUN go build -o slsa-verifier -trimpath -ldflags "-s -w -extldflags=-static" -mo # COPY ./service/service slsa-verifier # RUN chmod o+x ./slsa-verifier -FROM gcr.io/distroless/base:nonroot@sha256:42311d85daf49d0822fad6961031f0de2015fc94ff6e49a7f30cab9b40553bfb +FROM gcr.io/distroless/base:nonroot@sha256:c62385962234a3dae5c9e9777dedc863d99f676b7202cd073e90b06e46021994 COPY --from=base /src/slsa-verifier / ENTRYPOINT ["/slsa-verifier"] diff --git a/cli/slsa-verifier/main_regression_test.go b/cli/slsa-verifier/main_regression_test.go index b82f68b59..ee960778d 100644 --- a/cli/slsa-verifier/main_regression_test.go +++ b/cli/slsa-verifier/main_regression_test.go @@ -9,7 +9,6 @@ import ( "fmt" "io/ioutil" "os" - "path" "path/filepath" "strings" "testing" @@ -37,12 +36,12 @@ func pString(s string) *string { const TEST_DIR = "./testdata" var ( - GHA_ARTIFACT_PATH_BUILDERS = []string{"gha_go", "gha_generic"} + GHA_ARTIFACT_PATH_BUILDERS = []string{"gha_go", "gha_generic", "gha_delegator", "gha_maven", "gha_gradle"} // TODO(https://github.com/slsa-framework/slsa-verifier/issues/485): Merge this with // GHA_ARTIFACT_PATH_BUILDERS. - GHA_ARTIFACT_DOCKER_BUILDERS = []string{"gha_docker-based"} - GHA_ARTIFACT_IMAGE_BUILDERS = []string{"gha_generic_container"} - GCB_ARTIFACT_IMAGE_BUILDERS = []string{"gcb_container"} + GHA_ARTIFACT_CONTAINER_BUILDERS = []string{"gha_container-based"} + GHA_ARTIFACT_IMAGE_BUILDERS = []string{"gha_generic_container"} + GCB_ARTIFACT_IMAGE_BUILDERS = []string{"gcb_container"} ) func getBuildersAndVersions(t *testing.T, @@ -74,9 +73,16 @@ func getBuildersAndVersions(t *testing.T, } func Test_runVerifyGHAArtifactPath(t *testing.T) { + // We cannot use t.Setenv due to parallelized tests. + // TODO(639): Remove this by regenerating multiple subjects test. + os.Setenv("SLSA_VERIFIER_TESTING", "1") + t.Parallel() goBuilder := "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml" genericBuilder := "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml" + delegatorBuilder := "https://github.com/slsa-framework/example-trw/.github/workflows/builder_high-perms_slsa3.yml" + mavenBuilder := "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_maven_slsa3.yml" + gradleBuilder := "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_gradle_slsa3.yml" tests := []struct { name string @@ -156,14 +162,14 @@ func Test_runVerifyGHAArtifactPath(t *testing.T) { artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, source: "github.com/slsa-framework/example-package", ptag: pString("v1.2.3"), - err: serrors.ErrorMismatchTag, + err: serrors.ErrorInvalidRef, }, { name: "versioned tag no match empty tag workflow_dispatch", artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, source: "github.com/slsa-framework/example-package", pversiontag: pString("v1"), - err: serrors.ErrorInvalidSemver, + err: serrors.ErrorInvalidRef, }, // Provenance contains tag = v13.0.30. { @@ -477,7 +483,7 @@ func Test_runVerifyGHAArtifactPath(t *testing.T) { source: "github.com/asraa/slsa-on-github-test", pversiontag: pString("v1.5.0"), pbranch: pString("main"), - err: serrors.ErrorMismatchBranch, + err: serrors.ErrorInvalidRef, noversion: true, }, // Workflow inputs. @@ -529,9 +535,15 @@ func Test_runVerifyGHAArtifactPath(t *testing.T) { for _, v := range checkVersions { var provenancePath string + var byob bool if tt.provenancePath == "" { testPath := filepath.Clean(filepath.Join(TEST_DIR, v, tt.artifacts[0])) - provenancePath = fmt.Sprintf("%s.intoto.jsonl", testPath) + if strings.Contains(testPath, "delegator") || strings.Contains(testPath, "maven") || strings.Contains(testPath, "gradle") { + provenancePath = fmt.Sprintf("%s.build.slsa", testPath) + byob = true + } else { + provenancePath = fmt.Sprintf("%s.intoto.jsonl", testPath) + } } else { provenancePath = filepath.Clean(filepath.Join(TEST_DIR, v, tt.provenancePath)) } @@ -542,7 +554,7 @@ func Test_runVerifyGHAArtifactPath(t *testing.T) { } // TODO(#258): invalid builder ref. - sv := path.Base(v) + sv := filepath.Base(v) // For each test, we run 4 sub-tests: // 1. With the the full builderID including the semver in short form. // 2. With the the full builderID including the semver in long form. @@ -561,6 +573,12 @@ func Test_runVerifyGHAArtifactPath(t *testing.T) { builder = goBuilder case strings.HasSuffix(name, "_generic"): builder = genericBuilder + case strings.HasSuffix(name, "_delegator"): + builder = delegatorBuilder + case strings.HasSuffix(name, "_maven"): + builder = mavenBuilder + case strings.HasSuffix(name, "_gradle"): + builder = gradleBuilder default: builder = genericBuilder } @@ -568,7 +586,12 @@ func Test_runVerifyGHAArtifactPath(t *testing.T) { // Default builders to test. builderIDs := []*string{ pString(builder), - nil, + } + + // Do not run without explicit builder ID for the delegator, + // because it's hosted on a different repo slsa-framework/example-package. + if builder != delegatorBuilder { + builderIDs = append(builderIDs, nil) } // We only add the tags to tests for versions >= 1, @@ -597,6 +620,10 @@ func Test_runVerifyGHAArtifactPath(t *testing.T) { BuildWorkflowInputs: tt.inputs, } + // BYOB-based builders ignore the reusable workflow. + if errCmp(tt.err, serrors.ErrorUntrustedReusableWorkflow) && byob { + tt.err = serrors.ErrorMismatchBuilderID + } // The outBuilderID is the actual builder ID from the provenance. // This is always long form for the GHA builders. outBuilderID, err := cmd.Exec(context.Background(), artifacts) @@ -696,6 +723,10 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) { // or testdata from malicious untrusted builders. // When true, this does not iterate over all builder versions. noversion bool + // minversion is a special case to test a newly added feature into a builder. + minversion string + // maxversion is a special case to handle incompatible error changes in the builder. + maxversion string }{ { name: "valid main branch default", @@ -715,7 +746,6 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) { source: "github.com/slsa-framework/example-package", pbranch: pString("main"), }, - { name: "wrong branch master", artifact: "container_workflow_dispatch", @@ -742,18 +772,36 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) { err: serrors.ErrorMismatchSource, }, { - name: "tag no match empty tag workflow_dispatch", - artifact: "container_workflow_dispatch", - source: "github.com/slsa-framework/example-package", - ptag: pString("v1.2.3"), - err: serrors.ErrorMismatchTag, + name: "tag no match empty tag workflow_dispatch", + artifact: "container_workflow_dispatch", + source: "github.com/slsa-framework/example-package", + ptag: pString("v1.2.3"), + maxversion: "v1.8.0", + err: serrors.ErrorInvalidRef, }, { name: "versioned tag no match empty tag workflow_dispatch", artifact: "container_workflow_dispatch", source: "github.com/slsa-framework/example-package", pversiontag: pString("v1"), - err: serrors.ErrorInvalidSemver, + maxversion: "v1.8.0", + err: serrors.ErrorInvalidRef, + }, + { + name: "tag no match empty tag workflow_dispatch > v1.9.0", + artifact: "container_workflow_dispatch", + source: "github.com/slsa-framework/example-package", + ptag: pString("v1.2.3"), + minversion: "v1.9.0", + err: serrors.ErrorMismatchTag, + }, + { + name: "versioned tag no match empty tag workflow_dispatch > v1.9.0", + artifact: "container_workflow_dispatch", + source: "github.com/slsa-framework/example-package", + pversiontag: pString("v1"), + minversion: "v1.9.0", + err: serrors.ErrorMismatchTag, }, } for _, tt := range tests { @@ -767,9 +815,22 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) { } for _, v := range checkVersions { + parts := strings.Split(v, "/") + version := "" + if len(parts) > 1 { + version = parts[1] + } + if version != "" && tt.minversion != "" && semver.Compare(version, tt.minversion) <= 0 { + fmt.Println("skiping due to min:", version) + continue + } + if version != "" && tt.maxversion != "" && semver.Compare(version, tt.maxversion) > 0 { + fmt.Println("skiping due to max:", version) + continue + } image := filepath.Clean(filepath.Join(TEST_DIR, v, tt.artifact)) // TODO(#258): test for tagged builder. - sv := path.Base(v) + sv := filepath.Base(v) // For each test, we run 2 sub-tests: // 1. With the the full builderID including the semver in short form. // 2. With the the full builderID including the semver in long form. @@ -1216,7 +1277,7 @@ func Test_runVerifyGCBArtifactImage(t *testing.T) { } for _, v := range checkVersions { - semver := path.Base(v) + semver := filepath.Base(v) // For each test, we run 2 sub-tests: // 1. With the the full builderID including the semver. // 2. With only the name of the builder. @@ -1298,16 +1359,9 @@ func Test_runVerifyGCBArtifactImage(t *testing.T) { } } -// TODO(https://github.com/slsa-framework/slsa-verifier/issues/485): Version the test-cases -// when a version for the builder is released. -func Test_runVerifyGHADockerBased(t *testing.T) { - // We cannot use t.Setenv due to parallelized tests. - os.Setenv("SLSA_VERIFIER_EXPERIMENTAL", "1") - os.Setenv("SLSA_VERIFIER_TESTING", "1") - +func Test_runVerifyGHAContainerBased(t *testing.T) { t.Parallel() - builder := "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml" tests := []struct { name string artifacts []string @@ -1320,70 +1374,61 @@ func Test_runVerifyGHADockerBased(t *testing.T) { err error }{ { - name: "valid main branch default", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/slsa-framework/example-package", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), + name: "valid main branch default", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/slsa-framework/example-package", }, { - name: "valid main branch default - invalid builderID", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/slsa-framework/example-package", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/not-trusted.yml"), - err: serrors.ErrorUntrustedReusableWorkflow, + name: "versioned tag no match empty tag workflow_dispatch", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/slsa-framework/example-package", + pversiontag: pString("v1"), + err: serrors.ErrorInvalidRef, }, { - name: "valid main branch set", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/slsa-framework/example-package", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), - pbranch: pString("main"), + name: "tag no match empty tag workflow_dispatch", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/slsa-framework/example-package", + ptag: pString("v1.2.3"), + err: serrors.ErrorInvalidRef, }, - { - name: "wrong branch master", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/slsa-framework/example-package", - pbranch: pString("master"), - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), - err: serrors.ErrorMismatchBranch, + name: "wrong branch master", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/slsa-framework/example-package", + pbranch: pString("master"), + err: serrors.ErrorMismatchBranch, }, { - name: "wrong source append A", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/slsa-framework/example-packageA", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), - err: serrors.ErrorMismatchSource, + name: "valid main branch set", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/slsa-framework/example-package", + pbranch: pString("main"), }, { - name: "wrong source prepend A", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "Agithub.com/slsa-framework/example-package", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), - err: serrors.ErrorMismatchSource, + name: "valid main branch default - invalid builderID", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/slsa-framework/example-package", + pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/not-trusted.yml"), + err: serrors.ErrorUntrustedReusableWorkflow, }, { - name: "wrong source middle A", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/Aslsa-framework/example-package", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), - err: serrors.ErrorMismatchSource, + name: "wrong source append A", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/slsa-framework/example-packageA", + err: serrors.ErrorMismatchSource, }, { - name: "tag no match empty tag workflow_dispatch", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/slsa-framework/example-package", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), - ptag: pString("v1.2.3"), - err: serrors.ErrorMismatchTag, + name: "wrong source prepend A", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "Agithub.com/slsa-framework/example-package", + err: serrors.ErrorMismatchSource, }, { - name: "versioned tag no match empty tag workflow_dispatch", - artifacts: []string{"workflow_dispatch.main.default"}, - source: "github.com/slsa-framework/example-package", - pBuilderID: pString("https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_docker-based_slsa3.yml"), - pversiontag: pString("v1"), - err: serrors.ErrorInvalidSemver, + name: "wrong source middle A", + artifacts: []string{"binary-linux-amd64-workflow_dispatch"}, + source: "github.com/Aslsa-framework/example-package", + err: serrors.ErrorMismatchSource, }, } for _, tt := range tests { @@ -1391,11 +1436,17 @@ func Test_runVerifyGHADockerBased(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - checkVersions := getBuildersAndVersions(t, "", nil, GHA_ARTIFACT_DOCKER_BUILDERS) + checkVersions := getBuildersAndVersions(t, "", nil, GHA_ARTIFACT_CONTAINER_BUILDERS) for _, v := range checkVersions { testPath := filepath.Clean(filepath.Join(TEST_DIR, v, tt.artifacts[0])) - provenancePath := fmt.Sprintf("%s.intoto.sigstore", testPath) + sv := filepath.Base(v) + var provenancePath string + if semver.Compare(sv, "v1.8.0") >= 0 { + provenancePath = fmt.Sprintf("%s.intoto.build.slsa", testPath) + } else { + provenancePath = fmt.Sprintf("%s.intoto.sigstore", testPath) + } artifacts := make([]string, len(tt.artifacts)) for i, artifact := range tt.artifacts { @@ -1407,11 +1458,13 @@ func Test_runVerifyGHADockerBased(t *testing.T) { // 2. With the the full builderID including the semver in long form. // 3. With only the name of the builder. // 4. With no builder ID. - sv := path.Base(v) + builder := "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_container-based_slsa3.yml" + + refName := "@refs/tags/" builderIDs := []*string{ - pString(builder + "@" + sv), - pString(builder + "@refs/tags/" + sv), + pString(builder + refName + sv), pString(builder), + pString(builder + "@" + sv), nil, } diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.sigstore b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.sigstore new file mode 100644 index 000000000..78a98dd09 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.sigstore @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"MIIHpTCCByqgAwIBAgIUBDg0kvtMA/q6LpSEuW44v3clE1cwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjMwNjA3MTQ0MjU0WhcNMjMwNjA3MTQ1MjU0WjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEM046rKBvmo/rGNlns458RH6ulV8OnHkOj6fxtG8hKtbo9zVmCSDX2jJ8u5gqsspCNuiOwt1C1zLrvMsu8dJBwaOCBkkwggZFMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUwDD8a3idbOpOtHIZ6FLXdFIiMAwwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8wgYsGA1UdEQEB/wSBgDB+hnxodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yLy5naXRodWIvd29ya2Zsb3dzL2J1aWxkZXJfY29udGFpbmVyLWJhc2VkX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuNy4wMDkGCisGAQQBg78wAQEEK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20wHwYKKwYBBAGDvzABAgQRd29ya2Zsb3dfZGlzcGF0Y2gwNgYKKwYBBAGDvzABAwQoNjJjYjFmMWU0ODU4MjliYWZlOGJiZWM4Yjk5MDBjMGNiNzYyNGZlNzBVBgorBgEEAYO/MAEEBEcuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbDAsBgorBgEEAYO/MAEFBB5zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UwHQYKKwYBBAGDvzABBgQPcmVmcy9oZWFkcy9tYWluMDsGCisGAQQBg78wAQgELQwraHR0cHM6Ly90b2tlbi5hY3Rpb25zLmdpdGh1YnVzZXJjb250ZW50LmNvbTCBjAYKKwYBBAGDvzABCQR+DHxodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yLy5naXRodWIvd29ya2Zsb3dzL2J1aWxkZXJfY29udGFpbmVyLWJhc2VkX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuNy4wMDgGCisGAQQBg78wAQoEKgwoZTU1Yjc2Y2U0MjEwODJkZmE0YjM0YTZhYzNjNWU1OWRlMGYzYmI1ODAdBgorBgEEAYO/MAELBA8MDWdpdGh1Yi1ob3N0ZWQwQQYKKwYBBAGDvzABDAQzDDFodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlMDgGCisGAQQBg78wAQ0EKgwoNjJjYjFmMWU0ODU4MjliYWZlOGJiZWM4Yjk5MDBjMGNiNzYyNGZlNzAfBgorBgEEAYO/MAEOBBEMD3JlZnMvaGVhZHMvbWFpbjAZBgorBgEEAYO/MAEPBAsMCTQ4NjMyNTgwOTAxBgorBgEEAYO/MAEQBCMMIWh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yazAYBgorBgEEAYO/MAERBAoMCDgwNDMxMTg3MIGbBgorBgEEAYO/MAESBIGMDIGJaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS8uZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbEByZWZzL2hlYWRzL21haW4wOAYKKwYBBAGDvzABEwQqDCg2MmNiMWYxZTQ4NTgyOWJhZmU4YmJlYzhiOTkwMGMwY2I3NjI0ZmU3MCEGCisGAQQBg78wARQEEwwRd29ya2Zsb3dfZGlzcGF0Y2gwZAYKKwYBBAGDvzABFQRWDFRodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2FjdGlvbnMvcnVucy81MjAxMzg0NTU3L2F0dGVtcHRzLzEwgYsGCisGAQQB1nkCBAIEfQR7AHkAdwDdPTBqxscRMmMZHhyZZzcCokpeuN48rf+HinKALynujgAAAYiWT4h3AAAEAwBIMEYCIQDViVpnCiCDvuoedJ30g+7UijdLR7NDCwhjbINYSdLjKQIhAOcYBsM3nzqXebQRV7cX1ORfiKKGHGDmc8+QHl9CJpnGMAoGCCqGSM49BAMDA2kAMGYCMQDLYHVf0IeXsMqymDyjnIaVsiAI9kx1ogKgU3znc0WFKrw9Ui29TKkDTEs7kpzuokECMQC7MhBEESH69yEtSe1cZj6oofkXx094PxucghfU/KNJuG4c+0BS7l0YO8lDvF5xlk0="},{"rawBytes":"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"},{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"23032398","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1686148975","inclusionPromise":{"signedEntryTimestamp":"MEQCIBrvo894YnON9nKMNfOF+u7aBXjF7WaGDXsQn8EVk+PaAiABAvKoJO4gkGw6IP0MBCGh40qTHb9q6V4Vx04yT6uedQ=="},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIHOAmpcssCs2ROKU042MwRxB9u+lPCj5CVTwSCyqb5jsAiEA16wFCOsRIoHsOwhdPN3bX8M9oSmWHhl1BvS8JIupo5Y=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v13.0.30 b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v13.0.30 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v13.0.30.intoto.sigstore b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v13.0.30.intoto.sigstore new file mode 100644 index 000000000..8f0d858ca --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v13.0.30.intoto.sigstore @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"},{"rawBytes":"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"},{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"23032502","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1686149083","inclusionPromise":{"signedEntryTimestamp":"MEUCIEXDuw6KoOZQfOlVAK8hMbpoV+UBvbzG2/BcMCsQSDFjAiEA3QP4Ch7KOisGNkmUfwjLpcEBY5bSkYJdGAgaI6qYSlw="},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjIiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7ImVudmVsb3BlIjp7InBheWxvYWRUeXBlIjoiYXBwbGljYXRpb24vdm5kLmluLXRvdG8ranNvbiIsInNpZ25hdHVyZXMiOlt7InB1YmxpY0tleSI6IkxTMHRMUzFDUlVkSlRpQkRSVkpVU1VaSlEwRlVSUzB0TFMwdENrMUpTVWhyYWtORFFuaHBaMEYzU1VKQlowbFZaVVpTYTFoR1dVOWxkelkzWVVkRlNVcFhRVU5EVTNKQlptSmpkME5uV1VsTGIxcEplbW93UlVGM1RYY0tUbnBGVmsxQ1RVZEJNVlZGUTJoTlRXTXliRzVqTTFKMlkyMVZkVnBIVmpKTlVqUjNTRUZaUkZaUlVVUkZlRlo2WVZka2VtUkhPWGxhVXpGd1ltNVNiQXBqYlRGc1drZHNhR1JIVlhkSWFHTk9UV3BOZDA1cVFUTk5WRkV3VGtSUmVWZG9ZMDVOYWsxM1RtcEJNMDFVVVRGT1JGRjVWMnBCUVUxR2EzZEZkMWxJQ2t0dldrbDZhakJEUVZGWlNVdHZXa2w2YWpCRVFWRmpSRkZuUVVWeWVucFNSQzlvUTJaMlpFdExlVEoyTTFKR1YzbEZhM05ZUzFrd1NWRkdiSEl4VlZJS0wwVXJkbXBSTW5scFFUUTRhMWhsWjNkNlZ6VXpPSHBRWTBORE9GZHlLMHR1T0c1aFl5dFVlRXBMY3paUU9XeE9aR0ZQUTBKcVkzZG5aMWw2VFVFMFJ3cEJNVlZrUkhkRlFpOTNVVVZCZDBsSVowUkJWRUpuVGxaSVUxVkZSRVJCUzBKblozSkNaMFZHUWxGalJFRjZRV1JDWjA1V1NGRTBSVVpuVVZWdlNYRkpDbVpKV1RFMFExZFVkRWhZUmt0TFJFaHNUekZHVURObmQwaDNXVVJXVWpCcVFrSm5kMFp2UVZVek9WQndlakZaYTBWYVlqVnhUbXB3UzBaWGFYaHBORmtLV2tRNGQyZFpjMGRCTVZWa1JWRkZRaTkzVTBKblJFSXJhRzU0YjJSSVVuZGplbTkyVERKa2NHUkhhREZaYVRWcVlqSXdkbU15ZUhwWlV6RnRZMjFHZEFwYVdHUjJZMjF6ZG1NeWVIcFpVekZ1WVZoU2IyUlhTWFJhTWxaMVdsaEthR1JIT1hsTWVUVnVZVmhTYjJSWFNYWmtNamw1WVRKYWMySXpaSHBNTWtveENtRlhlR3RhV0VwbVdUSTVkV1JIUm5CaWJWWjVURmRLYUdNeVZtdFlNMDV6WXpKRmVreHViSFJpUlVKNVdsZGFla3d6VW1oYU0wMTJaR3BGZFU1NU5IY0tUVVJyUjBOcGMwZEJVVkZDWnpjNGQwRlJSVVZMTW1nd1pFaENlazlwT0haa1J6bHlXbGMwZFZsWFRqQmhWemwxWTNrMWJtRllVbTlrVjBveFl6SldlUXBaTWpsMVpFZFdkV1JETldwaU1qQjNSV2RaUzB0M1dVSkNRVWRFZG5wQlFrRm5VVVZqU0ZaNllVUkJNa0puYjNKQ1owVkZRVmxQTDAxQlJVUkNRMmN5Q2sxdFRtbE5WMWw0V2xSUk5FNVVaM2xQVjBwb1dtMVZORmx0U214WmVtaHBUMVJyZDAxSFRYZFpNa2t6VG1wSk1GcHRWVE5OUmxWSFEybHpSMEZSVVVJS1p6YzRkMEZSVVVWU2VUVnVZVmhTYjJSWFNYWmtNamw1WVRKYWMySXpaSHBNTTFwc1kyMXNiV0ZYVm5sTVYxVjVXbE0xYUdKSGQzVmtNamw1WVRKYWN3cGlNMlJtV2tkc2VtTkhSakJaTW1kMVlsZEdjR0pwTldoaVIzZDFZeko0ZWxsVVRYVmxWekZ6VFVOM1IwTnBjMGRCVVZGQ1p6YzRkMEZSVlVWSWJrNXpDbU15UlhSYWJrcG9ZbGRXTTJJelNuSk1NbFkwV1ZjeGQySkhWWFJqUjBacVlUSkdibHBVUVdkQ1oyOXlRbWRGUlVGWlR5OU5RVVZIUWtKS2VWcFhXbm9LVEROU2FGb3pUWFprYWtWNlRHcEJkVTE2UVhkUGQxbExTM2RaUWtKQlIwUjJla0ZDUTBGUmRFUkRkRzlrU0ZKM1kzcHZka3d6VW5aaE1sWjFURzFHYWdwa1IyeDJZbTVOZFZveWJEQmhTRlpwWkZoT2JHTnRUblppYmxKc1ltNVJkVmt5T1hSTlNVZE5RbWR2Y2tKblJVVkJXVTh2VFVGRlNrSklORTFtUjJnd0NtUklRbnBQYVRoMldqSnNNR0ZJVm1sTWJVNTJZbE01ZW1KSVRtaE1WMXA1V1ZjeGJHUXlPWGxoZVRsNllraE9hRXhYWkhCa1IyZ3hXV2t4YmxwWE5Xd0tZMjFHTUdJelNYWk1iV1J3WkVkb01WbHBPVE5pTTBweVdtMTRkbVF6VFhaWmJsWndZa2RTYkdOc09XcGlNalV3V1Zkc2RWcFlTWFJaYlVaNldsZFNaZ3BqTW5oNldWUk5kV1ZYTVhOUlNFcHNXbTVOZG1SSFJtNWplVGt5VFZNME0weHFRWGRQUVZsTFMzZFpRa0pCUjBSMmVrRkNRMmRSY1VSRGFHeE9WRlpwQ2s1NldtcGFWRkY1VFZSQk5FMXRVbTFaVkZKcFRYcFNhRTV0Um1wTk1rMHhXbFJWTlZwSFZYZGFhazVwV1dwVk5FMUNNRWREYVhOSFFWRlJRbWMzT0hjS1FWRnpSVVIzZDA1YU1td3dZVWhXYVV4WGFIWmpNMUpzV2tSQ1FrSm5iM0pDWjBWRlFWbFBMMDFCUlUxQ1JFMU5UVmRvTUdSSVFucFBhVGgyV2pKc01BcGhTRlpwVEcxT2RtSlRPWHBpU0U1b1RGZGFlVmxYTVd4a01qbDVZWGs1YkdWSFJuUmpSM2hzVEZoQ2FGa3lkR2hhTWxWM1QwRlpTMHQzV1VKQ1FVZEVDblo2UVVKRVVWRnhSRU5uTWsxdFRtbE5WMWw0V2xSUk5FNVVaM2xQVjBwb1dtMVZORmx0U214WmVtaHBUMVJyZDAxSFRYZFpNa2t6VG1wSk1GcHRWVE1LVFVOSlIwTnBjMGRCVVZGQ1p6YzRkMEZSTkVWR1FYZFRZMjFXYldONU9UQlpWMlI2VEROWmVFMTVOSGRNYWsxM1RVSnJSME5wYzBkQlVWRkNaemM0ZHdwQlVUaEZRM2QzU2s1RVp6Sk5la2t4VDBSQk5VMUVSVWREYVhOSFFWRlJRbWMzT0hkQlVrRkZTWGQzYUdGSVVqQmpTRTAyVEhrNWJtRllVbTlrVjBsMUNsa3lPWFJNTTA1ell6SkZkRnB1U21oaVYxWXpZak5LY2sxQ1owZERhWE5IUVZGUlFtYzNPSGRCVWtWRlEyZDNTVTlFUVRCTmVrVjRUMFJqZDJkYU5FY0tRMmx6UjBGUlVVSm5OemgzUVZKSlJXZFpPRTFuV1hodlpFaFNkMk42YjNaTU1tUndaRWRvTVZscE5XcGlNakIyWXpKNGVsbFRNVzFqYlVaMFdsaGtkZ3BqYlhOMldsaG9hR0pZUW5OYVV6RjNXVmRPY2xsWFpHeE1lVFZ1WVZoU2IyUlhTWFprTWpsNVlUSmFjMkl6WkhwTU0xcHNZMjFzYldGWFZubE1WMVY1Q2xwVE5XaGlSM2QxWkRJNWVXRXlXbk5pTTJSbVdrZHNlbU5IUmpCWk1tZDFZbGRHY0dKcE5XaGlSM2QxWXpKNGVsbFVUWFZsVnpGelVVaEtiRnB1VFhZS1pFZEdibU41T1RKTlZFMTFUVU0wZWsxRVFUUkNaMjl5UW1kRlJVRlpUeTlOUVVWVVFrTnZUVXRFV1hsWk1rbDRXbXBHYkU1RVp6RlBSRWsxV1cxR2JRcGFWR2hwV1cxV2FrOUhTVFZQVkVGM1dYcENhbGxxWXpKTmFsSnRXbFJqZDBaQldVdExkMWxDUWtGSFJIWjZRVUpHUVZGSFJFRlNkMlJZVG05TlIxRkhDa05wYzBkQlVWRkNaemM0ZDBGU1ZVVldaM2hWWVVoU01HTklUVFpNZVRsdVlWaFNiMlJYU1hWWk1qbDBURE5PYzJNeVJYUmFia3BvWWxkV00ySXpTbklLVERKV05GbFhNWGRpUjFWMFkwZEdhbUV5Um01YVV6bG9XVE5TY0dJeU5YcE1NMG94WW01TmRrNVVTWGROVkUwMVRVUk5lazU1T1doa1NGSnNZbGhDTUFwamVUaDRUVWxIUzBKbmIzSkNaMFZGUVdSYU5VRm5VVU5DU0hkRlpXZENORUZJV1VFelZEQjNZWE5pU0VWVVNtcEhValJqYlZkak0wRnhTa3RZY21wbENsQkxNeTlvTkhCNVowTTRjRGR2TkVGQlFVZEpiR3hGZEhoblFVRkNRVTFCVW5wQ1JrRnBSVUZxWWxoWlJVdFZSRkkyZGl0S01XeHVaSEJIU1ZrclRXd0tUbTFSWVVGMGVtUkVaVkJwUTFac2FXbHBORU5KUTNoQmFrOTNNMjEzUzFWUFdFMXNUbXhOTmtGWFprUkRaa2M1WlhaWGVXRjBNbEJqY0haR1VTdFhWQXBOUVc5SFEwTnhSMU5OTkRsQ1FVMUVRVEpuUVUxSFZVTk5SM1JRZGpRck1tSlNSbU5RUVZSNlNXWnNWR3B3ZERSeFdteHlPSEpPU21oNlRrZ3ZZV0U1Q21ST2R5OVFOMXBMVVRSbk9FazJOV0kyWnpWWGJtdERkVzVSU1hoQlRtVXJVVzl4VVhsSVFYUjRWRE4zZG1veU1FVllVWGg1TVRJMFRWQkdSVkJ0TmtZS1ltNWpTMDAwUzJOdFMyNUdZekl6TVVabVJIVk1hbTl0THk4MVJIbG5QVDBLTFMwdExTMUZUa1FnUTBWU1ZFbEdTVU5CVkVVdExTMHRMUT09Iiwic2lnIjoiVFVWVlEwbFJRM0ZJTVZsWllVcGFjR0oyTVhGQk9USmhZMWd2VFZoUmJVcG1hbU40UkVKNlYwdFhXRFZrWlRaaU1rRkpaMHRQZUVjNU5HUktjbEpHY2tka2MyZHJVVlJLYUhoYWRXdGxibTFGWXprMFlYRnpNa2xRUVZaTE9GVTkifV19LCJoYXNoIjp7ImFsZ29yaXRobSI6InNoYTI1NiIsInZhbHVlIjoiMzFkMzlkMTA0ZjNlNWMyMjkyMzYwYWU5ZDFiYTJhNGI4OTM2NDNiYjE2ZjcxZTc0ZGNkNWYxYmJjZDVjNjM0NSJ9LCJwYXlsb2FkSGFzaCI6eyJhbGdvcml0aG0iOiJzaGEyNTYiLCJ2YWx1ZSI6ImYzYmYyY2Q0ZTNhNzJiMTYwZWU5NmZhYTUwYjNkMmEwYzQ2M2I0OGEwMGQzMzI4NzY4ZDVlMTc4NDdlMjRiNDQifX19fQ=="}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCqH1YYaJZpbv1qA92acX/MXQmJfjcxDBzWKWX5de6b2AIgKOxG94dJrRFrGdsgkQTJhxZukenmEc94aqs2IPAVK8U=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14 b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.2 b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.2 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.2.intoto.sigstore b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.2.intoto.sigstore new file mode 100644 index 000000000..e7acdd224 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.2.intoto.sigstore @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"},{"rawBytes":"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"},{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"23032490","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1686149074","inclusionPromise":{"signedEntryTimestamp":"MEYCIQDSrjg6rUGiCMIZ6ALWEhv4Az6DikFdykjKHjqKnHl+9AIhAI6ra86YdXLGwQOHxdBaKqjX0IPgB3ip/Ce7QG/vtBHO"},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIDRW415Zhe89wrIhqjRlFx49f1HO2zsIhZMS8mSay+1BAiEAwUH/f1CpZxJGwdTTku8y79bM2cREppqO9fsrGTx9N6c=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.intoto.sigstore b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.intoto.sigstore new file mode 100644 index 000000000..1e0454995 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.7.0/gha_container-based-binary-linux-amd64-v14.intoto.sigstore @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"},{"rawBytes":"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"},{"rawBytes":"MIIB9zCCAXygAwIBAgIUALZNAPFdxHPwjeDloDwyYChAO/4wCgYIKoZIzj0EAwMwKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0yMTEwMDcxMzU2NTlaFw0zMTEwMDUxMzU2NThaMCoxFTATBgNVBAoTDHNpZ3N0b3JlLmRldjERMA8GA1UEAxMIc2lnc3RvcmUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAT7XeFT4rb3PQGwS4IajtLk3/OlnpgangaBclYpsYBr5i+4ynB07ceb3LP0OIOZdxexX69c5iVuyJRQ+Hz05yi+UF3uBWAlHpiS5sh0+H2GHE7SXrk1EC5m1Tr19L9gg92jYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRYwB5fkUWlZql6zJChkyLQKsXF+jAfBgNVHSMEGDAWgBRYwB5fkUWlZql6zJChkyLQKsXF+jAKBggqhkjOPQQDAwNpADBmAjEAj1nHeXZp+13NWBNa+EDsDP8G1WWg1tCMWP/WHPqpaVo0jhsweNFZgSs0eE7wYI4qAjEA2WB9ot98sIkoF3vZYdd3/VtWB5b9TNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ"}]},"tlogEntries":[{"logIndex":"23032500","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1686149082","inclusionPromise":{"signedEntryTimestamp":"MEUCIBAcew23HsYYm45a2mPIWe3D0XpCDvn2utu9I9/iTxZRAiEAzf8AG3Lp8QOi6xADDy0oYdfPGjSRi+zTZ8cY6Rwkcy4="},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQDi5FBfyarF+y0ucLaH+oS/z6ZfeoH/my2QbN0VVJzC6QIhALS4/my4JgvJfzU0xnxspnec5kzeIaIz4Y8B7C5fx9Qh","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..b49fc2ce0 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"30024065","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1691126926","inclusionPromise":{"signedEntryTimestamp":"MEQCIER8VWRsrch3n4e73uvBmP8By6ISMr2U4R8bfUyYYjdKAiBWC+yJMXbiVeA8fMWmIwLn9hzY8mfTcN75/2ULU4CKUA=="},"inclusionProof":{"logIndex":"25860634","rootHash":"e54C/BV+14gjzZ5tLDPl+++CvikJxDi38qf9pbM07Vw=","treeSize":"25860635","hashes":["aCMXm1nf6iKwn1sspm4B2R2XQPBTDb96Eo0YNXlvWKs=","2htkAxv5uUnH62SjinQWEGNO1rdpUk1Pk66Ur3ZMnw4=","hoBL56InEVLUC01gmowUko9kxXLjtM+BpCooEYIRSH8=","zkMkcaz92DGYlPkfYG87KQOrZjeCThBd++C4EgE4AzE=","TiA9mXMnQv2D9PmLW4+HrgsnhvNm0RwWo2nEGz7qlK4=","4ENBAkPwIE0fRgfk7/cJ0UCi16+Mun0+v3oT1goXFP4=","s4UVWi4muWt57a8kMQJ/vfgrWqOS+8JHI0y+HqLsMXs=","WdPKsG/7yNZXY/lUooBBNtBAjB8V43stbKtAr++E4XI=","YrnwfrgpkX9pEYgc/bhY7qN7YEXpx5kVtTu1Qk0ZHms=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n25860635\ne54C/BV+14gjzZ5tLDPl+++CvikJxDi38qf9pbM07Vw=\nTimestamp: 1691126927048328765\n\n— rekor.sigstore.dev wNI9ajBEAiBPhRM65XNwea6dhUQxPA7v4wUOS38PosVnG2Bunna1RgIgWJM3YJ9U9kZZUrUYg4eo52izphpZmFQq/vA/OcrQDiU=\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCIv71mFd1XfCheK4KVw77KnEt+kg3dQSy1rpuIL/a0rAIgVRp9mIxH2Sd3bjourVhg/4f56BuR2oKMGSD/lKYSoj0=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..a3fd26d22 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"MIIHoTCCByegAwIBAgIUfNxAWYgPR4lajTspSmjDg4QvpWgwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjMwODA0MDUyODM1WhcNMjMwODA0MDUzODM1WjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEu4cXh3yIDy/FUt6IKQjTecUbIKzrGOVopu9gXBREWj4zYOJwtPE0XwbKgEcIsJQun70UvKQFnAi13ANshc9Pt6OCBkYwggZCMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQU6eHNJ1piB+FNmnan84BnxhtzkcgwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8wgYsGA1UdEQEB/wSBgDB+hnxodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yLy5naXRodWIvd29ya2Zsb3dzL2J1aWxkZXJfY29udGFpbmVyLWJhc2VkX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuOC4wMDkGCisGAQQBg78wAQEEK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20wEgYKKwYBBAGDvzABAgQEcHVzaDA2BgorBgEEAYO/MAEDBCg2Y2Y2NzFmNDdmMzc1MmY5N2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyMFUGCisGAQQBg78wAQQERy5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sMCwGCisGAQQBg78wAQUEHnNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZTAdBgorBgEEAYO/MAEGBA9yZWZzL3RhZ3MvdjE0LjIwOwYKKwYBBAGDvzABCAQtDCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMIGMBgorBgEEAYO/MAEJBH4MfGh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9jb250YWluZXItYmFzZWRfc2xzYTMueW1sQHJlZnMvdGFncy92MS44LjAwOAYKKwYBBAGDvzABCgQqDChjZGViM2E5MTY2MTBiYzAwYWY1ZGVlODNkMWFjZGQzYzcwNzk5MjNhMB0GCisGAQQBg78wAQsEDwwNZ2l0aHViLWhvc3RlZDBBBgorBgEEAYO/MAEMBDMMMWh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UwOAYKKwYBBAGDvzABDQQqDCg2Y2Y2NzFmNDdmMzc1MmY5N2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyMB8GCisGAQQBg78wAQ4EEQwPcmVmcy90YWdzL3YxNC4yMBkGCisGAQQBg78wAQ8ECwwJNDg2MzI1ODA5MDEGCisGAQQBg78wARAEIwwhaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrMBgGCisGAQQBg78wAREECgwIODA0MzExODcwgZsGCisGAQQBg78wARIEgYwMgYlodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLy5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sQHJlZnMvdGFncy92MTQuMjA4BgorBgEEAYO/MAETBCoMKDZjZjY3MWY0N2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIwFAYKKwYBBAGDvzABFAQGDARwdXNoMGQGCisGAQQBg78wARUEVgxUaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hY3Rpb25zL3J1bnMvNTc1ODc3NjMwNC9hdHRlbXB0cy8xMBYGCisGAQQBg78wARYECAwGcHVibGljMIGKBgorBgEEAdZ5AgQCBHwEegB4AHYA3T0wasbHETJjGR4cmWc3AqJKXrjePK3/h4pygC8p7o4AAAGJvwTisgAABAMARzBFAiEA+sx4CcpYZ38CYjXF/ET5tA+9fYw28ZSse4a7LvHyXSgCIB6dk1F1+VK1Hk2TpfmqxGXBqPZIQ1gTvGMah+GMviCGMAoGCCqGSM49BAMDA2gAMGUCMQDYSk06dfdfzveHq3p8v/Mfq/Xw+ijbNgqua25mZZYmvDb0I5mSVa3HMgSvQq0cXlsCMHJoTCGFxtTOWsZCHm1DLi/4qu3uazqv+aVvQR/a62CczEl/uO3rZZ7IAWSjqmSlyg=="}]},"tlogEntries":[{"logIndex":"30024054","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1691126916","inclusionPromise":{"signedEntryTimestamp":"MEUCIQDvU0EliJPTE7sFDgdt/QsjU+DhvLE0WB0rICQcoVmb8wIgRUTJHWqb557lfkILzp0h1vwT5Rs/CW6edj9rr0QhT8s="},"inclusionProof":{"logIndex":"25860623","rootHash":"8B5Ewp/Yds+8AxqsAB+LOosB4LZ58TxJpMWUvl8Wiiw=","treeSize":"25860624","hashes":["vqz9ZcjkdEIWVPW1L9a3O3aBK537d6mFDvwKNwwv9Fg=","em21YjmA5oYmfoEB2FsTUJBoxkC1+2/byxeATW+I2G4=","6OwxLM4Q/eh2XZ/dW3XAygVnkFcJC6Lq0gXAkNiw73A=","ZJlmrx4FFFICsk2ATygXK4wCmS/dAyRGRWhAnPJa5jI=","zkMkcaz92DGYlPkfYG87KQOrZjeCThBd++C4EgE4AzE=","TiA9mXMnQv2D9PmLW4+HrgsnhvNm0RwWo2nEGz7qlK4=","4ENBAkPwIE0fRgfk7/cJ0UCi16+Mun0+v3oT1goXFP4=","s4UVWi4muWt57a8kMQJ/vfgrWqOS+8JHI0y+HqLsMXs=","WdPKsG/7yNZXY/lUooBBNtBAjB8V43stbKtAr++E4XI=","YrnwfrgpkX9pEYgc/bhY7qN7YEXpx5kVtTu1Qk0ZHms=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n25860624\n8B5Ewp/Yds+8AxqsAB+LOosB4LZ58TxJpMWUvl8Wiiw=\nTimestamp: 1691126916267964478\n\n— rekor.sigstore.dev wNI9ajBFAiAvTGSScpplvQbIacZHxooa81W2VF3k0YlwDumLi5Xf/gIhAKUSuyrdYxZeOTXwrdJMXAe+2Dltf29WYP59bWDBRI+N\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQC5UmHSNONfI16P6V1GzwM5nzmiRN22EKUA9LeoScyLkQIhALfWOq9WHEicPxWkyMxZb68HNB0z68yv3T3WA/E/f9vT","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.intoto.build.slsa b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.intoto.build.slsa new file mode 100644 index 000000000..18fe684a3 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-push-v14.intoto.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"30024055","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1691126916","inclusionPromise":{"signedEntryTimestamp":"MEUCICSKkAkdU2NtSKkQHcjifKRVoCXrVvu49i/aBDFyIy2NAiEAvYn1IFNv7go9RxLdWXceeG9hIKBrMV5LOojoW11rhrI="},"inclusionProof":{"logIndex":"25860624","rootHash":"EMhP/yK52R9Ee9ZAWkRtquoNlrJWH1dOESkAoPSZUTE=","treeSize":"25860625","hashes":["hoBL56InEVLUC01gmowUko9kxXLjtM+BpCooEYIRSH8=","zkMkcaz92DGYlPkfYG87KQOrZjeCThBd++C4EgE4AzE=","TiA9mXMnQv2D9PmLW4+HrgsnhvNm0RwWo2nEGz7qlK4=","4ENBAkPwIE0fRgfk7/cJ0UCi16+Mun0+v3oT1goXFP4=","s4UVWi4muWt57a8kMQJ/vfgrWqOS+8JHI0y+HqLsMXs=","WdPKsG/7yNZXY/lUooBBNtBAjB8V43stbKtAr++E4XI=","YrnwfrgpkX9pEYgc/bhY7qN7YEXpx5kVtTu1Qk0ZHms=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n25860625\nEMhP/yK52R9Ee9ZAWkRtquoNlrJWH1dOESkAoPSZUTE=\nTimestamp: 1691126916906740671\n\n— rekor.sigstore.dev wNI9ajBFAiB9U0MlxfszORMfCwSpola4ewyR+Nfy6MZJW3gz9qqrlAIhAPfUzCb9jVjXqoGGbXXTKUQ+YxOactPtHtG+aJ9o1lSO\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIHgQP5lYPePRVI2QlYK9T70xhn/gomlO96hrAvZMFminAiAkRqJjWjxqsRXH9fwY6pmKUeaiLrN4QuiuZhfR4WMFdw==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa new file mode 100644 index 000000000..cf33aa08c --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"30024004","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1691126877","inclusionPromise":{"signedEntryTimestamp":"MEUCIAiDhqH336zS8alVLSxuTXU4iqCn66DMit3i6gBt7GCGAiEArf9xr74GfGZlmmmWPQh0MFPlBAGRj2iCmtR4ttB27NY="},"inclusionProof":{"logIndex":"25860573","rootHash":"ywMkCHLsnqLb9E5pyPfbuV0K5MNuLd2CmfJj4z8Uem8=","treeSize":"25860574","hashes":["02xm5a6EXzG7Ev+cftyHtDcjuGomh0IL8ShSfqAprD0=","fIe1Z8m0OL5lM3zxBoJd6FWxvm6UHBndtHCgt5nlxlE=","+hoAjfCtL5gxjjQTPbQLy/TCz0gLJqyX1VCsk5pIDqU=","LC9JvlE48pARHYTCTo8Fibm/P0S0UqGmr+HJznSMHvU=","t3LmtIoUNCMScPF7Dkajl075tN/ApsEAOjgx/Wfkl3Q=","GVL7+KqjpSYkJuND+KDtqN4vjAf8h5PPSk23Iu1aiV4=","XlEMSuxiWikSyRoxgJxNzj0lVriGwQ41BjMJliwgDME=","TiA9mXMnQv2D9PmLW4+HrgsnhvNm0RwWo2nEGz7qlK4=","4ENBAkPwIE0fRgfk7/cJ0UCi16+Mun0+v3oT1goXFP4=","s4UVWi4muWt57a8kMQJ/vfgrWqOS+8JHI0y+HqLsMXs=","WdPKsG/7yNZXY/lUooBBNtBAjB8V43stbKtAr++E4XI=","YrnwfrgpkX9pEYgc/bhY7qN7YEXpx5kVtTu1Qk0ZHms=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n25860574\nywMkCHLsnqLb9E5pyPfbuV0K5MNuLd2CmfJj4z8Uem8=\nTimestamp: 1691126877791524148\n\n— rekor.sigstore.dev wNI9ajBFAiAtlPGV9B+re7kAP0OPmXm5PK5nMOirosrBNpDXStoN7wIhALIIq4MZfz5bxdIGcxk81wvrpyhC2IHEoNXbiILbdN0y\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjIiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7ImVudmVsb3BlIjp7InBheWxvYWRUeXBlIjoiYXBwbGljYXRpb24vdm5kLmluLXRvdG8ranNvbiIsInNpZ25hdHVyZXMiOlt7InB1YmxpY0tleSI6IkxTMHRMUzFDUlVkSlRpQkRSVkpVU1VaSlEwRlVSUzB0TFMwdENrMUpTVWgxYWtORFFqQkRaMEYzU1VKQlowbFZVbXRFZDBaWFkyUkxXSEprY2xsRmVVeGFVWFpwZVdkVFZYa3dkME5uV1VsTGIxcEplbW93UlVGM1RYY0tUbnBGVmsxQ1RVZEJNVlZGUTJoTlRXTXliRzVqTTFKMlkyMVZkVnBIVmpKTlVqUjNTRUZaUkZaUlVVUkZlRlo2WVZka2VtUkhPWGxhVXpGd1ltNVNiQXBqYlRGc1drZHNhR1JIVlhkSWFHTk9UV3BOZDA5RVFUQk5SRlY1VG5wVk0xZG9ZMDVOYWsxM1QwUkJNRTFFVlhwT2VsVXpWMnBCUVUxR2EzZEZkMWxJQ2t0dldrbDZhakJEUVZGWlNVdHZXa2w2YWpCRVFWRmpSRkZuUVVVclpWQlBZMjVJZVVkNE1Yb3dVM1ZZZFhwT2MwMDFhVkp0VEc5QlVERTBORkF2YlVFS05VZ3ZaR1JTVVUxNE1pdDFVVnBJTVdsdlRFTkJOSEZNYTJ4cGFEUXpWbGhyUWpKTlJUaDFNWFJUU2k4MWRFVktkbkZQUTBKc09IZG5aMXBpVFVFMFJ3cEJNVlZrUkhkRlFpOTNVVVZCZDBsSVowUkJWRUpuVGxaSVUxVkZSRVJCUzBKblozSkNaMFZHUWxGalJFRjZRV1JDWjA1V1NGRTBSVVpuVVZWSFNYcEJDbUU0VlVGQlUwSnpVMlp3UW5CVGJFTmFXREJXVEV0SmQwaDNXVVJXVWpCcVFrSm5kMFp2UVZVek9WQndlakZaYTBWYVlqVnhUbXB3UzBaWGFYaHBORmtLV2tRNGQyZFpjMGRCTVZWa1JWRkZRaTkzVTBKblJFSXJhRzU0YjJSSVVuZGplbTkyVERKa2NHUkhhREZaYVRWcVlqSXdkbU15ZUhwWlV6RnRZMjFHZEFwYVdHUjJZMjF6ZG1NeWVIcFpVekZ1WVZoU2IyUlhTWFJhTWxaMVdsaEthR1JIT1hsTWVUVnVZVmhTYjJSWFNYWmtNamw1WVRKYWMySXpaSHBNTWtveENtRlhlR3RhV0VwbVdUSTVkV1JIUm5CaWJWWjVURmRLYUdNeVZtdFlNMDV6WXpKRmVreHViSFJpUlVKNVdsZGFla3d6VW1oYU0wMTJaR3BGZFU5RE5IY0tUVVJyUjBOcGMwZEJVVkZDWnpjNGQwRlJSVVZMTW1nd1pFaENlazlwT0haa1J6bHlXbGMwZFZsWFRqQmhWemwxWTNrMWJtRllVbTlrVjBveFl6SldlUXBaTWpsMVpFZFdkV1JETldwaU1qQjNTSGRaUzB0M1dVSkNRVWRFZG5wQlFrRm5VVkprTWpsNVlUSmFjMkl6WkdaYVIyeDZZMGRHTUZreVozZE9aMWxMQ2t0M1dVSkNRVWRFZG5wQlFrRjNVVzlPYlU1dFRtcGplRnBxVVROYWFrMHpUbFJLYlU5VVpHbFBWMWt4V1cxYWJVNVVSWGhhVkUweldXcHJlazlIV213S1RWUkNhMDFxUWxaQ1oyOXlRbWRGUlVGWlR5OU5RVVZGUWtWamRWb3liREJoU0ZacFRETmtkbU50ZEcxaVJ6a3pZM2s1TWxwWVNuQmFiV3hzWTJreGJBcE5iVlYxV1ZkNGMweHVaSFpqYlhSdFlrYzVNMWd5VW5Cak0wSm9aRWRPYjB4dE1XaGhWelIxV1ZkNGMweHVUbk5qTWtWNlRHNXNkR0pFUVhOQ1oyOXlDa0puUlVWQldVOHZUVUZGUmtKQ05YcGlTRTVvVEZkYWVWbFhNV3hrTWpsNVlYazViR1ZIUm5SalIzaHNURmhDYUZreWRHaGFNbFYzU0ZGWlMwdDNXVUlLUWtGSFJIWjZRVUpDWjFGUVkyMVdiV041T1c5YVYwWnJZM2s1ZEZsWGJIVk5SSE5IUTJselIwRlJVVUpuTnpoM1FWRm5SVXhSZDNKaFNGSXdZMGhOTmdwTWVUa3dZakowYkdKcE5XaFpNMUp3WWpJMWVreHRaSEJrUjJneFdXNVdlbHBZU21waU1qVXdXbGMxTUV4dFRuWmlWRU5DYWtGWlMwdDNXVUpDUVVkRUNuWjZRVUpEVVZJclJFaDRiMlJJVW5kamVtOTJUREprY0dSSGFERlphVFZxWWpJd2RtTXllSHBaVXpGdFkyMUdkRnBZWkhaamJYTjJZeko0ZWxsVE1XNEtZVmhTYjJSWFNYUmFNbFoxV2xoS2FHUkhPWGxNZVRWdVlWaFNiMlJYU1haa01qbDVZVEphYzJJelpIcE1Na294WVZkNGExcFlTbVpaTWpsMVpFZEdjQXBpYlZaNVRGZEthR015Vm10WU0wNXpZekpGZWt4dWJIUmlSVUo1V2xkYWVrd3pVbWhhTTAxMlpHcEZkVTlETkhkTlJHZEhRMmx6UjBGUlVVSm5OemgzQ2tGUmIwVkxaM2R2V1RKU2JGbHFUbWhQVkVVeVRtcEZkMWx0VFhkTlIwWnRUbGRTYkZwVVozcGFSRVpvV1RKU2EwMHlUVE5OUkdNMVQxUkplbGxVUVdRS1FtZHZja0puUlVWQldVOHZUVUZGVEVKQk9FMUVWMlJ3WkVkb01WbHBNVzlpTTA0d1dsZFJkMUZSV1V0TGQxbENRa0ZIUkhaNlFVSkVRVkY2UkVSR2J3cGtTRkozWTNwdmRrd3laSEJrUjJneFdXazFhbUl5TUhaak1uaDZXVk14YldOdFJuUmFXR1IyWTIxemRscFlhR2hpV0VKeldsTXhkMWxYVG5KWlYyUnNDazFFWjBkRGFYTkhRVkZSUW1jM09IZEJVVEJGUzJkM2IwNXRUbTFPYW1ONFdtcFJNMXBxVFROT1ZFcHRUMVJrYVU5WFdURlpiVnB0VGxSRmVGcFVUVE1LV1dwcmVrOUhXbXhOVkVKclRXcEJaa0puYjNKQ1owVkZRVmxQTDAxQlJVOUNRa1ZOUkROS2JGcHVUWFpoUjFab1draE5kbUpYUm5CaWFrRmFRbWR2Y2dwQ1owVkZRVmxQTDAxQlJWQkNRWE5OUTFSUk5FNXFUWGxPVkdkM1QxUkJlRUpuYjNKQ1owVkZRVmxQTDAxQlJWRkNRMDFOU1Zkb01HUklRbnBQYVRoMkNsb3liREJoU0ZacFRHMU9kbUpUT1hwaVNFNW9URmRhZVZsWE1XeGtNamw1WVhwQldVSm5iM0pDWjBWRlFWbFBMMDFCUlZKQ1FXOU5RMFJuZDA1RVRYZ0tUVlJuTTAxSlIySkNaMjl5UW1kRlJVRlpUeTlOUVVWVFFrbEhUVVJKUjBwaFNGSXdZMGhOTmt4NU9XNWhXRkp2WkZkSmRWa3lPWFJNTTA1ell6SkZkQXBhYmtwb1lsZFdNMkl6U25KTU1sWTBXVmN4ZDJKSFZYUmpSMFpxWVRKR2JscFRPSFZhTW13d1lVaFdhVXd6WkhaamJYUnRZa2M1TTJONU9USmFXRXB3Q2xwdGJHeGphVEZzVFcxVmRWbFhlSE5NYm1SMlkyMTBiV0pIT1ROWU1sSndZek5DYUdSSFRtOU1iVEZvWVZjMGRWbFhlSE5NYms1ell6SkZla3h1YkhRS1lrVkNlVnBYV25wTU1taHNXVmRTZWt3eU1XaGhWelIzVDBGWlMwdDNXVUpDUVVkRWRucEJRa1YzVVhGRVEyY3lXVEpaTWs1NlJtMU9SR1J0VFhwak1RcE5iVmsxVGpKSk5WcHFWbWxhYlZreFRWUkdiRTE2WkdsUFZFMDBXbTFWZUUxSFVYbE5RMFZIUTJselIwRlJVVUpuTnpoM1FWSlJSVVYzZDFKa01qbDVDbUV5V25OaU0yUm1Xa2RzZW1OSFJqQlpNbWQzV2tGWlMwdDNXVUpDUVVkRWRucEJRa1pSVWxkRVJsSnZaRWhTZDJONmIzWk1NbVJ3WkVkb01WbHBOV29LWWpJd2RtTXllSHBaVXpGdFkyMUdkRnBZWkhaamJYTjJXbGhvYUdKWVFuTmFVekYzV1ZkT2NsbFhaR3hNTWtacVpFZHNkbUp1VFhaamJsWjFZM2s0TVFwT2VsVTBUbnBqZVU1NlRUVk1Na1l3WkVkV2RHTklVbnBNZWtWM1JtZFpTMHQzV1VKQ1FVZEVkbnBCUWtablVVbEVRVnAzWkZkS2MyRlhUWGRuV1d0SENrTnBjMGRCVVZGQ01XNXJRMEpCU1VWbGQxSTFRVWhqUVdSUlJHUlFWRUp4ZUhOalVrMXRUVnBJYUhsYVducGpRMjlyY0dWMVRqUTRjbVlyU0dsdVMwRUtUSGx1ZFdwblFVRkJXVzB2UWtWNFRVRkJRVVZCZDBKSFRVVlJRMGxHVm0xdFNVSXdOSEE0ZEd4aFYwTjVSems0TVVaQk1EVllXRXAwTVc4clprZGhXZ3BDV1VsVWIyZEpNRUZwUVVJeFVqQkVjRWh3VkZCRmJIRldla2RPZDB0UE9EbGpVRXBLYWxCWlVEZFdWV1JPZG5adWVrbFVOVVJCUzBKblozRm9hMnBQQ2xCUlVVUkJkMDV2UVVSQ2JFRnFSVUU0TVVFelRuUk5jVmRVVEVscFVtbzJjRU5aUlhKRE9FUkhjMUZVTTJoS2NtZEljVTlWYnpCNE0wcHliM0JQVkRRS1VGbEpVRWRzV1VKNU5sZEZlWEZ2ZUVGcVFYSkZRVVZIZWxwQ1JVRmlhVlpTY0hFMmRFaFJOaXRRZVVWMllqZEhXVWhZTjBocGMzRnFRako2Y1V0MWVBcEtWRzVyV2pVME5VTnJlazg1WkZKdmVqWlpQUW90TFMwdExVVk9SQ0JEUlZKVVNVWkpRMEZVUlMwdExTMHQiLCJzaWciOiJUVVZSUTBsSGFIRXhOemx0VkRnek4zaGFPVGM0WkdrMFMwVTNWRlZMZDAwdlNsUjVWR3h6ZFVNeWVVeHJSbEZIUVdsQ0syVjFiVUZOWkRKUU0zWmFSVmh1YUN0VVRXSkVObVpwYzJONVZtcDRhM0pXTkU1NEsyTnVSV0Z0UVQwOSJ9XX0sImhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiJjMGZiM2FiMTEyMmFiYTVlYWFmNTRlMDJkMDY0YTcwYzI1ODdkNjAxMDcxYjZiMTRiNWY4MjJhMzA4ZDEwZTlmIn0sInBheWxvYWRIYXNoIjp7ImFsZ29yaXRobSI6InNoYTI1NiIsInZhbHVlIjoiOWUwMmNkMjM0ODM2ZTEwZTg5MjY2YjIzY2FlNjhiY2UzYzY2ZDA1N2JiYzE3MjgyZjdlMDNmYmZmOWMzOGFhNiJ9fX19"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIGhq179mT837xZ978di4KE7TUKwM/JTyTlsuC2yLkFQGAiB+eumAMd2P3vZEXnh+TMbD6fiscyVjxkrV4Nx+cnEamA==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.build.slsa b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.build.slsa new file mode 100644 index 000000000..d870a7862 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414281","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768143","inclusionPromise":{"signedEntryTimestamp":"MEUCIQDvP42nJuexeHM+bJ4H2L+/AWgUAW4McKfoVqS0bKYtuAIgK93SnHbBglJXzwe5VOS1u0Eg24i9CAs7nMYaHpCHVDk="},"inclusionProof":{"logIndex":"28250850","rootHash":"7NWivOhnTFdPsmyPy/YXBmCn5hpE8DnIMva0SHjnK0k=","treeSize":"28250852","hashes":["QoLRvXnMJJGeKJAl6n3KvI0Yjoiqh5RFpzjOUmkNoUs=","hN5z1TsvZCuQyTJ/mWj75k4mCkt7Jc/IQXkNKvwMtAg=","GxLvxJGpPvkb7jkL9nRXBewhgvA443iuHYOiNeOXNOQ=","a3W+9yE4tPV4SfKu99wFs/HRY3I9UqwGIJllY0L3tYM=","wBuev4o2sG2iCwINLOR8jAFdNhK6dA8kqvxts6lcqq8=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250852\n7NWivOhnTFdPsmyPy/YXBmCn5hpE8DnIMva0SHjnK0k=\nTimestamp: 1692768143949084621\n\n— rekor.sigstore.dev wNI9ajBFAiBeanVXkv281kIr7UkiFaRF41nOmOxSrEUbC48ojHSuuQIhAJPUVQjL0FFJS3Nmd1J/97oJ8gjO+QeGiYMKXcgpDuKc\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCWqOCJJAmNF9n1bgYnUX6oJpJGtOBOO5QxfsReOSF2qAIgVedC2Q6YmyWdQCeqC9n4Ftj+9ZVC8tnWHUpyvr5px9w=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.2.intoto.build.slsa b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.2.intoto.build.slsa new file mode 100644 index 000000000..adb47e354 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.2.intoto.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414279","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768143","inclusionPromise":{"signedEntryTimestamp":"MEUCIHaGZe281S8gd+blNdbmFBfNRlfwNQYsr9zKb0dq9KAaAiEAoG2o9yIN/u+b03XI5JLZDr8EmKlv85+gkYvaOvIV8tY="},"inclusionProof":{"logIndex":"28250848","rootHash":"LNpq0EOQFSI8kh2blYZqvy5A35kAzQabT16iaHsUMZI=","treeSize":"28250850","hashes":["cyrbMRjh6QJpwaaaGcGRKl2LRmLmjiU3FhVGsCua+zU=","GxLvxJGpPvkb7jkL9nRXBewhgvA443iuHYOiNeOXNOQ=","a3W+9yE4tPV4SfKu99wFs/HRY3I9UqwGIJllY0L3tYM=","wBuev4o2sG2iCwINLOR8jAFdNhK6dA8kqvxts6lcqq8=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250850\nLNpq0EOQFSI8kh2blYZqvy5A35kAzQabT16iaHsUMZI=\nTimestamp: 1692768143749403456\n\n— rekor.sigstore.dev wNI9ajBGAiEAwcziDMd4dX2ahgd02iL+LuFG0gNdoS0V7x+oHC7+I7QCIQDhgsP71V2Auy1vsJZcWnmfDgdBfWbURiFeWgsngswn2A==\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfY29udGFpbmVyLWJhc2VkLWJpbmFyeS1saW51eC1hbWQ2NC12MTQuMiIsImRpZ2VzdCI6eyJzaGEyNTYiOiJlM2IwYzQ0Mjk4ZmMxYzE0OWFmYmY0Yzg5OTZmYjkyNDI3YWU0MWU0NjQ5YjkzNGNhNDk1OTkxYjc4NTJiODU1In19XSwicHJlZGljYXRlVHlwZSI6Imh0dHBzOi8vc2xzYS5kZXYvcHJvdmVuYW5jZS92MSIsInByZWRpY2F0ZSI6eyJidWlsZERlZmluaXRpb24iOnsiYnVpbGRUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9jb250YWluZXItYmFzZWQtYnVpbGQvdjAuMT9kcmFmdCIsImV4dGVybmFsUGFyYW1ldGVycyI6eyJzb3VyY2UiOnsidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2VAcmVmcy90YWdzL3YxNC4yIiwiZGlnZXN0Ijp7InNoYTEiOiIyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIn19LCJidWlsZGVySW1hZ2UiOnsidXJpIjoiYmFzaEBzaGEyNTY6OWUyYmE1MjQ4N2Q5NDU1MDRkMjUwZGUxODZjYjRmZTJlM2JhMDIzZWQyOTIxZGQ2YWM4Yjk3ZWQ0M2U3NmFmOSIsImRpZ2VzdCI6eyJzaGEyNTYiOiI5ZTJiYTUyNDg3ZDk0NTUwNGQyNTBkZTE4NmNiNGZlMmUzYmEwMjNlZDI5MjFkZDZhYzhiOTdlZDQzZTc2YWY5In19LCJjb25maWdQYXRoIjoiLmdpdGh1Yi9jb25maWdzLWRvY2tlci9jb25maWctdGFnLXYxNC4yLnRvbWwiLCJidWlsZENvbmZpZyI6eyJBcnRpZmFjdFBhdGgiOiJnaGFfY29udGFpbmVyLWJhc2VkLWJpbmFyeS1saW51eC1hbWQ2NC12MTQuMiIsIkNvbW1hbmQiOlsidG91Y2giLCJnaGFfY29udGFpbmVyLWJhc2VkLWJpbmFyeS1saW51eC1hbWQ2NC12MTQuMiJdfX0sInJlc29sdmVkRGVwZW5kZW5jaWVzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZUByZWZzL3RhZ3MvdjE0LjIiLCJkaWdlc3QiOnsic2hhMSI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMifX0seyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvckByZWZzL3RhZ3MvdjEuOS4wIiwiZGlnZXN0Ijp7InNoYTI1NiI6IjQyYWVkMmI4YTYyMWVmM2EwOGU4NTM3N2UzNTU3NjM3NWY5MTkxOWYyZDVlZjIxMTJjOGI1OGMxZTYxYWViMDMifX1dLCJpbnRlcm5hbFBhcmFtZXRlcnMiOnsiR0lUSFVCX0FDVE9SX0lEIjoiNDkyODkiLCJHSVRIVUJfRVZFTlRfTkFNRSI6InB1c2giLCJHSVRIVUJfUkVGIjoicmVmcy90YWdzL3YxNC4yIiwiR0lUSFVCX1JFRl9UWVBFIjoidGFnIiwiR0lUSFVCX1JFUE9TSVRPUlkiOiJzbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJHSVRIVUJfUkVQT1NJVE9SWV9JRCI6IjQ4NjMyNTgwOSIsIkdJVEhVQl9SRVBPU0lUT1JZX09XTkVSX0lEIjoiODA0MzExODciLCJHSVRIVUJfUlVOX0FUVEVNUFQiOiIxIiwiR0lUSFVCX1JVTl9JRCI6NTk0NzM0NTU4MywiR0lUSFVCX1JVTl9OVU1CRVIiOjg2LCJHSVRIVUJfU0hBIjoiMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMyIsIkdJVEhVQl9UUklHR0VSSU5HX0FDVE9SX0lEIjoiNDkyODkiLCJHSVRIVUJfV09SS0ZMT1ciOiIuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbCIsIkdJVEhVQl9XT1JLRkxPV19SRUYiOiJzbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvLmdpdGh1Yi93b3JrZmxvd3MvdmVyaWZpZXItZTJlLmFsbC53b3JrZmxvd19kaXNwYXRjaC5tYWluLmFsbC5zbHNhMy55bWxAcmVmcy90YWdzL3YxNC4yIiwiR0lUSFVCX1dPUktGTE9XX1NIQSI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMiLCJHSVRIVUJfQkFTRV9SRUYiOiIiLCJHSVRIVUJfRVZFTlRfUEFZTE9BRCI6eyJhZnRlciI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMiLCJiYXNlX3JlZiI6InJlZnMvaGVhZHMvbWFpbiIsImJlZm9yZSI6IjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjb21taXRzIjpbXSwiY29tcGFyZSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tcGFyZS92MTQuMiIsImNyZWF0ZWQiOnRydWUsImRlbGV0ZWQiOmZhbHNlLCJmb3JjZWQiOmZhbHNlLCJoZWFkX2NvbW1pdCI6eyJhdXRob3IiOnsiZW1haWwiOiI2NDUwNTA5OStsYXVyZW50c2ltb25AdXNlcnMubm9yZXBseS5naXRodWIuY29tIiwibmFtZSI6ImxhdXJlbnRzaW1vbiIsInVzZXJuYW1lIjoibGF1cmVudHNpbW9uIn0sImNvbW1pdHRlciI6eyJlbWFpbCI6Im5vcmVwbHlAZ2l0aHViLmNvbSIsIm5hbWUiOiJHaXRIdWIiLCJ1c2VybmFtZSI6IndlYi1mbG93In0sImRpc3RpbmN0Ijp0cnVlLCJpZCI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMiLCJtZXNzYWdlIjoiVXBkYXRlIHZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sXG5cblNpZ25lZC1vZmYtYnk6IGxhdXJlbnRzaW1vbiA8NjQ1MDUwOTkrbGF1cmVudHNpbW9uQHVzZXJzLm5vcmVwbHkuZ2l0aHViLmNvbT4iLCJ0aW1lc3RhbXAiOiIyMDIzLTA4LTIyVDIyOjEyOjAwLTA3OjAwIiwidHJlZV9pZCI6ImRiODI1YmNmNDNiZmRhMDBiMzhmNzVhZjcyNGQ4NmJlMTJlZTQwOTkiLCJ1cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1pdC8yYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIn0sIm9yZ2FuaXphdGlvbiI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzgwNDMxMTg3P3Y9NCIsImRlc2NyaXB0aW9uIjoiU3VwcGx5LWNoYWluIExldmVscyBmb3IgU29mdHdhcmUgQXJ0aWZhY3RzIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9ldmVudHMiLCJob29rc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvaG9va3MiLCJpZCI6ODA0MzExODcsImlzc3Vlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvaXNzdWVzIiwibG9naW4iOiJzbHNhLWZyYW1ld29yayIsIm1lbWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL21lbWJlcnN7L21lbWJlcn0iLCJub2RlX2lkIjoiTURFeU9rOXlaMkZ1YVhwaGRHbHZiamd3TkRNeE1UZzMiLCJwdWJsaWNfbWVtYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvcHVibGljX21lbWJlcnN7L21lbWJlcn0iLCJyZXBvc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvcmVwb3MiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsifSwicHVzaGVyIjp7ImVtYWlsIjoiaWFubGV3aXNAZ29vZ2xlLmNvbSIsIm5hbWUiOiJpYW5sZXdpcyJ9LCJyZWYiOiJyZWZzL3RhZ3MvdjE0LjIiLCJyZXBvc2l0b3J5Ijp7ImFsbG93X2ZvcmtpbmciOnRydWUsImFyY2hpdmVfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsImFyY2hpdmVkIjpmYWxzZSwiYXNzaWduZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2Fzc2lnbmVlc3svdXNlcn0iLCJibG9ic191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvYmxvYnN7L3NoYX0iLCJicmFuY2hlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9icmFuY2hlc3svYnJhbmNofSIsImNsb25lX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0IiwiY29sbGFib3JhdG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb2xsYWJvcmF0b3Jzey9jb2xsYWJvcmF0b3J9IiwiY29tbWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tbWVudHN7L251bWJlcn0iLCJjb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1pdHN7L3NoYX0iLCJjb21wYXJlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbXBhcmUve2Jhc2V9Li4ue2hlYWR9IiwiY29udGVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29udGVudHMveytwYXRofSIsImNvbnRyaWJ1dG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb250cmlidXRvcnMiLCJjcmVhdGVkX2F0IjoxNjUxMDg3ODQzLCJkZWZhdWx0X2JyYW5jaCI6Im1haW4iLCJkZXBsb3ltZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9kZXBsb3ltZW50cyIsImRlc2NyaXB0aW9uIjpudWxsLCJkaXNhYmxlZCI6ZmFsc2UsImRvd25sb2Fkc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9kb3dubG9hZHMiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZXZlbnRzIiwiZm9yayI6ZmFsc2UsImZvcmtzIjoyMCwiZm9ya3NfY291bnQiOjIwLCJmb3Jrc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9mb3JrcyIsImZ1bGxfbmFtZSI6InNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsImdpdF9jb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9jb21taXRzey9zaGF9IiwiZ2l0X3JlZnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3JlZnN7L3NoYX0iLCJnaXRfdGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvdGFnc3svc2hhfSIsImdpdF91cmwiOiJnaXQ6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJoYXNfZGlzY3Vzc2lvbnMiOmZhbHNlLCJoYXNfZG93bmxvYWRzIjp0cnVlLCJoYXNfaXNzdWVzIjp0cnVlLCJoYXNfcGFnZXMiOmZhbHNlLCJoYXNfcHJvamVjdHMiOnRydWUsImhhc193aWtpIjp0cnVlLCJob21lcGFnZSI6bnVsbCwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaG9va3MiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJpZCI6NDg2MzI1ODA5LCJpc190ZW1wbGF0ZSI6ZmFsc2UsImlzc3VlX2NvbW1lbnRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaXNzdWVzL2NvbW1lbnRzey9udW1iZXJ9IiwiaXNzdWVfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlcy9ldmVudHN7L251bWJlcn0iLCJpc3N1ZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaXNzdWVzey9udW1iZXJ9Iiwia2V5c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9rZXlzey9rZXlfaWR9IiwibGFiZWxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2xhYmVsc3svbmFtZX0iLCJsYW5ndWFnZSI6IlR5cGVTY3JpcHQiLCJsYW5ndWFnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbGFuZ3VhZ2VzIiwibGljZW5zZSI6eyJrZXkiOiJhcGFjaGUtMi4wIiwibmFtZSI6IkFwYWNoZSBMaWNlbnNlIDIuMCIsIm5vZGVfaWQiOiJNRGM2VEdsalpXNXpaVEk9Iiwic3BkeF9pZCI6IkFwYWNoZS0yLjAiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL2xpY2Vuc2VzL2FwYWNoZS0yLjAifSwibWFzdGVyX2JyYW5jaCI6Im1haW4iLCJtZXJnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbWVyZ2VzIiwibWlsZXN0b25lc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9taWxlc3RvbmVzey9udW1iZXJ9IiwibWlycm9yX3VybCI6bnVsbCwibmFtZSI6ImV4YW1wbGUtcGFja2FnZSIsIm5vZGVfaWQiOiJSX2tnRE9IUHktTVEiLCJub3RpZmljYXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL25vdGlmaWNhdGlvbnN7P3NpbmNlLGFsbCxwYXJ0aWNpcGF0aW5nfSIsIm9wZW5faXNzdWVzIjo0Nywib3Blbl9pc3N1ZXNfY291bnQiOjQ3LCJvcmdhbml6YXRpb24iOiJzbHNhLWZyYW1ld29yayIsIm93bmVyIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvODA0MzExODc/dj00IiwiZW1haWwiOm51bGwsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrIiwiaWQiOjgwNDMxMTg3LCJsb2dpbiI6InNsc2EtZnJhbWV3b3JrIiwibmFtZSI6InNsc2EtZnJhbWV3b3JrIiwibm9kZV9pZCI6Ik1ERXlPazl5WjJGdWFYcGhkR2x2Ympnd05ETXhNVGczIiwib3JnYW5pemF0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL29yZ3MiLCJyZWNlaXZlZF9ldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9yZWNlaXZlZF9ldmVudHMiLCJyZXBvc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3JlcG9zIiwic2l0ZV9hZG1pbiI6ZmFsc2UsInN0YXJyZWRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9zdGFycmVkey9vd25lcn17L3JlcG99Iiwic3Vic2NyaXB0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3N1YnNjcmlwdGlvbnMiLCJ0eXBlIjoiT3JnYW5pemF0aW9uIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yayJ9LCJwcml2YXRlIjpmYWxzZSwicHVsbHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvcHVsbHN7L251bWJlcn0iLCJwdXNoZWRfYXQiOjE2OTI3Njc5ODIsInJlbGVhc2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3JlbGVhc2Vzey9pZH0iLCJzaXplIjo2ODI5LCJzc2hfdXJsIjoiZ2l0QGdpdGh1Yi5jb206c2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsInN0YXJnYXplcnMiOjEyLCJzdGFyZ2F6ZXJzX2NvdW50IjoxMiwic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdGFyZ2F6ZXJzIiwic3RhdHVzZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhdHVzZXMve3NoYX0iLCJzdWJzY3JpYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpcHRpb24iLCJzdm5fdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsInRhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RlYW1zIiwidG9waWNzIjpbXSwidHJlZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RyZWVzey9zaGF9IiwidXBkYXRlZF9hdCI6IjIwMjMtMDgtMTRUMDg6MzA6MTNaIiwidXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsInZpc2liaWxpdHkiOiJwdWJsaWMiLCJ3YXRjaGVycyI6MTIsIndhdGNoZXJzX2NvdW50IjoxMiwid2ViX2NvbW1pdF9zaWdub2ZmX3JlcXVpcmVkIjp0cnVlfSwic2VuZGVyIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvNDkyODk/dj00IiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvZXZlbnRzey9wcml2YWN5fSIsImZvbGxvd2Vyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLCJnaXN0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2dpc3Rzey9naXN0X2lkfSIsImdyYXZhdGFyX2lkIjoiIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vaWFubGV3aXMiLCJpZCI6NDkyODksImxvZ2luIjoiaWFubGV3aXMiLCJub2RlX2lkIjoiTURRNlZYTmxjalE1TWpnNSIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9zdWJzY3JpcHRpb25zIiwidHlwZSI6IlVzZXIiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzIn19fX0sInJ1bkRldGFpbHMiOnsiYnVpbGRlciI6eyJpZCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9jb250YWluZXItYmFzZWRfc2xzYTMueW1sQHJlZnMvdGFncy92MS45LjAifSwibWV0YWRhdGEiOnsiaW52b2NhdGlvbklkIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hY3Rpb25zL3J1bnMvNTk0NzM0NTU4My9hdHRlbXB0cy8xIn19fX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCwHQVi7ngXWnFnWMmH0DUVX+o2dLu1mqI28HwERCUznwIgUZltX4Znnm4ImZXdtDpDiayIHAHSVNUf8c6MsZdPRfQ=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.intoto.build.slsa b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.intoto.build.slsa new file mode 100644 index 000000000..63bfbddcb --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-push-v14.intoto.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414278","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768143","inclusionPromise":{"signedEntryTimestamp":"MEUCIHj9z6aG+I+JhZlW2QRB4jMdchn1qePIdkH2HMVhjP90AiEA5/Qx12FvLDNbMeyyExwslnlxoKMBv17N5P2i9A0b4p0="},"inclusionProof":{"logIndex":"28250847","rootHash":"TqO8651MpsNpkulryfRko8sDDaK77L4kKM+fgdYZwCU=","treeSize":"28250848","hashes":["uKEvAKNAMpYyqZoh27SlKFRvVreSC5mRYTcLAoGuOG8=","5+uB3Un+5MFTh8TgLYw9fjyM2+voGUnYJ8o36zDXoBM=","e+SMlRNiAKPh5tzTKegqpAU3enuq2tuOBwyjSl3juNY=","egJMkyo2RoVULJGgTESWT2rPQkpcIlo8RIFeHNKCJ5Q=","CGOyEWjga3lE9WMNxiBd4YkrnnjV48tQ7jZv7O35N1w=","a3W+9yE4tPV4SfKu99wFs/HRY3I9UqwGIJllY0L3tYM=","wBuev4o2sG2iCwINLOR8jAFdNhK6dA8kqvxts6lcqq8=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250848\nTqO8651MpsNpkulryfRko8sDDaK77L4kKM+fgdYZwCU=\nTimestamp: 1692768143439780572\n\n— rekor.sigstore.dev wNI9ajBFAiEA/0pqlYCMmrLwtZIa7vlrCvUjaSLzcHOytL56YfFyUFcCIAEhjNukA/ImJ7EZE5bfOHafWFOdxlmtxxA+LEpFxBNt\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjIiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7ImVudmVsb3BlIjp7InBheWxvYWRUeXBlIjoiYXBwbGljYXRpb24vdm5kLmluLXRvdG8ranNvbiIsInNpZ25hdHVyZXMiOlt7InB1YmxpY0tleSI6IkxTMHRMUzFDUlVkSlRpQkRSVkpVU1VaSlEwRlVSUzB0TFMwdENrMUpTVWh1UkVORFFubExaMEYzU1VKQlowbFZaVXQzVlRCaU9XOUhTbTFwUkZoS01XSkRjWGQ2TjBkQldpdDNkME5uV1VsTGIxcEplbW93UlVGM1RYY0tUbnBGVmsxQ1RVZEJNVlZGUTJoTlRXTXliRzVqTTFKMlkyMVZkVnBIVmpKTlVqUjNTRUZaUkZaUlVVUkZlRlo2WVZka2VtUkhPWGxhVXpGd1ltNVNiQXBqYlRGc1drZHNhR1JIVlhkSWFHTk9UV3BOZDA5RVNYcE5SRlY1VFdwSmVsZG9ZMDVOYWsxM1QwUkplazFFVlhwTmFrbDZWMnBCUVUxR2EzZEZkMWxJQ2t0dldrbDZhakJEUVZGWlNVdHZXa2w2YWpCRVFWRmpSRkZuUVVWdmRFOXdaREJ2VmxGS055dHlTR0ZEZDIxaVoxaEROVnBqZW1WVWRFcHJVM0ZtV0c4S1JqUjBlamhIYTA5S2FtaE9NR2d3VlRGd2IyRkROWGRtVEdFMGJXNTBWM2h6VHpGRlppOHhNbU5uYWxWblMxRnZTSEZQUTBKclJYZG5aMWs1VFVFMFJ3cEJNVlZrUkhkRlFpOTNVVVZCZDBsSVowUkJWRUpuVGxaSVUxVkZSRVJCUzBKblozSkNaMFZHUWxGalJFRjZRV1JDWjA1V1NGRTBSVVpuVVZWSlYwUk1Dak5LYjJocVVHcDZjVEZvWTJGb2VIQTFLMWRCYTNwbmQwaDNXVVJXVWpCcVFrSm5kMFp2UVZVek9WQndlakZaYTBWYVlqVnhUbXB3UzBaWGFYaHBORmtLV2tRNGQyZFpjMGRCTVZWa1JWRkZRaTkzVTBKblJFSXJhRzU0YjJSSVVuZGplbTkyVERKa2NHUkhhREZaYVRWcVlqSXdkbU15ZUhwWlV6RnRZMjFHZEFwYVdHUjJZMjF6ZG1NeWVIcFpVekZ1WVZoU2IyUlhTWFJhTWxaMVdsaEthR1JIT1hsTWVUVnVZVmhTYjJSWFNYWmtNamw1WVRKYWMySXpaSHBNTWtveENtRlhlR3RhV0VwbVdUSTVkV1JIUm5CaWJWWjVURmRLYUdNeVZtdFlNMDV6WXpKRmVreHViSFJpUlVKNVdsZGFla3d6VW1oYU0wMTJaR3BGZFU5VE5IY0tUVVJyUjBOcGMwZEJVVkZDWnpjNGQwRlJSVVZMTW1nd1pFaENlazlwT0haa1J6bHlXbGMwZFZsWFRqQmhWemwxWTNrMWJtRllVbTlrVjBveFl6SldlUXBaTWpsMVpFZFdkV1JETldwaU1qQjNSV2RaUzB0M1dVSkNRVWRFZG5wQlFrRm5VVVZqU0ZaNllVUkJNa0puYjNKQ1owVkZRVmxQTDAxQlJVUkNRMmQ1Q2xsdFRtaFpWR013VDFSV2JFMVhUbWxhUkVWNFdtMUthMDVIV1RGUFZHaHJUMFJWTTFscVRtaE9iVmw0VDBkU2JVOVVUWHBOUmxWSFEybHpSMEZSVVVJS1p6YzRkMEZSVVVWU2VUVnVZVmhTYjJSWFNYWmtNamw1WVRKYWMySXpaSHBNTTFwc1kyMXNiV0ZYVm5sTVYxVjVXbE0xYUdKSGQzVmtNamw1WVRKYWN3cGlNMlJtV2tkc2VtTkhSakJaTW1kMVlsZEdjR0pwTldoaVIzZDFZeko0ZWxsVVRYVmxWekZ6VFVOM1IwTnBjMGRCVVZGQ1p6YzRkMEZSVlVWSWJrNXpDbU15UlhSYWJrcG9ZbGRXTTJJelNuSk1NbFkwV1ZjeGQySkhWWFJqUjBacVlUSkdibHBVUVdKQ1oyOXlRbWRGUlVGWlR5OU5RVVZIUWtFeGVWcFhXbm9LVEROU2FGb3pUWFprYWtVd1RVUnpSME5wYzBkQlVWRkNaemM0ZDBGUlowVk1VWGR5WVVoU01HTklUVFpNZVRrd1lqSjBiR0pwTldoWk0xSndZakkxZWdwTWJXUndaRWRvTVZsdVZucGFXRXBxWWpJMU1GcFhOVEJNYlU1MllsUkRRbXBCV1V0TGQxbENRa0ZIUkhaNlFVSkRVVklyUkVoNGIyUklVbmRqZW05MkNrd3laSEJrUjJneFdXazFhbUl5TUhaak1uaDZXVk14YldOdFJuUmFXR1IyWTIxemRtTXllSHBaVXpGdVlWaFNiMlJYU1hSYU1sWjFXbGhLYUdSSE9Ya0tUSGsxYm1GWVVtOWtWMGwyWkRJNWVXRXlXbk5pTTJSNlRESktNV0ZYZUd0YVdFcG1XVEk1ZFdSSFJuQmliVlo1VEZkS2FHTXlWbXRZTTA1ell6SkZlZ3BNYm14MFlrVkNlVnBYV25wTU0xSm9Xak5OZG1ScVJYVlBVelIzVFVSblIwTnBjMGRCVVZGQ1p6YzRkMEZSYjBWTFozZHZUVVJrYkU1cVVtbE9hbFY2Q2xwcVJYZFpWR2QzV1dwWk1VMVVRbTFPUkZVeVQwZFpNazlFVm0xUFIwa3pXV3BzYkZsVVozcE5SRUZrUW1kdmNrSm5SVVZCV1U4dlRVRkZURUpCT0UwS1JGZGtjR1JIYURGWmFURnZZak5PTUZwWFVYZFJVVmxMUzNkWlFrSkJSMFIyZWtGQ1JFRlJla1JFUm05a1NGSjNZM3B2ZGt3eVpIQmtSMmd4V1drMWFncGlNakIyWXpKNGVsbFRNVzFqYlVaMFdsaGtkbU50YzNaYVdHaG9ZbGhDYzFwVE1YZFpWMDV5V1Zka2JFMUVaMGREYVhOSFFWRlJRbWMzT0hkQlVUQkZDa3RuZDI5TmJVcHFXVmRGTTA1RWF6RmFWRVpxV1cxUmVFMVhXbWxhUkZKdFRsUnJORnBFWnpGT01rbDZXVlJhYlUxVWFHdGFhbXQ2VFhwQlpFSm5iM0lLUW1kRlJVRlpUeTlOUVVWUFFrRTRUVVJZU214YWJrMTJaRWRHYm1ONU9USk5WRkYzUjFGWlMwdDNXVUpDUVVkRWRucEJRa1IzVVV4RVFXc3dUMFJaZWdwTmFsVTBUVVJyZDAxUldVdExkMWxDUWtGSFJIWjZRVUpGUVZGcVJFTkdiMlJJVW5kamVtOTJUREprY0dSSGFERlphVFZxWWpJd2RtTXllSHBaVXpGdENtTnRSblJhV0dSMlkyMXpkMGRCV1V0TGQxbENRa0ZIUkhaNlFVSkZVVkZMUkVGbk5FMUVVWHBOVkVVMFRucERRbTFSV1V0TGQxbENRa0ZIUkhaNlFVSUtSV2RUUW1sbmVVSm9NbWd3WkVoQ2VrOXBPSFphTW13d1lVaFdhVXh0VG5aaVV6bDZZa2hPYUV4WFdubFpWekZzWkRJNWVXRjVPV3hsUjBaMFkwZDRiQXBNV0VKb1dUSjBhRm95VlhaTWJXUndaRWRvTVZscE9UTmlNMHB5V20xNGRtUXpUWFprYlZaNVlWZGFjRnBZU1hSYVZFcHNURzFHYzJKRE5UTmlNMHB5Q2xwdGVIWmtNVGxyWVZoT2QxbFlVbXBoUXpWMFdWZHNkVXh0Um5OaVF6VjZZa2hPYUUxNU5UVmlWM2hCWTIxV2JXTjVPVEJaVjJSNlRETlplRTVFUVRRS1FtZHZja0puUlVWQldVOHZUVUZGVkVKRGIwMUxSRXBwV1RKR2FFNTZVVFZPVjFWNFdUSkthMDFVUm0xWmJWRXdXbXBWTlU5SFVUUk9WR1JwVFRKRk1ncGFha1UwV2tkWk5VMTZUWGRHUVZsTFMzZFpRa0pCUjBSMmVrRkNSa0ZSUjBSQlVuZGtXRTV2VFVkUlIwTnBjMGRCVVZGQ1p6YzRkMEZTVlVWV1ozaFZDbUZJVWpCalNFMDJUSGs1Ym1GWVVtOWtWMGwxV1RJNWRFd3pUbk5qTWtWMFdtNUthR0pYVmpOaU0wcHlUREpXTkZsWE1YZGlSMVYwWTBkR2FtRXlSbTRLV2xNNWFGa3pVbkJpTWpWNlRETktNV0p1VFhaT1ZHc3dUbnBOTUU1VVZYZE5lVGxvWkVoU2JHSllRakJqZVRoNFRVSlpSME5wYzBkQlVWRkNaemM0ZHdwQlVsbEZRMEYzUjJOSVZtbGlSMnhxVFVsSFRFSm5iM0pDWjBWRlFXUmFOVUZuVVVOQ1NEQkZaWGRDTlVGSVkwRXpWREIzWVhOaVNFVlVTbXBIVWpSakNtMVhZek5CY1VwTFdISnFaVkJMTXk5b05IQjVaME00Y0Rkdk5FRkJRVWRMU1U1blIzZG5RVUZDUVUxQlUwUkNSMEZwUlVGM2FrMVdOMVZrTlhkS1Jub0taME5OUkVoekwydEhOa0pEYjFwUlZsaDNSMmxITlM5MVNFTkNlbXQyTUVOSlVVTk9SekJDUWxKTlkyZE9hV1JWVlc1Nk9XOUhTRXhtZFVGRGVFSkhjZ3BVTWtWd04wdE9jelpWYkV4cWVrRkxRbWRuY1docmFrOVFVVkZFUVhkT2IwRkVRbXhCYWtWQk1WZzVObXA1ZWpka01rOVdlVzVUWW5CaGIwTk5VbUpRQ2toS2RXUnNNVXRPYzBOdVZFOTRXV1F5YlRGc2FuVkNkREl3TjFwc1ltZHNkMk5wZVhKbVMxaEJha0pRVGpJMGQwMDFkaTlzYW1FMmNuTktZMUJIVTNvS0wzSjRaMkY1Y0VrelZXcEJRMGRwVGtrclVGZFVabEpGZEdKTmIzWk9aRmhMYXpkTlMwczRla1JHUlQwS0xTMHRMUzFGVGtRZ1EwVlNWRWxHU1VOQlZFVXRMUzB0TFE9PSIsInNpZyI6IlRVVlZRMGxDYkUxbFpqWmpjalpYY2tOa1FTdFhjeXRIWTJwWFltcDZkbGhqWWpNclVtWjNaMjVETHpGdmRsTnZRV2xGUVN0U09GSk5NREJTYlV4eVVuWkxjVmszY0dVMVdWQndNVE53YkZodVdsWnNlRGczTUd0RFZqTjFOVGc5In1dfSwiaGFzaCI6eyJhbGdvcml0aG0iOiJzaGEyNTYiLCJ2YWx1ZSI6ImJlOTUwZTQyNWNjOGVjNzg3MWY2ZjU1ZWVhNTZiMzI1MmVmMDkzZThjZDIyZDY5YzVkMzdmMmM3ZWQxYzE5MDcifSwicGF5bG9hZEhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI4M2Y3YWQyYjA2ZDc5Yzg5ZTdkZWYzNmQ0NTg5MDEwZGQyMThhZDA5YmRlYjlkZmVmYzMyOWY5NThhZGYxMjQ4In19fX0="}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIBlMef6cr6WrCdA+Ws+GcjWbjzvXcb3+RfwgnC/1ovSoAiEA+R8RM00RmLrRvKqY7pe5YPp13plXnZVlx870kCV3u58=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..e69de29bb diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa new file mode 100644 index 000000000..f826a38aa --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_container-based/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414208","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768072","inclusionPromise":{"signedEntryTimestamp":"MEUCIDh28O1f9cXjgHp9dq24u180PxtTWMcs5w64EDrQlqT+AiEAmSPB7mEktO3PEo3fBHh9RA7E5uAI9ZEJ8vU2qOv/w9c="},"inclusionProof":{"logIndex":"28250777","rootHash":"1ChxSH9nQKu+yWR9dxdhetxc5ZPOWnPr5JXXSdiA+S0=","treeSize":"28250778","hashes":["eAy09mhOAL0JPAS27DBpdrd960ffXWGGC3jjIr/el0M=","j9zwxXmCncQJLobh1oT2kpBARpJ8YAxqByk1seSsw3g=","mOXGbtVaguY3Pv9DRDnwh8ypdDZ3gKBP0XS12h3+TOg=","wBuev4o2sG2iCwINLOR8jAFdNhK6dA8kqvxts6lcqq8=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250778\n1ChxSH9nQKu+yWR9dxdhetxc5ZPOWnPr5JXXSdiA+S0=\nTimestamp: 1692768072652078367\n\n— rekor.sigstore.dev wNI9ajBFAiAXCYx+B42h5O468JZjp8S5koJ9CKe5xadb1lFF6kCqwwIhAM+xrmNfDD4N73ZejWVBHUE14I16vIYy256S4mTFDHQw\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQD4AEpTdLPjCg4uXTsdkHQlIHKLtuLrCJfzInxDqCVGzQIgFJaxdchXkkvVB3Ylsn4i0G+A8KqGWrgqo5Mi1Efj7xQ=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..ce0136250 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v13.0.30 @@ -0,0 +1 @@ +hello diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa new file mode 100644 index 000000000..74e6ab9b2 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414376","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768190","inclusionPromise":{"signedEntryTimestamp":"MEUCIQCnZQJqv2BUejK7kiRdcG8MothaUj+9SV+T6Zq44E6aIAIgDAxJf0hCW6pB8J0etTci5Ch35h0Ge2xi98edVBuMz2E="},"inclusionProof":{"logIndex":"28250945","rootHash":"MYhXk5Z+rK3JbJDc/pfL9UK7OyuBkWYltzTQnHngAfM=","treeSize":"28250946","hashes":["kUml7BOnoObNX+5LDRb9ntC8x2ZeCdrRzT1GVNDh/YM=","BS7PFC9M4md3xV8aeNtJENmZcVqcbo6+0Of8BDPR7jY=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250946\nMYhXk5Z+rK3JbJDc/pfL9UK7OyuBkWYltzTQnHngAfM=\nTimestamp: 1692768190760429773\n\n— rekor.sigstore.dev wNI9ajBGAiEA5KM1rZ9qBZN1bbr9nTnYAWtah93aw/ZvN0pwNsGPAt0CIQDJfUOgXFGgtRTBmm8IsnGADOPAZ+lz4MWYOeyP9fwVPw==\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfZGVsZWdhdG9yLWJpbmFyeS1saW51eC1hbWQ2NC12MTMuMC4zMCIsImRpZ2VzdCI6eyJzaGEyNTYiOiI1ODkxYjViNTIyZDVkZjA4NmQwZmYwYjExMGZiZDlkMjFiYjRmYzcxNjNhZjM0ZDA4Mjg2YTJlODQ2ZjZiZTAzIn19XSwicHJlZGljYXRlVHlwZSI6Imh0dHBzOi8vc2xzYS5kZXYvcHJvdmVuYW5jZS92MSIsInByZWRpY2F0ZSI6eyJidWlsZERlZmluaXRpb24iOnsiYnVpbGRUeXBlIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci9kZWxlZ2F0b3ItZ2VuZXJpY0B2MCIsImV4dGVybmFsUGFyYW1ldGVycyI6eyJpbnB1dHMiOnsiYXJ0aWZhY3QiOiJnaGFfZGVsZWdhdG9yLWJpbmFyeS1saW51eC1hbWQ2NC12MTMuMC4zMCIsImNvbnRlbnQiOiJoZWxsbyIsInVzZXJuYW1lIjoiKioqIiwicmVrb3ItbG9nLXB1YmxpYyI6ZmFsc2V9LCJ2YXJzIjp7fX0sImludGVybmFsUGFyYW1ldGVycyI6eyJHSVRIVUJfQUNUT1JfSUQiOiI0OTI4OSIsIkdJVEhVQl9FVkVOVF9OQU1FIjoicHVzaCIsIkdJVEhVQl9CQVNFX1JFRiI6IiIsIkdJVEhVQl9SRUYiOiJyZWZzL3RhZ3MvdjEzLjAuMzAiLCJHSVRIVUJfUkVGX1RZUEUiOiJ0YWciLCJHSVRIVUJfUkVQT1NJVE9SWSI6InNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsIkdJVEhVQl9SRVBPU0lUT1JZX0lEIjoiNDg2MzI1ODA5IiwiR0lUSFVCX1JFUE9TSVRPUllfT1dORVJfSUQiOiI4MDQzMTE4NyIsIkdJVEhVQl9SVU5fQVRURU1QVCI6IjEiLCJHSVRIVUJfUlVOX0lEIjoiNTk0NzM0NTY1MyIsIkdJVEhVQl9SVU5fTlVNQkVSIjoiODciLCJHSVRIVUJfU0hBIjoiMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMyIsIkdJVEhVQl9UUklHR0VSSU5HX0FDVE9SX0lEIjoiNDkyODkiLCJHSVRIVUJfV09SS0ZMT1dfUkVGIjoic2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLy5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sQHJlZnMvdGFncy92MTMuMC4zMCIsIkdJVEhVQl9XT1JLRkxPV19TSEEiOiIyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIiwiR0lUSFVCX0VWRU5UX1BBWUxPQUQiOnsiYWZ0ZXIiOiIyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIiwiYmFzZV9yZWYiOiJyZWZzL2hlYWRzL21haW4iLCJiZWZvcmUiOiIwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwiY29tbWl0cyI6W10sImNvbXBhcmUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbXBhcmUvdjEzLjAuMzAiLCJjcmVhdGVkIjp0cnVlLCJkZWxldGVkIjpmYWxzZSwiZm9yY2VkIjpmYWxzZSwiaGVhZF9jb21taXQiOnsiYXV0aG9yIjp7ImVtYWlsIjoiNjQ1MDUwOTkrbGF1cmVudHNpbW9uQHVzZXJzLm5vcmVwbHkuZ2l0aHViLmNvbSIsIm5hbWUiOiJsYXVyZW50c2ltb24iLCJ1c2VybmFtZSI6ImxhdXJlbnRzaW1vbiJ9LCJjb21taXR0ZXIiOnsiZW1haWwiOiJub3JlcGx5QGdpdGh1Yi5jb20iLCJuYW1lIjoiR2l0SHViIiwidXNlcm5hbWUiOiJ3ZWItZmxvdyJ9LCJkaXN0aW5jdCI6dHJ1ZSwiaWQiOiIyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIiwibWVzc2FnZSI6IlVwZGF0ZSB2ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbFxuXG5TaWduZWQtb2ZmLWJ5OiBsYXVyZW50c2ltb24gPDY0NTA1MDk5K2xhdXJlbnRzaW1vbkB1c2Vycy5ub3JlcGx5LmdpdGh1Yi5jb20+IiwidGltZXN0YW1wIjoiMjAyMy0wOC0yMlQyMjoxMjowMC0wNzowMCIsInRyZWVfaWQiOiJkYjgyNWJjZjQzYmZkYTAwYjM4Zjc1YWY3MjRkODZiZTEyZWU0MDk5IiwidXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXQvMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMyJ9LCJvcmdhbml6YXRpb24iOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS84MDQzMTE4Nz92PTQiLCJkZXNjcmlwdGlvbiI6IlN1cHBseS1jaGFpbiBMZXZlbHMgZm9yIFNvZnR3YXJlIEFydGlmYWN0cyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvZXZlbnRzIiwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2hvb2tzIiwiaWQiOjgwNDMxMTg3LCJpc3N1ZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2lzc3VlcyIsImxvZ2luIjoic2xzYS1mcmFtZXdvcmsiLCJtZW1iZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9tZW1iZXJzey9tZW1iZXJ9Iiwibm9kZV9pZCI6Ik1ERXlPazl5WjJGdWFYcGhkR2x2Ympnd05ETXhNVGczIiwicHVibGljX21lbWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3B1YmxpY19tZW1iZXJzey9tZW1iZXJ9IiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3JlcG9zIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrIn0sInB1c2hlciI6eyJlbWFpbCI6Imlhbmxld2lzQGdvb2dsZS5jb20iLCJuYW1lIjoiaWFubGV3aXMifSwicmVmIjoicmVmcy90YWdzL3YxMy4wLjMwIiwicmVwb3NpdG9yeSI6eyJhbGxvd19mb3JraW5nIjp0cnVlLCJhcmNoaXZlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3thcmNoaXZlX2Zvcm1hdH17L3JlZn0iLCJhcmNoaXZlZCI6ZmFsc2UsImFzc2lnbmVlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hc3NpZ25lZXN7L3VzZXJ9IiwiYmxvYnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L2Jsb2Jzey9zaGF9IiwiYnJhbmNoZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYnJhbmNoZXN7L2JyYW5jaH0iLCJjbG9uZV91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsImNvbGxhYm9yYXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29sbGFib3JhdG9yc3svY29sbGFib3JhdG9yfSIsImNvbW1lbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1lbnRzey9udW1iZXJ9IiwiY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXRzey9zaGF9IiwiY29tcGFyZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21wYXJlL3tiYXNlfS4uLntoZWFkfSIsImNvbnRlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbnRlbnRzL3srcGF0aH0iLCJjb250cmlidXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29udHJpYnV0b3JzIiwiY3JlYXRlZF9hdCI6MTY1MTA4Nzg0MywiZGVmYXVsdF9icmFuY2giOiJtYWluIiwiZGVwbG95bWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZGVwbG95bWVudHMiLCJkZXNjcmlwdGlvbiI6bnVsbCwiZGlzYWJsZWQiOmZhbHNlLCJkb3dubG9hZHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZG93bmxvYWRzIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2V2ZW50cyIsImZvcmsiOmZhbHNlLCJmb3JrcyI6MjAsImZvcmtzX2NvdW50IjoyMCwiZm9ya3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZm9ya3MiLCJmdWxsX25hbWUiOiJzbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJnaXRfY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvY29tbWl0c3svc2hhfSIsImdpdF9yZWZzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9yZWZzey9zaGF9IiwiZ2l0X3RhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RhZ3N7L3NoYX0iLCJnaXRfdXJsIjoiZ2l0Oi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0IiwiaGFzX2Rpc2N1c3Npb25zIjpmYWxzZSwiaGFzX2Rvd25sb2FkcyI6dHJ1ZSwiaGFzX2lzc3VlcyI6dHJ1ZSwiaGFzX3BhZ2VzIjpmYWxzZSwiaGFzX3Byb2plY3RzIjp0cnVlLCJoYXNfd2lraSI6dHJ1ZSwiaG9tZXBhZ2UiOm51bGwsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2hvb2tzIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlIiwiaWQiOjQ4NjMyNTgwOSwiaXNfdGVtcGxhdGUiOmZhbHNlLCJpc3N1ZV9jb21tZW50X3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsImlzc3VlX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9pc3N1ZXMvZXZlbnRzey9udW1iZXJ9IiwiaXNzdWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlc3svbnVtYmVyfSIsImtleXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uva2V5c3sva2V5X2lkfSIsImxhYmVsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9sYWJlbHN7L25hbWV9IiwibGFuZ3VhZ2UiOiJUeXBlU2NyaXB0IiwibGFuZ3VhZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2xhbmd1YWdlcyIsImxpY2Vuc2UiOnsia2V5IjoiYXBhY2hlLTIuMCIsIm5hbWUiOiJBcGFjaGUgTGljZW5zZSAyLjAiLCJub2RlX2lkIjoiTURjNlRHbGpaVzV6WlRJPSIsInNwZHhfaWQiOiJBcGFjaGUtMi4wIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIn0sIm1hc3Rlcl9icmFuY2giOiJtYWluIiwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL21lcmdlcyIsIm1pbGVzdG9uZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbWlsZXN0b25lc3svbnVtYmVyfSIsIm1pcnJvcl91cmwiOm51bGwsIm5hbWUiOiJleGFtcGxlLXBhY2thZ2UiLCJub2RlX2lkIjoiUl9rZ0RPSFB5LU1RIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9ub3RpZmljYXRpb25zez9zaW5jZSxhbGwscGFydGljaXBhdGluZ30iLCJvcGVuX2lzc3VlcyI6NDcsIm9wZW5faXNzdWVzX2NvdW50Ijo0Nywib3JnYW5pemF0aW9uIjoic2xzYS1mcmFtZXdvcmsiLCJvd25lciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzgwNDMxMTg3P3Y9NCIsImVtYWlsIjpudWxsLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9ldmVudHN7L3ByaXZhY3l9IiwiZm9sbG93ZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93ZXJzIiwiZm9sbG93aW5nX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsImdpc3RzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZ2lzdHN7L2dpc3RfaWR9IiwiZ3JhdmF0YXJfaWQiOiIiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yayIsImlkIjo4MDQzMTE4NywibG9naW4iOiJzbHNhLWZyYW1ld29yayIsIm5hbWUiOiJzbHNhLWZyYW1ld29yayIsIm5vZGVfaWQiOiJNREV5T2s5eVoyRnVhWHBoZEdsdmJqZ3dORE14TVRnMyIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9zdWJzY3JpcHRpb25zIiwidHlwZSI6Ik9yZ2FuaXphdGlvbiIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsifSwicHJpdmF0ZSI6ZmFsc2UsInB1bGxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3B1bGxzey9udW1iZXJ9IiwicHVzaGVkX2F0IjoxNjkyNzY3OTgyLCJyZWxlYXNlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6NjgyOSwic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOnNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJzdGFyZ2F6ZXJzIjoxMiwic3RhcmdhemVyc19jb3VudCI6MTIsInN0YXJnYXplcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3N0YXR1c2VzL3tzaGF9Iiwic3Vic2NyaWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaWJlcnMiLCJzdWJzY3JpcHRpb25fdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ0YWdzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RhZ3MiLCJ0ZWFtc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC90cmVlc3svc2hhfSIsInVwZGF0ZWRfYXQiOiIyMDIzLTA4LTE0VDA4OjMwOjEzWiIsInVybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ2aXNpYmlsaXR5IjoicHVibGljIiwid2F0Y2hlcnMiOjEyLCJ3YXRjaGVyc19jb3VudCI6MTIsIndlYl9jb21taXRfc2lnbm9mZl9yZXF1aXJlZCI6dHJ1ZX0sInNlbmRlciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzQ5Mjg5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2lhbmxld2lzIiwiaWQiOjQ5Mjg5LCJsb2dpbiI6Imlhbmxld2lzIiwibm9kZV9pZCI6Ik1EUTZWWE5sY2pRNU1qZzUiLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcyJ9fX0sInJlc29sdmVkRGVwZW5kZW5jaWVzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZUByZWZzL3RhZ3MvdjEzLjAuMzAiLCJkaWdlc3QiOnsiZ2l0Q29tbWl0IjoiMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMyJ9fV19LCJydW5EZXRhaWxzIjp7ImJ1aWxkZXIiOnsiaWQiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS10cncvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9oaWdoLXBlcm1zX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuOS4wIn0sIm1ldGFkYXRhIjp7Imludm9jYXRpb25JZCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYWN0aW9ucy9ydW5zLzU5NDczNDU2NTMvYXR0ZW1wdHMvMSJ9fX19","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQDuDrFZsClTJVv9BGHx806w83qXhSPQTE3fhyvgRuKE5QIhANJkXK394gSg4A+FlEholudCSplGhEGzwLoUBRfiB8DV","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..ce0136250 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14 @@ -0,0 +1 @@ +hello diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..ce0136250 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.2 @@ -0,0 +1 @@ +hello diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa new file mode 100644 index 000000000..188c3580d --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414362","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768185","inclusionPromise":{"signedEntryTimestamp":"MEYCIQCCb+SUtXQN2qmMj2VP+wquThS6bF4wPOWqCy98UvUfEwIhAPaMf3dX2oTkJxDmz3Id0eOox4TQmqFC9v+Z5P8tnWVb"},"inclusionProof":{"logIndex":"28250931","rootHash":"yfbVdes+Yvd7nUeBfhmLf0iLd8opi83ALp54XvozYdc=","treeSize":"28250933","hashes":["mkPJNHtiSnoM+pH8/p2kuxo4icxQXheAfbfIQA/PCek=","7YDf9iIa6K4x1B1OXMtZxE6X/2zJAuOoc4xeYsr8uu4=","l0mRJPYXrs+N/wETLTw1u3Z1TyfuZ898Sjpt0fXhR+c=","OFUkEOS3Z21lEpLWUUAaTw2gMpkp3oWIf6GAv05eCms=","xuFeB25fqj+ZMcfUl8X95zTYWvFaX9TMpAduFnxYMUU=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250933\nyfbVdes+Yvd7nUeBfhmLf0iLd8opi83ALp54XvozYdc=\nTimestamp: 1692768185838112577\n\n— rekor.sigstore.dev wNI9ajBEAiAcxVIM2+xQCBjQ0sxUd7G0ArkJz/paSjtgnPRdiYHjtwIgWaa1KqNQOZxuoArAugk4gbI9wgDSAcfGxreOgROgNSU=\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIBqyGmbUizFZfQBfeiIxkTbiMFcerVxGJBMHWmsJIkNyAiBSh/4oI4sEMxPsCAqIOUmP4Lq4cszWmdvmJ5NzbWPuuw==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.build.slsa b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.build.slsa new file mode 100644 index 000000000..6e1b0f360 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-push-v14.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414343","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768181","inclusionPromise":{"signedEntryTimestamp":"MEYCIQCqPxtj+vOr5Ayem7oFPn4P20WsbasLVjeP4Mp7XhBAtwIhANPDUD9serkyeF6cyD1QAX2aSY2oUhq5ScqCrdyaGjUI"},"inclusionProof":{"logIndex":"28250912","rootHash":"mJce5tfxAlUnQ0klBVqfEnUNcTzjzJEZleMtKopdE1c=","treeSize":"28250913","hashes":["xuFeB25fqj+ZMcfUl8X95zTYWvFaX9TMpAduFnxYMUU=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250913\nmJce5tfxAlUnQ0klBVqfEnUNcTzjzJEZleMtKopdE1c=\nTimestamp: 1692768181593017139\n\n— rekor.sigstore.dev wNI9ajBFAiEAiwV4cgDh5rfPEozZf6KWStXStJePudTHOjtR1AnrPt4CIBd41DwTQV5E1ZbM3bPYxv+ZtTfr20GsDPytB2uU9Kvn\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjIiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7ImVudmVsb3BlIjp7InBheWxvYWRUeXBlIjoiYXBwbGljYXRpb24vdm5kLmluLXRvdG8ranNvbiIsInNpZ25hdHVyZXMiOlt7InB1YmxpY0tleSI6IkxTMHRMUzFDUlVkSlRpQkRSVkpVU1VaSlEwRlVSUzB0TFMwdENrMUpTVWhwZWtORFFuaEhaMEYzU1VKQlowbFZaWFI1YzI5WkswRTNWVlZ0Wm5wdVRHSkdabVJsTmpCVU1HTk5kME5uV1VsTGIxcEplbW93UlVGM1RYY0tUbnBGVmsxQ1RVZEJNVlZGUTJoTlRXTXliRzVqTTFKMlkyMVZkVnBIVmpKTlVqUjNTRUZaUkZaUlVVUkZlRlo2WVZka2VtUkhPWGxhVXpGd1ltNVNiQXBqYlRGc1drZHNhR1JIVlhkSWFHTk9UV3BOZDA5RVNYcE5SRlY1VFhwQmVGZG9ZMDVOYWsxM1QwUkplazFFVlhwTmVrRjRWMnBCUVUxR2EzZEZkMWxJQ2t0dldrbDZhakJEUVZGWlNVdHZXa2w2YWpCRVFWRmpSRkZuUVVWR2REWk1URnBETlZsMVRtSlJlbFZQUWpKMlRXMUhiRzU2SzFaa01uZEtMMWR6TUhJS1IxQmxVbFJuZVVOeGNHVlhUM0l3ZEhkMFdtMXBiRkJET1VwTVVFVmlSbVZOUzFWTE0xcHpNa3RCYjJWalpVVjZaWEZQUTBKcVFYZG5aMWx6VFVFMFJ3cEJNVlZrUkhkRlFpOTNVVVZCZDBsSVowUkJWRUpuVGxaSVUxVkZSRVJCUzBKblozSkNaMFZHUWxGalJFRjZRV1JDWjA1V1NGRTBSVVpuVVZWRFFsWmFDa2MyYjJ4WE0wVktlVlJMYzJSWk5HdGFNak5PWjJaVmQwaDNXVVJXVWpCcVFrSm5kMFp2UVZVek9WQndlakZaYTBWYVlqVnhUbXB3UzBaWGFYaHBORmtLV2tRNGQyZFpUVWRCTVZWa1JWRkZRaTkzVWpWTlNHVkhaRmRvTUdSSVFucFBhVGgyV2pKc01HRklWbWxNYlU1MllsTTVlbUpJVG1oTVYxcDVXVmN4YkFwa01qbDVZWGs1ZW1KSVRtaE1WMlJ3WkVkb01WbHBNVzVhVnpWc1kyMUdNR0l6U1haTWJXUndaRWRvTVZscE9UTmlNMHB5V20xNGRtUXpUWFphUjFaekNscFhaR2hrUnpsNVdESmtiR0p0Vm5saFYwNW1Zeko0ZWxsVVRYVmxWekZ6VVVoS2JGcHVUWFpoUjFab1draE5kbUpYUm5CaWFrRTFRbWR2Y2tKblJVVUtRVmxQTDAxQlJVSkNRM1J2WkVoU2QyTjZiM1pNTTFKMllUSldkVXh0Um1wa1IyeDJZbTVOZFZveWJEQmhTRlpwWkZoT2JHTnRUblppYmxKc1ltNVJkUXBaTWpsMFRVSkpSME5wYzBkQlVWRkNaemM0ZDBGUlNVVkNTRUl4WXpKbmQwNW5XVXRMZDFsQ1FrRkhSSFo2UVVKQmQxRnZUVzFLYWxsWFJUTk9SR3N4Q2xwVVJtcFpiVkY0VFZkYWFWcEVVbTFPVkdzMFdrUm5NVTR5U1hwWlZGcHRUVlJvYTFwcWEzcE5la0pXUW1kdmNrSm5SVVZCV1U4dlRVRkZSVUpGWTNVS1dqSnNNR0ZJVm1sTU0yUjJZMjEwYldKSE9UTmplVGt5V2xoS2NGcHRiR3hqYVRGc1RXMVZkVmxYZUhOTWJtUjJZMjEwYldKSE9UTllNbEp3WXpOQ2FBcGtSMDV2VEcweGFHRlhOSFZaVjNoelRHNU9jMk15UlhwTWJteDBZa1JCYzBKbmIzSkNaMFZGUVZsUEwwMUJSVVpDUWpWNllraE9hRXhYV25sWlZ6RnNDbVF5T1hsaGVUbHNaVWRHZEdOSGVHeE1XRUpvV1RKMGFGb3lWWGRIZDFsTFMzZFpRa0pCUjBSMmVrRkNRbWRSVG1OdFZtMWplVGt3V1Zka2Vrd3pXWGdLVGtSQk4wSm5iM0pDWjBWRlFWbFBMMDFCUlVsQ1F6Qk5TekpvTUdSSVFucFBhVGgyWkVjNWNscFhOSFZaVjA0d1lWYzVkV041Tlc1aFdGSnZaRmRLTVFwak1sWjVXVEk1ZFdSSFZuVmtRelZxWWpJd2QyZFpWVWREYVhOSFFWRlJRbWMzT0hkQlVXdEZaSGQ0TVdGSVVqQmpTRTAyVEhrNWJtRllVbTlrVjBsMUNsa3lPWFJNTTA1ell6SkZkRnB1U21oaVYxWXpZak5LY2t3elRuTmpNa1YwV2pKc01HRklWbWxNVjJSc1ltMVdlVmxZVW5aamFUaDFXakpzTUdGSVZta0tURE5rZG1OdGRHMWlSemt6WTNrNWExcFhlR3hhTWtZd1lqTktabG95Vm5WYVdFcHdXVEU1ZW1KSVRtaE5lVFUxWWxkNFFXTnRWbTFqZVRsdldsZEdhd3BqZVRsMFdWZHNkVTFFWjBkRGFYTkhRVkZSUW1jM09IZEJVVzlGUzJkM2IwMUVaR3hPYWxKcFRtcFZlbHBxUlhkWlZHZDNXV3BaTVUxVVFtMU9SRlV5Q2s5SFdUSlBSRlp0VDBkSk0xbHFiR3haVkdkNlRVUkJaRUpuYjNKQ1owVkZRVmxQTDAxQlJVeENRVGhOUkZka2NHUkhhREZaYVRGdllqTk9NRnBYVVhjS1VWRlpTMHQzV1VKQ1FVZEVkbnBCUWtSQlVYcEVSRVp2WkVoU2QyTjZiM1pNTW1Sd1pFZG9NVmxwTldwaU1qQjJZeko0ZWxsVE1XMWpiVVowV2xoa2RncGpiWE4yV2xob2FHSllRbk5hVXpGM1dWZE9jbGxYWkd4TlJHZEhRMmx6UjBGUlVVSm5OemgzUVZFd1JVdG5kMjlOYlVwcVdWZEZNMDVFYXpGYVZFWnFDbGx0VVhoTlYxcHBXa1JTYlU1VWF6UmFSR2N4VGpKSmVsbFVXbTFOVkdocldtcHJlazE2UVdSQ1oyOXlRbWRGUlVGWlR5OU5RVVZQUWtFNFRVUllTbXdLV201TmRtUkhSbTVqZVRreVRWUlJkMGRSV1V0TGQxbENRa0ZIUkhaNlFVSkVkMUZNUkVGck1FOUVXWHBOYWxVMFRVUnJkMDFSV1V0TGQxbENRa0ZIUkFwMmVrRkNSVUZSYWtSRFJtOWtTRkozWTNwdmRrd3laSEJrUjJneFdXazFhbUl5TUhaak1uaDZXVk14YldOdFJuUmFXR1IyWTIxemQwZEJXVXRMZDFsQ0NrSkJSMFIyZWtGQ1JWRlJTMFJCWnpSTlJGRjZUVlJGTkU1NlEwSnRVVmxMUzNkWlFrSkJSMFIyZWtGQ1JXZFRRbWxuZVVKb01tZ3daRWhDZWs5cE9IWUtXakpzTUdGSVZtbE1iVTUyWWxNNWVtSklUbWhNVjFwNVdWY3hiR1F5T1hsaGVUbHNaVWRHZEdOSGVHeE1XRUpvV1RKMGFGb3lWWFpNYldSd1pFZG9NUXBaYVRrellqTktjbHB0ZUhaa00wMTJaRzFXZVdGWFduQmFXRWwwV2xSS2JFeHRSbk5pUXpVellqTktjbHB0ZUhaa01UbHJZVmhPZDFsWVVtcGhRelYwQ2xsWGJIVk1iVVp6WWtNMWVtSklUbWhOZVRVMVlsZDRRV050Vm0xamVUa3dXVmRrZWt3eldYaE9SRUUwUW1kdmNrSm5SVVZCV1U4dlRVRkZWRUpEYjAwS1MwUkthVmt5Um1oT2VsRTFUbGRWZUZreVNtdE5WRVp0V1cxUk1GcHFWVFZQUjFFMFRsUmthVTB5UlRKYWFrVTBXa2RaTlUxNlRYZEdRVmxMUzNkWlFncENRVWRFZG5wQlFrWkJVVWRFUVZKM1pGaE9iMDFIVVVkRGFYTkhRVkZSUW1jM09IZEJVbFZGVm1kNFZXRklVakJqU0UwMlRIazVibUZZVW05a1YwbDFDbGt5T1hSTU0wNXpZekpGZEZwdVNtaGlWMVl6WWpOS2Nrd3lWalJaVnpGM1lrZFZkR05IUm1waE1rWnVXbE01YUZrelVuQmlNalY2VEROS01XSnVUWFlLVGxSck1FNTZUVEJPVkZWM1RYazVhR1JJVW14aVdFSXdZM2s0ZUUxQ1dVZERhWE5IUVZGUlFtYzNPSGRCVWxsRlEwRjNSMk5JVm1saVIyeHFUVWxIU2dwQ1oyOXlRbWRGUlVGa1dqVkJaMUZEUWtoelJXVlJRak5CU0ZWQk0xUXdkMkZ6WWtoRlZFcHFSMUkwWTIxWFl6TkJjVXBMV0hKcVpWQkxNeTlvTkhCNUNtZERPSEEzYnpSQlFVRkhTMGxPYVdJeGQwRkJRa0ZOUVZKcVFrVkJhVUZ4YVRsRlRIaERhbWw1VWpCS1dIQlNWbVZMVDNoS05tTkNNekY2Vm1oU1RVc0tVR2xKZHpOM1VXaHdaMGxuVm1Gd1lsQlpjaXRLZFRjdmJpODVTR3RJY2xSTWEwY3ZOWFZCUkVveFFVSmlLMHcwWTFGcWMxbGtRWGREWjFsSlMyOWFTUXA2YWpCRlFYZE5SR0ZCUVhkYVVVbDRRVXd2TlVSeWRYbDJPWEZKUzFsNlVuUnhTSFZNYm5ORmNGQnRTRkpYU21ac1NVMUNiRkZETUUwNVdHdGxRVlF3Q25wSVNYTjBZblJyWlVFcmRVUXhiRk5UZDBsM1JIVlZkMEZCYkVOblVGRTRWWGtyVjJOSlJtOHZkRXRoV2tadlVIRTNVRkpCWWt0VVdrSjNURE5VTTNVS2VGZElOVE5rVm01WU5ERlhhMFJSYVU5Q2RTc0tMUzB0TFMxRlRrUWdRMFZTVkVsR1NVTkJWRVV0TFMwdExRPT0iLCJzaWciOiJUVVZSUTBsREt6Rm1RVVpYVkZOcmIzQm1SREY1TW5KemMxVmlWaXR0U0dwWVJraFpiVXBDU2xVM2IwSkdaM0J2UVdsQ2VUTXZOR3gzVFVGTGVrMDJha013ZFdSRE4wVnpRbGRTTVV4WkwyMUtWMlZIWlZFM1EydDNSQ3RzZHowOSJ9XX0sImhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiIwNjBkMjVjOTEyMThlMDNjMTU0OTczODc4YTJlZTI1ZmU1YjQwZTI2ODdkMjgwN2Y3MmVmYjY3MGMwY2Q5ZTBjIn0sInBheWxvYWRIYXNoIjp7ImFsZ29yaXRobSI6InNoYTI1NiIsInZhbHVlIjoiN2RjZmNmNDJiYzg0NDIwZmQ5NzFiNDExZTdjN2U2YTlhMjI0NTMwMzI4Y2Y0ZTk1OTMwNDU4ZDM0MzBjODViZiJ9fX19"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIC+1fAFWTSkopfD1y2rssUbV+mHjXFHYmJBJU7oBFgpoAiBy3/4lwMAKzM6jC0udC7EsBWR1LY/mJWeGeQ7CkwD+lw==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..ce0136250 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-workflow_dispatch @@ -0,0 +1 @@ +hello diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa new file mode 100644 index 000000000..4702c60f0 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_delegator/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414266","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768133","inclusionPromise":{"signedEntryTimestamp":"MEUCIEDoH3tT1X4nJe6AFukMmfXGespD7IGQVGz7gGaXxaIXAiEAw47wPMN4PFxXX5H+n/xLQ04GQmlVfi+8zE21/3VqOzA="},"inclusionProof":{"logIndex":"28250835","rootHash":"1bDQa44LyCdyRSNsFEIrcqOUhG47rE1X7PcBAm4CaUU=","treeSize":"28250836","hashes":["JMWEdcdO4QgWWu8O6npbJlt8K5f8OarklimOpnjQ2i0=","CCGcVdE/kqDJdm5X4TJtRazjyfdGdMsTO6BPELrUZ5Q=","CGOyEWjga3lE9WMNxiBd4YkrnnjV48tQ7jZv7O35N1w=","a3W+9yE4tPV4SfKu99wFs/HRY3I9UqwGIJllY0L3tYM=","wBuev4o2sG2iCwINLOR8jAFdNhK6dA8kqvxts6lcqq8=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250836\n1bDQa44LyCdyRSNsFEIrcqOUhG47rE1X7PcBAm4CaUU=\nTimestamp: 1692768133731267078\n\n— rekor.sigstore.dev wNI9ajBGAiEAuwiWJW7w0cktPjimvKd1scUM2+E+xUJBLYl9zl5R5bYCIQD4bDkeWUO5e3BSz9JU5t6XMzreAiWq223gc+uyTX1I3g==\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCcMLe0baZ0RZjh81wVq9G+chbDusS15Dia7TzFqAc8sgIgTwp80POhwW5negobuHI7x18U4RW9cWoY02tmB33e9Fw=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_docker-based/main/workflow_dispatch.main.default b/cli/slsa-verifier/testdata/gha_docker-based/main/workflow_dispatch.main.default deleted file mode 100644 index e4997faad..000000000 --- a/cli/slsa-verifier/testdata/gha_docker-based/main/workflow_dispatch.main.default +++ /dev/null @@ -1,4 +0,0 @@ -# Simple command for generating a file. -command = ["cp", ".github/configs-docker/config.toml", "config.toml"] -# Path to the file generated by the command above. -artifact_path = "config.toml" \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_docker-based/main/workflow_dispatch.main.default.intoto.sigstore b/cli/slsa-verifier/testdata/gha_docker-based/main/workflow_dispatch.main.default.intoto.sigstore deleted file mode 100644 index 3e349a7c6..000000000 --- a/cli/slsa-verifier/testdata/gha_docker-based/main/workflow_dispatch.main.default.intoto.sigstore +++ /dev/null @@ -1 +0,0 @@ -{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"},{"rawBytes":"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"},{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"19442993","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1682976285","inclusionPromise":{"signedEntryTimestamp":"MEUCIGotU3KdgxQ9AtZKY63Md5syWsaLhqrEnc4QRAiv1a4GAiEAt92y6Z8WCXLXDZf+EfxePt4uV8NiP5nR5O9/U2cUYBs="},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQD3try3JyViIppLQ8O7K/WQ63kpQL7iPRlW45al+21SfwIhAM0mFnBce9epaC23wxxFVtjhFTVHmUOKllgA2yaQvyGV","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..4317c99b0 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIGzNAR1HIxAXfdIxMF09AcymBfznc/5yTad34IzphhOoAiEA6BgB5qcwKu3g9pKgozFzsFwwmQ7Jxx6DVTA7RNBaKlc=","cert":"-----BEGIN CERTIFICATE-----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\nwdlFT9o1T8bA\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..1bc3307a7 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQDvwRwMmUlpR/chqcVlbWBWnL5aLEs3bEypsgaD8ycHHwIgb2UVtu0lRTDZE9WCm8OmRRH48U1b+y1U2e7QtQcDtGk=","cert":"-----BEGIN CERTIFICATE-----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\n8A==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..8229e56c9 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIB3dOU8O4sJv0r/8CozVkt11bB0ocsCG9jltPIVVoRY0AiEAlREni1CSYp7swKy/200G0Xg2XJdC8VRGKdeaZANzrWY=","cert":"-----BEGIN CERTIFICATE-----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\nd922NUJNKKnJpbRjV8OfjbER2YO1s0VS60JC032OP7jdl3elGse13JUp\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..64eff5abd --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.6.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEYCIQDBXq4T/+wPcDWNPW4jrEkA7/8/fu2g0+TCzGP5jkwlSwIhAJccYu56tREkQlT6jNbd7BqIO8rVsNMZOCEsBD6Iwk7C","cert":"-----BEGIN CERTIFICATE-----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\njfxqGNC/NTssUcXN8MvulMrTdONmdhnk6w==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..89a740bd1 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIAztet2TiCG9cNi7xdc5HbXG8wFCSp0ikKH6D2U47CxRAiB3OQ1p0TX2pu1wvJoV5e/gFZxqe2B/VabmtLiccec0mA==","cert":"-----BEGIN CERTIFICATE-----\nMIIHhDCCBwqgAwIBAgIUTPrdEgIkhXPSdTJDYnIU+ocL5Z4wCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjMwNjA3MTQ0NDQ4WhcNMjMwNjA3MTQ1NDQ4WjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAEZ/9wUoh4fQJVUGrB3dzB+JJ2iIcaWbW08bgc\nxeUxzRy0VjSE6q2snpYjHMT4Nep0Xv2CO6zDgQVtfNDffRZIRKOCBikwggYlMA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQU10TB\ncn3fvNkcQXORoq8+9l5inqMwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8wgYQGA1UdEQEB/wR6MHiGdmh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2Vu\nZXJhdG9yX2dlbmVyaWNfc2xzYTMueW1sQHJlZnMvdGFncy92MS43LjAwOQYKKwYB\nBAGDvzABAQQraHR0cHM6Ly90b2tlbi5hY3Rpb25zLmdpdGh1YnVzZXJjb250ZW50\nLmNvbTASBgorBgEEAYO/MAECBARwdXNoMDYGCisGAQQBg78wAQMEKDYyY2IxZjFl\nNDg1ODI5YmFmZThiYmVjOGI5OTAwYzBjYjc2MjRmZTcwVQYKKwYBBAGDvzABBARH\nLmdpdGh1Yi93b3JrZmxvd3MvdmVyaWZpZXItZTJlLmFsbC53b3JrZmxvd19kaXNw\nYXRjaC5tYWluLmFsbC5zbHNhMy55bWwwLAYKKwYBBAGDvzABBQQec2xzYS1mcmFt\nZXdvcmsvZXhhbXBsZS1wYWNrYWdlMCAGCisGAQQBg78wAQYEEnJlZnMvdGFncy92\nMTMuMC4zMDA7BgorBgEEAYO/MAEIBC0MK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5n\naXRodWJ1c2VyY29udGVudC5jb20wgYYGCisGAQQBg78wAQkEeAx2aHR0cHM6Ly9n\naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8u\nZ2l0aHViL3dvcmtmbG93cy9nZW5lcmF0b3JfZ2VuZXJpY19zbHNhMy55bWxAcmVm\ncy90YWdzL3YxLjcuMDA4BgorBgEEAYO/MAEKBCoMKGU1NWI3NmNlNDIxMDgyZGZh\nNGIzNGE2YWMzYzVlNTlkZTBmM2JiNTgwHQYKKwYBBAGDvzABCwQPDA1naXRodWIt\naG9zdGVkMEEGCisGAQQBg78wAQwEMwwxaHR0cHM6Ly9naXRodWIuY29tL3Nsc2Et\nZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZTA4BgorBgEEAYO/MAENBCoMKDYyY2Ix\nZjFlNDg1ODI5YmFmZThiYmVjOGI5OTAwYzBjYjc2MjRmZTcwIgYKKwYBBAGDvzAB\nDgQUDBJyZWZzL3RhZ3MvdjEzLjAuMzAwGQYKKwYBBAGDvzABDwQLDAk0ODYzMjU4\nMDkwMQYKKwYBBAGDvzABEAQjDCFodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFt\nZXdvcmswGAYKKwYBBAGDvzABEQQKDAg4MDQzMTE4NzCBngYKKwYBBAGDvzABEgSB\njwyBjGh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBh\nY2thZ2UvLmdpdGh1Yi93b3JrZmxvd3MvdmVyaWZpZXItZTJlLmFsbC53b3JrZmxv\nd19kaXNwYXRjaC5tYWluLmFsbC5zbHNhMy55bWxAcmVmcy90YWdzL3YxMy4wLjMw\nMDgGCisGAQQBg78wARMEKgwoNjJjYjFmMWU0ODU4MjliYWZlOGJiZWM4Yjk5MDBj\nMGNiNzYyNGZlNzAUBgorBgEEAYO/MAEUBAYMBHB1c2gwZAYKKwYBBAGDvzABFQRW\nDFRodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNr\nYWdlL2FjdGlvbnMvcnVucy81MjAxMzkwMzM3L2F0dGVtcHRzLzEwgYkGCisGAQQB\n1nkCBAIEewR5AHcAdQDdPTBqxscRMmMZHhyZZzcCokpeuN48rf+HinKALynujgAA\nAYiWUUY7AAAEAwBGMEQCIF6TADk0HDISMYm9dbYl1znU71e6agmqtnUGZW05+07+\nAiA60vLiDC3/AyG4iknj2bp3RqX0jjR4PtkINo3jd6qyFTAKBggqhkjOPQQDAwNo\nADBlAjEA4CzvQs/E1N+jhf7IuV+eFcFXzgD1GLKCc/VN8KDiXZMQlrX4Wg4q/cC+\nYA8Qa7zXAjAdAzlN3PmGxPq0ET7BCpIFvFJqbWXp+Q8eme0SG04s50lygTsod3QW\n/y6migArzfk=\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..e3fe31b8e --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIDBfbns/h9RAdExoO4iaUVUlHxFog5JFKoxRIjp6zTJyAiEAzccwrXTXOHwL5ajA8vpO7n5D0jDGZVYcOM9ZDFMGj0I=","cert":"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..56d0ef93f --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIF+ebUPxT9V+xmZpYW0Ym1bTQ2b+LefOVIXJC2xpmPeUAiEAljEq/U530XAWTUU+oE7ySr6dDNCIJub7arDLEAPsiHA=","cert":"-----BEGIN CERTIFICATE-----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\nhdT2bBBfMXmz+me6WtGZqZg3SPtDevsVf60aZ88OMuJAauLOmkCa0exABA==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..56791595a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..008cd1608 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIChch73Xt2MIJPOw9OjtyBuK3Pz5BiljfbZ+A6eLzlWOAiAbw/s5Xlpq+l/bocmXFKORxdeNNaf9J0v6NKKa3l0gnQ==","cert":"-----BEGIN CERTIFICATE-----\nMIIHlDCCBxugAwIBAgIURWuPRZK/Vo0MTVJlMJ8KEbj2JqwwCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjMwNjA3MTQ0NDE1WhcNMjMwNjA3MTQ1NDE1WjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAEmA7E2PjCNk6MevqTf7fRS/lNhFWOSm2h716c\nn2W9+y9v4wgAoNbKo8/kysEK/s7Wv25hegcP3cZe3U/KC3CH+6OCBjowggY2MA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQU4FKs\nTSLwVkI8pYv88ZxJ81xcnAswHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8wgYQGA1UdEQEB/wR6MHiGdmh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2Vu\nZXJhdG9yX2dlbmVyaWNfc2xzYTMueW1sQHJlZnMvdGFncy92MS43LjAwOQYKKwYB\nBAGDvzABAQQraHR0cHM6Ly90b2tlbi5hY3Rpb25zLmdpdGh1YnVzZXJjb250ZW50\nLmNvbTAfBgorBgEEAYO/MAECBBF3b3JrZmxvd19kaXNwYXRjaDA2BgorBgEEAYO/\nMAEDBCg2MmNiMWYxZTQ4NTgyOWJhZmU4YmJlYzhiOTkwMGMwY2I3NjI0ZmU3MFUG\nCisGAQQBg78wAQQERy5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwu\nd29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sMCwGCisGAQQBg78w\nAQUEHnNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZTAdBgorBgEEAYO/MAEG\nBA9yZWZzL2hlYWRzL21haW4wOwYKKwYBBAGDvzABCAQtDCtodHRwczovL3Rva2Vu\nLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMIGGBgorBgEEAYO/MAEJBHgM\ndmh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1n\nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2VuZXJhdG9yX2dlbmVyaWNfc2xz\nYTMueW1sQHJlZnMvdGFncy92MS43LjAwOAYKKwYBBAGDvzABCgQqDChlNTViNzZj\nZTQyMTA4MmRmYTRiMzRhNmFjM2M1ZTU5ZGUwZjNiYjU4MB0GCisGAQQBg78wAQsE\nDwwNZ2l0aHViLWhvc3RlZDBBBgorBgEEAYO/MAEMBDMMMWh0dHBzOi8vZ2l0aHVi\nLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UwOAYKKwYBBAGDvzAB\nDQQqDCg2MmNiMWYxZTQ4NTgyOWJhZmU4YmJlYzhiOTkwMGMwY2I3NjI0ZmU3MB8G\nCisGAQQBg78wAQ4EEQwPcmVmcy9oZWFkcy9tYWluMBkGCisGAQQBg78wAQ8ECwwJ\nNDg2MzI1ODA5MDEGCisGAQQBg78wARAEIwwhaHR0cHM6Ly9naXRodWIuY29tL3Ns\nc2EtZnJhbWV3b3JrMBgGCisGAQQBg78wAREECgwIODA0MzExODcwgZsGCisGAQQB\ng78wARIEgYwMgYlodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhh\nbXBsZS1wYWNrYWdlLy5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwu\nd29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sQHJlZnMvaGVhZHMv\nbWFpbjA4BgorBgEEAYO/MAETBCoMKDYyY2IxZjFlNDg1ODI5YmFmZThiYmVjOGI5\nOTAwYzBjYjc2MjRmZTcwIQYKKwYBBAGDvzABFAQTDBF3b3JrZmxvd19kaXNwYXRj\naDBkBgorBgEEAYO/MAEVBFYMVGh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9leGFtcGxlLXBhY2thZ2UvYWN0aW9ucy9ydW5zLzUyMDEzODQ1NTcvYXR0\nZW1wdHMvMTCBiQYKKwYBBAHWeQIEAgR7BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKi\nSl643jyt/4eKcoAvKe6OAAABiJZQxGAAAAQDAEYwRAIgUKdG6ZJPdwIO8CwV8t96\ncp1/8r/M4CDuiMDa4gNCFtwCIAzoHb+RbArXDqG3bH7WE/YsG74qnc8jlwlYaDIJ\n1Zp+MAoGCCqGSM49BAMDA2cAMGQCMAMpjcQRrfklC+XuexeBwNECUJkFyT4eMy5T\n5qnlF7+X6urgVElc16Xqfxh4fki3MgIwbWzlNlM/aW+cGLDO4iWPxmdAFyKKGDyh\nMR7+WC37qU8G3waNFpOGuB8Q9k/1dktc\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..872265ef7 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIGMjYhCXBSkEIQ5Ad/pf9dMwu/VJ1mqTrGoClSxBWCFFAiB7R6HnXjQFhqXI7R0+Zfp3zTJS7QCtMSq3cA4YSIxKKQ==","cert":"-----BEGIN CERTIFICATE-----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\nMuRIZyC4LZIuyqRXntNoNRxWKk6ITmfD9gkxGF4xl0Ws\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..30f157645 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfZ2VuZXJpYy1iaW5hcnktbGludXgtYW1kNjQtdjE0LjIiLCJkaWdlc3QiOnsic2hhMjU2IjoiMjVkMzViNzgxYmVmMWZjZjhjMmQ4NjNmYTIxZGNlYmRhMDg3NDg5NTViM2FmZjcxZDRmNWZjY2JiZGVmZTQxYSJ9fV0sInByZWRpY2F0ZSI6eyJidWlsZGVyIjp7ImlkIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8uZ2l0aHViL3dvcmtmbG93cy9nZW5lcmF0b3JfZ2VuZXJpY19zbHNhMy55bWxAcmVmcy90YWdzL3YxLjguMCJ9LCJidWlsZFR5cGUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yL2dlbmVyaWNAdjEiLCJpbnZvY2F0aW9uIjp7ImNvbmZpZ1NvdXJjZSI6eyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZUByZWZzL3RhZ3MvdjE0LjIiLCJkaWdlc3QiOnsic2hhMSI6IjZjZjY3MWY0N2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIifSwiZW50cnlQb2ludCI6Ii5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sIn0sInBhcmFtZXRlcnMiOnt9LCJlbnZpcm9ubWVudCI6eyJnaXRodWJfYWN0b3IiOiJpYW5sZXdpcyIsImdpdGh1Yl9hY3Rvcl9pZCI6IjQ5Mjg5IiwiZ2l0aHViX2Jhc2VfcmVmIjoiIiwiZ2l0aHViX2V2ZW50X25hbWUiOiJwdXNoIiwiZ2l0aHViX2V2ZW50X3BheWxvYWQiOnsiYWZ0ZXIiOiI2Y2Y2NzFmNDdmMzc1MmY5N2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyIiwiYmFzZV9yZWYiOiJyZWZzL2hlYWRzL21haW4iLCJiZWZvcmUiOiIwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwiY29tbWl0cyI6W10sImNvbXBhcmUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbXBhcmUvdjE0LjIiLCJjcmVhdGVkIjp0cnVlLCJkZWxldGVkIjpmYWxzZSwiZm9yY2VkIjpmYWxzZSwiaGVhZF9jb21taXQiOnsiYXV0aG9yIjp7ImVtYWlsIjoiaWFubGV3aXNAZ29vZ2xlLmNvbSIsIm5hbWUiOiJJYW4gTGV3aXMiLCJ1c2VybmFtZSI6Imlhbmxld2lzIn0sImNvbW1pdHRlciI6eyJlbWFpbCI6Im5vcmVwbHlAZ2l0aHViLmNvbSIsIm5hbWUiOiJHaXRIdWIiLCJ1c2VybmFtZSI6IndlYi1mbG93In0sImRpc3RpbmN0Ijp0cnVlLCJpZCI6IjZjZjY3MWY0N2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIiLCJtZXNzYWdlIjoiVXBkYXRlIHZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sXG5cblNpZ25lZC1vZmYtYnk6IElhbiBMZXdpcyBcdTAwM2NpYW5sZXdpc0Bnb29nbGUuY29tXHUwMDNlIiwidGltZXN0YW1wIjoiMjAyMy0wOC0wNFQxNDoyNjowOCswOTowMCIsInRyZWVfaWQiOiI4MjAyYTlhNzA3NTE3YTJlZTNlMjVlYzM0YmRjMzhjODZhM2VkZGI2IiwidXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXQvNmNmNjcxZjQ3ZjM3NTJmOTdiOWY1YmZmNTExZTM3YjkzOGZlMTBkMiJ9LCJvcmdhbml6YXRpb24iOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS84MDQzMTE4Nz92PTQiLCJkZXNjcmlwdGlvbiI6IlN1cHBseS1jaGFpbiBMZXZlbHMgZm9yIFNvZnR3YXJlIEFydGlmYWN0cyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvZXZlbnRzIiwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2hvb2tzIiwiaWQiOjgwNDMxMTg3LCJpc3N1ZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2lzc3VlcyIsImxvZ2luIjoic2xzYS1mcmFtZXdvcmsiLCJtZW1iZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9tZW1iZXJzey9tZW1iZXJ9Iiwibm9kZV9pZCI6Ik1ERXlPazl5WjJGdWFYcGhkR2x2Ympnd05ETXhNVGczIiwicHVibGljX21lbWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3B1YmxpY19tZW1iZXJzey9tZW1iZXJ9IiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3JlcG9zIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrIn0sInB1c2hlciI6eyJlbWFpbCI6Imlhbmxld2lzQGdvb2dsZS5jb20iLCJuYW1lIjoiaWFubGV3aXMifSwicmVmIjoicmVmcy90YWdzL3YxNC4yIiwicmVwb3NpdG9yeSI6eyJhbGxvd19mb3JraW5nIjp0cnVlLCJhcmNoaXZlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3thcmNoaXZlX2Zvcm1hdH17L3JlZn0iLCJhcmNoaXZlZCI6ZmFsc2UsImFzc2lnbmVlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hc3NpZ25lZXN7L3VzZXJ9IiwiYmxvYnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L2Jsb2Jzey9zaGF9IiwiYnJhbmNoZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYnJhbmNoZXN7L2JyYW5jaH0iLCJjbG9uZV91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsImNvbGxhYm9yYXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29sbGFib3JhdG9yc3svY29sbGFib3JhdG9yfSIsImNvbW1lbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1lbnRzey9udW1iZXJ9IiwiY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXRzey9zaGF9IiwiY29tcGFyZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21wYXJlL3tiYXNlfS4uLntoZWFkfSIsImNvbnRlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbnRlbnRzL3srcGF0aH0iLCJjb250cmlidXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29udHJpYnV0b3JzIiwiY3JlYXRlZF9hdCI6MTY1MTA4Nzg0MywiZGVmYXVsdF9icmFuY2giOiJtYWluIiwiZGVwbG95bWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZGVwbG95bWVudHMiLCJkZXNjcmlwdGlvbiI6bnVsbCwiZGlzYWJsZWQiOmZhbHNlLCJkb3dubG9hZHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZG93bmxvYWRzIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2V2ZW50cyIsImZvcmsiOmZhbHNlLCJmb3JrcyI6MjAsImZvcmtzX2NvdW50IjoyMCwiZm9ya3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZm9ya3MiLCJmdWxsX25hbWUiOiJzbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJnaXRfY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvY29tbWl0c3svc2hhfSIsImdpdF9yZWZzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9yZWZzey9zaGF9IiwiZ2l0X3RhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RhZ3N7L3NoYX0iLCJnaXRfdXJsIjoiZ2l0Oi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0IiwiaGFzX2Rpc2N1c3Npb25zIjpmYWxzZSwiaGFzX2Rvd25sb2FkcyI6dHJ1ZSwiaGFzX2lzc3VlcyI6dHJ1ZSwiaGFzX3BhZ2VzIjpmYWxzZSwiaGFzX3Byb2plY3RzIjp0cnVlLCJoYXNfd2lraSI6dHJ1ZSwiaG9tZXBhZ2UiOm51bGwsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2hvb2tzIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlIiwiaWQiOjQ4NjMyNTgwOSwiaXNfdGVtcGxhdGUiOmZhbHNlLCJpc3N1ZV9jb21tZW50X3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsImlzc3VlX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9pc3N1ZXMvZXZlbnRzey9udW1iZXJ9IiwiaXNzdWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlc3svbnVtYmVyfSIsImtleXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uva2V5c3sva2V5X2lkfSIsImxhYmVsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9sYWJlbHN7L25hbWV9IiwibGFuZ3VhZ2UiOiJUeXBlU2NyaXB0IiwibGFuZ3VhZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2xhbmd1YWdlcyIsImxpY2Vuc2UiOnsia2V5IjoiYXBhY2hlLTIuMCIsIm5hbWUiOiJBcGFjaGUgTGljZW5zZSAyLjAiLCJub2RlX2lkIjoiTURjNlRHbGpaVzV6WlRJPSIsInNwZHhfaWQiOiJBcGFjaGUtMi4wIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIn0sIm1hc3Rlcl9icmFuY2giOiJtYWluIiwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL21lcmdlcyIsIm1pbGVzdG9uZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbWlsZXN0b25lc3svbnVtYmVyfSIsIm1pcnJvcl91cmwiOm51bGwsIm5hbWUiOiJleGFtcGxlLXBhY2thZ2UiLCJub2RlX2lkIjoiUl9rZ0RPSFB5LU1RIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9ub3RpZmljYXRpb25zez9zaW5jZSxhbGwscGFydGljaXBhdGluZ30iLCJvcGVuX2lzc3VlcyI6NDEsIm9wZW5faXNzdWVzX2NvdW50Ijo0MSwib3JnYW5pemF0aW9uIjoic2xzYS1mcmFtZXdvcmsiLCJvd25lciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzgwNDMxMTg3P3Y9NCIsImVtYWlsIjpudWxsLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9ldmVudHN7L3ByaXZhY3l9IiwiZm9sbG93ZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93ZXJzIiwiZm9sbG93aW5nX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsImdpc3RzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZ2lzdHN7L2dpc3RfaWR9IiwiZ3JhdmF0YXJfaWQiOiIiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yayIsImlkIjo4MDQzMTE4NywibG9naW4iOiJzbHNhLWZyYW1ld29yayIsIm5hbWUiOiJzbHNhLWZyYW1ld29yayIsIm5vZGVfaWQiOiJNREV5T2s5eVoyRnVhWHBoZEdsdmJqZ3dORE14TVRnMyIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9zdWJzY3JpcHRpb25zIiwidHlwZSI6Ik9yZ2FuaXphdGlvbiIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsifSwicHJpdmF0ZSI6ZmFsc2UsInB1bGxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3B1bGxzey9udW1iZXJ9IiwicHVzaGVkX2F0IjoxNjkxMTI2ODA1LCJyZWxlYXNlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6NjMyMywic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOnNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJzdGFyZ2F6ZXJzIjoxMSwic3RhcmdhemVyc19jb3VudCI6MTEsInN0YXJnYXplcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3N0YXR1c2VzL3tzaGF9Iiwic3Vic2NyaWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaWJlcnMiLCJzdWJzY3JpcHRpb25fdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ0YWdzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RhZ3MiLCJ0ZWFtc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC90cmVlc3svc2hhfSIsInVwZGF0ZWRfYXQiOiIyMDIzLTA4LTAyVDIwOjA5OjQzWiIsInVybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ2aXNpYmlsaXR5IjoicHVibGljIiwid2F0Y2hlcnMiOjExLCJ3YXRjaGVyc19jb3VudCI6MTEsIndlYl9jb21taXRfc2lnbm9mZl9yZXF1aXJlZCI6dHJ1ZX0sInNlbmRlciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzQ5Mjg5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2lhbmxld2lzIiwiaWQiOjQ5Mjg5LCJsb2dpbiI6Imlhbmxld2lzIiwibm9kZV9pZCI6Ik1EUTZWWE5sY2pRNU1qZzUiLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcyJ9fSwiZ2l0aHViX2hlYWRfcmVmIjoiIiwiZ2l0aHViX3JlZiI6InJlZnMvdGFncy92MTQuMiIsImdpdGh1Yl9yZWZfdHlwZSI6InRhZyIsImdpdGh1Yl9yZXBvc2l0b3J5X2lkIjoiNDg2MzI1ODA5IiwiZ2l0aHViX3JlcG9zaXRvcnlfb3duZXIiOiJzbHNhLWZyYW1ld29yayIsImdpdGh1Yl9yZXBvc2l0b3J5X293bmVyX2lkIjoiODA0MzExODciLCJnaXRodWJfcnVuX2F0dGVtcHQiOiIxIiwiZ2l0aHViX3J1bl9pZCI6IjU3NTg3NzYzMDQiLCJnaXRodWJfcnVuX251bWJlciI6IjY5IiwiZ2l0aHViX3NoYTEiOiI2Y2Y2NzFmNDdmMzc1MmY5N2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyIn19LCJtZXRhZGF0YSI6eyJidWlsZEludm9jYXRpb25JRCI6IjU3NTg3NzYzMDQtMSIsImNvbXBsZXRlbmVzcyI6eyJwYXJhbWV0ZXJzIjp0cnVlLCJlbnZpcm9ubWVudCI6ZmFsc2UsIm1hdGVyaWFscyI6ZmFsc2V9LCJyZXByb2R1Y2libGUiOmZhbHNlfSwibWF0ZXJpYWxzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZUByZWZzL3RhZ3MvdjE0LjIiLCJkaWdlc3QiOnsic2hhMSI6IjZjZjY3MWY0N2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIifX1dfX0=","signatures":[{"keyid":"","sig":"MEUCIEfpE1p+72g8xYenJEXsdyHTppAJMsrYjGXJB4131RjLAiEA96ZP5TgL3f8jldf93MA+g+sThgRH53SWzY9GSziSM5Y=","cert":"-----BEGIN CERTIFICATE-----\nMIIHkzCCBxmgAwIBAgIUffblinR7cT8m4a9uJKEKtmmDpqMwCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjMwODA0MDUyOTI1WhcNMjMwODA0MDUzOTI1WjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAE/ZX8IPvgVy85cwfcuN6e5ZBk64s4zC196+FT\n/7Dscwd9+BkogNzfoZliaE4vQ5b4RmkD2ruKvB3QmfpIQCsZRKOCBjgwggY0MA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUC3ey\n1STBXXaTei2kD9YbJof9x7kwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8wgYQGA1UdEQEB/wR6MHiGdmh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2Vu\nZXJhdG9yX2dlbmVyaWNfc2xzYTMueW1sQHJlZnMvdGFncy92MS44LjAwOQYKKwYB\nBAGDvzABAQQraHR0cHM6Ly90b2tlbi5hY3Rpb25zLmdpdGh1YnVzZXJjb250ZW50\nLmNvbTASBgorBgEEAYO/MAECBARwdXNoMDYGCisGAQQBg78wAQMEKDZjZjY3MWY0\nN2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIwVQYKKwYBBAGDvzABBARH\nLmdpdGh1Yi93b3JrZmxvd3MvdmVyaWZpZXItZTJlLmFsbC53b3JrZmxvd19kaXNw\nYXRjaC5tYWluLmFsbC5zbHNhMy55bWwwLAYKKwYBBAGDvzABBQQec2xzYS1mcmFt\nZXdvcmsvZXhhbXBsZS1wYWNrYWdlMB0GCisGAQQBg78wAQYED3JlZnMvdGFncy92\nMTQuMjA7BgorBgEEAYO/MAEIBC0MK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRo\ndWJ1c2VyY29udGVudC5jb20wgYYGCisGAQQBg78wAQkEeAx2aHR0cHM6Ly9naXRo\ndWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8uZ2l0\naHViL3dvcmtmbG93cy9nZW5lcmF0b3JfZ2VuZXJpY19zbHNhMy55bWxAcmVmcy90\nYWdzL3YxLjguMDA4BgorBgEEAYO/MAEKBCoMKGNkZWIzYTkxNjYxMGJjMDBhZjVk\nZWU4M2QxYWNkZDNjNzA3OTkyM2EwHQYKKwYBBAGDvzABCwQPDA1naXRodWItaG9z\ndGVkMEEGCisGAQQBg78wAQwEMwwxaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJh\nbWV3b3JrL2V4YW1wbGUtcGFja2FnZTA4BgorBgEEAYO/MAENBCoMKDZjZjY3MWY0\nN2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIwHwYKKwYBBAGDvzABDgQR\nDA9yZWZzL3RhZ3MvdjE0LjIwGQYKKwYBBAGDvzABDwQLDAk0ODYzMjU4MDkwMQYK\nKwYBBAGDvzABEAQjDCFodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsw\nGAYKKwYBBAGDvzABEQQKDAg4MDQzMTE4NzCBmwYKKwYBBAGDvzABEgSBjAyBiWh0\ndHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uv\nLmdpdGh1Yi93b3JrZmxvd3MvdmVyaWZpZXItZTJlLmFsbC53b3JrZmxvd19kaXNw\nYXRjaC5tYWluLmFsbC5zbHNhMy55bWxAcmVmcy90YWdzL3YxNC4yMDgGCisGAQQB\ng78wARMEKgwoNmNmNjcxZjQ3ZjM3NTJmOTdiOWY1YmZmNTExZTM3YjkzOGZlMTBk\nMjAUBgorBgEEAYO/MAEUBAYMBHB1c2gwZAYKKwYBBAGDvzABFQRWDFRodHRwczov\nL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2FjdGlv\nbnMvcnVucy81NzU4Nzc2MzA0L2F0dGVtcHRzLzEwFgYKKwYBBAGDvzABFgQIDAZw\ndWJsaWMwgYkGCisGAQQB1nkCBAIEewR5AHcAdQDdPTBqxscRMmMZHhyZZzcCokpe\nuN48rf+HinKALynujgAAAYm/BaTWAAAEAwBGMEQCIB9PdlzkJjEQJowA8Hf166ap\ng3AC26R+1zSzuxo/SMi0AiBYPQSsPoGOEsnLuDzabY8y23uh38wnlBgsB5Z9TpTg\nUDAKBggqhkjOPQQDAwNoADBlAjAoBq2VT+LM/H15GBuGJGusFuvVQnr81A3akC9e\nCbrtRr0crijYwyGhkC6jLwQUHM0CMQDpA67dICfnh94ads2+3QaZXkES+FKOHD/H\ncwWfOBpfGQ+4aTmz6srpXIHYlAafacs=\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..62c8496a1 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEYCIQDPcNUO9PoUNChvp2ECV8JSWrSfJ4ltcSt2fs164sgbFQIhALNput12zT7M386o5MZE4NX06WBAUtpl9D1Y5PZub79D","cert":"-----BEGIN CERTIFICATE-----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\nq6F65aoBQpsAvWqTpGdPQ/cmemQ=\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..730841ca5 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQDx0zP3XwJxhgotVTvLMDKNIo9n3dO6xO0gqbFlthaPJQIgc+r1ZHio5EhwPoPkN5r5vvVMW6qdsUvErcRg9fi47YM=","cert":"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..ebf75a45d --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQC6IEtoBL1D1g3YBEbIPyhp2gIs5lCb467mUzvFzpH9nQIgU6906YMON8Z+FmdwaedyhNhrHWJvxL1etMAznFbYcwY=","cert":"-----BEGIN CERTIFICATE-----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\n3wjLUqPXo6T6Twp2+0pEjibtlWrwvjBFxmrfDJb7xZcp\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..97df80b6a --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEYCIQC5MLFbdRLABWykWPrYJlgO6M8O5lCgf4zUu383DmvU2AIhAIE+duVgOF2/z1gGT4Fa6WxBWIAI1d7DJ+iB+RlO6hvy","cert":"-----BEGIN CERTIFICATE-----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\nwRtdL6grxiIzmPvitU3FEyivK3cFAUT6Bw==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..235315378 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCyOE+2rBxUW5Y7OeKoamzM2Pr0FNT8vaxvom/GgcSm+gIgKo+tNqcPIx8HaQPZZ8j0Xjw05hEW1JIrK3omzhwt3x8=","cert":"-----BEGIN CERTIFICATE-----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\nvGd7ZgD4QXILwWTWES9qCR6ZUes=\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..652d9fd2f Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..89dc6232a --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEYCIQCZkGqhZLeE1ljp3mCH8EOO+IDgDhuWXkLzxO4HNed5NwIhAPgpOXlY2s6Khz1xJoRfYE/NpxAaC2evWhDOJc6or2Uh","cert":"-----BEGIN CERTIFICATE-----\nMIIHrzCCBzWgAwIBAgIUCANx9frzJ9PmIeEKg4IqAvqZz90wCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjMwODIzMDUyMTQ4WhcNMjMwODIzMDUzMTQ4WjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAEpvDCAQ7L6Y3dqgYRvRwOvGwkn1fcaT/nrugt\ndGMPxcc/HZj4wupswgoacnr99GelAV82FPTwjoefA/6aPIwS8aOCBlQwggZQMA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUy9SB\n/r5zqvJX/VcU/SiRifZ9wnIwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8wgYQGA1UdEQEB/wR6MHiGdmh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2Vu\nZXJhdG9yX2dlbmVyaWNfc2xzYTMueW1sQHJlZnMvdGFncy92MS45LjAwOQYKKwYB\nBAGDvzABAQQraHR0cHM6Ly90b2tlbi5hY3Rpb25zLmdpdGh1YnVzZXJjb250ZW50\nLmNvbTAfBgorBgEEAYO/MAECBBF3b3JrZmxvd19kaXNwYXRjaDA2BgorBgEEAYO/\nMAEDBCgyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzMFUG\nCisGAQQBg78wAQQERy5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwu\nd29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sMCwGCisGAQQBg78w\nAQUEHnNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZTAdBgorBgEEAYO/MAEG\nBA9yZWZzL2hlYWRzL21haW4wOwYKKwYBBAGDvzABCAQtDCtodHRwczovL3Rva2Vu\nLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMIGGBgorBgEEAYO/MAEJBHgM\ndmh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1n\nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2VuZXJhdG9yX2dlbmVyaWNfc2xz\nYTMueW1sQHJlZnMvdGFncy92MS45LjAwOAYKKwYBBAGDvzABCgQqDCgwN2U2NGI2\nNTNmMTBhODBiNjUxMGY0NTY4ZjY4NWY4YjdiOWVhODMwMB0GCisGAQQBg78wAQsE\nDwwNZ2l0aHViLWhvc3RlZDBBBgorBgEEAYO/MAEMBDMMMWh0dHBzOi8vZ2l0aHVi\nLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UwOAYKKwYBBAGDvzAB\nDQQqDCgyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzMB8G\nCisGAQQBg78wAQ4EEQwPcmVmcy9oZWFkcy9tYWluMBkGCisGAQQBg78wAQ8ECwwJ\nNDg2MzI1ODA5MDEGCisGAQQBg78wARAEIwwhaHR0cHM6Ly9naXRodWIuY29tL3Ns\nc2EtZnJhbWV3b3JrMBgGCisGAQQBg78wAREECgwIODA0MzExODcwgZsGCisGAQQB\ng78wARIEgYwMgYlodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhh\nbXBsZS1wYWNrYWdlLy5naXRodWIvd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwu\nd29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sQHJlZnMvaGVhZHMv\nbWFpbjA4BgorBgEEAYO/MAETBCoMKDJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4\nNTdiM2E2ZjE4ZGY5MzMwIQYKKwYBBAGDvzABFAQTDBF3b3JrZmxvd19kaXNwYXRj\naDBkBgorBgEEAYO/MAEVBFYMVGh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9leGFtcGxlLXBhY2thZ2UvYWN0aW9ucy9ydW5zLzU5NDczNDA2NzcvYXR0\nZW1wdHMvMTAWBgorBgEEAYO/MAEWBAgMBnB1YmxpYzCBiwYKKwYBBAHWeQIEAgR9\nBHsAeQB3AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABiiDXgX0A\nAAQDAEgwRgIhAMenjJObABbRHynEk7DHVi53e9WDibKxoK5IXydCIUczAiEAzbUu\nG3TWB3teyEynW6fu5OXsGEuiHPUpfVzGIxkS7eMwCgYIKoZIzj0EAwMDaAAwZQIw\nR9X7ikfA4gRaWYXFDqORwLVyOFiDA/Clv8LaLS6SvouQ+x9DKL5oOY2U6shfWdvV\nAjEAkEyUZttvWf2NwE4kIdpIe6try/xefHB3saGCJuwP48qFCi5YbxuYUchLk7ps\najE6\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch.digest b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch.digest new file mode 100644 index 000000000..7299c159b --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch.digest @@ -0,0 +1 @@ +sha256:0159a9079cf264809b03fef298492057b31d221c4d22211730942877caa658a1 \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/0159a9079cf264809b03fef298492057b31d221c4d22211730942877caa658a1 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/0159a9079cf264809b03fef298492057b31d221c4d22211730942877caa658a1 new file mode 100755 index 000000000..444509ed4 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/0159a9079cf264809b03fef298492057b31d221c4d22211730942877caa658a1 @@ -0,0 +1,28 @@ +{ + "mediaType": "application/vnd.oci.image.index.v1+json", + "schemaVersion": 2, + "manifests": [ + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:7cd9684be65e37236fb3580a327fab44f225d22bc1b8f9ab8fa08c9b85f055ec", + "size": 2183, + "platform": { + "architecture": "amd64", + "os": "linux" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:ffda0195ed228772f6b4753d58f762c7e952566f174a49fe5cb1fb775eddf81b", + "size": 567, + "annotations": { + "vnd.docker.reference.digest": "sha256:7cd9684be65e37236fb3580a327fab44f225d22bc1b8f9ab8fa08c9b85f055ec", + "vnd.docker.reference.type": "attestation-manifest" + }, + "platform": { + "architecture": "unknown", + "os": "unknown" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/035c17888bfa045e9bafc3538bf8c41c3da87c502f5ec5515795c134801dbb83 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/035c17888bfa045e9bafc3538bf8c41c3da87c502f5ec5515795c134801dbb83 new file mode 100644 index 000000000..ebf9ac792 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/035c17888bfa045e9bafc3538bf8c41c3da87c502f5ec5515795c134801dbb83 @@ -0,0 +1 @@ +{"architecture":"amd64","config":{"User":"0","Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Entrypoint":["/app"],"WorkingDir":"/","Labels":{"org.opencontainers.image.created":"2023-05-24T01:31:44.950Z","org.opencontainers.image.description":"","org.opencontainers.image.licenses":"Apache-2.0","org.opencontainers.image.revision":"c14c546e54940a410195ede9aa0e7ee2ef1e16d0","org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","org.opencontainers.image.title":"example-package","org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","org.opencontainers.image.version":"main"},"OnBuild":null},"created":"2023-05-24T01:32:17.657730283Z","history":[{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"2023-05-24T01:32:17.657730283Z","created_by":"COPY /app/app /app # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2023-05-24T01:32:17.657730283Z","created_by":"ENTRYPOINT [\"/app\"]","comment":"buildkit.dockerfile.v0","empty_layer":true}],"moby.buildkit.buildinfo.v1":"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","os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:e023e0e48e6e29e90e519f4dd356d058ff2bffbd16e28b802f3b8f93aa4ccb17","sha256:6fbdf253bbc2490dcfede5bdb58ca0db63ee8aff565f6ea9f918f3bce9e2d5aa","sha256:7bea6b893187b14fc0a759fe5f8972d1292a9c0554c87cbf485f0947c26b8a05","sha256:ff5700ec54186528cbae40f54c24b1a34fb7c01527beaa1232868c16e2353f52","sha256:d52f02c6501c9c4410568f0bf6ff30d30d8290f57794c308fe36ea78393afac2","sha256:e624a5370eca2b8266e74d179326e2a8767d361db14d13edd9fb57e408731784","sha256:1a73b54f556b477f0a8b939d13c504a3b4f4db71f7a09c63afbc10acb3de5849","sha256:d2d7ec0f6756eb51cf1602c6f8ac4dd811d3d052661142e0110357bf0b581457","sha256:4cb10dd2545bd173858450b80853b850e49608260f1a0789e0d0b39edf12f500","sha256:d6d5defa34c97aa9d82bf4fba3b81dbea423afbda4cc05938ba8e34f2dd6c160"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/190def49e59cb5feba0b5ce5958f71188ae602538316cf90cd48b0b11def6e87 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/190def49e59cb5feba0b5ce5958f71188ae602538316cf90cd48b0b11def6e87 new file mode 100644 index 000000000..2d378f8f1 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/190def49e59cb5feba0b5ce5958f71188ae602538316cf90cd48b0b11def6e87 @@ -0,0 +1 @@ +{"architecture":"","created":"2023-05-24T01:34:09.133330173Z","history":[{"created":"0001-01-01T00:00:00Z"}],"os":"","rootfs":{"type":"layers","diff_ids":["sha256:6a353e333eb116103813d4912f0b8d06e747412299b52f92a21bf87c1c54680a"]},"config":{}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/1b7e72ba31845231a69a6db723a1e4f0290813183eaa31c8d60d3c16c6d71d23 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/1b7e72ba31845231a69a6db723a1e4f0290813183eaa31c8d60d3c16c6d71d23 new file mode 100644 index 000000000..eb3d01503 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/1b7e72ba31845231a69a6db723a1e4f0290813183eaa31c8d60d3c16c6d71d23 @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":243,"digest":"sha256:190def49e59cb5feba0b5ce5958f71188ae602538316cf90cd48b0b11def6e87"},"layers":[{"mediaType":"application/vnd.dsse.envelope.v1+json","size":12132,"digest":"sha256:6a353e333eb116103813d4912f0b8d06e747412299b52f92a21bf87c1c54680a","annotations":{"dev.cosignproject.cosign/signature":"","dev.sigstore.cosign/bundle":"{\"SignedEntryTimestamp\":\"MEQCIHE/brzjP/618gW/OU4uIm/ADDFhk1Mui1i14Ia1IUVpAiARFKCDJH6Wlgu1bODhpB1U9CQU9uz0QhpG2wY6dFtFOQ==\",\"Payload\":{\"body\":\"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI2YTM1M2UzMzNlYjExNjEwMzgxM2Q0OTEyZjBiOGQwNmU3NDc0MTIyOTliNTJmOTJhMjFiZjg3YzFjNTQ2ODBhIn0sInBheWxvYWRIYXNoIjp7ImFsZ29yaXRobSI6InNoYTI1NiIsInZhbHVlIjoiN2MwMDYwNzk5YjQyNDc4M2FkMTI5NjllMWQwODRmZmJjOTlmYTVjZjk5ZmQxZDc4MWM5OWM3ZDMzZTFjYWNmZSJ9fSwicHVibGljS2V5IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVaHRWRU5EUW5sRFowRjNTVUpCWjBsVlJEbE5XbTVPVUdscWRrZHRiWFZ3U2pVMU1HNVpiV2NyVkcwNGQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcE5kMDVVU1RCTlJFVjZUa1JCTTFkb1kwNU5hazEzVGxSSk1FMUVSVEJPUkVFelYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZKVG5sT1RWVm9iSG80WVZVemJrdG1WVE5hU2tjelJTOUxaR3M1SzBRemRFSllhVlFLVFdKQ00zQmtVRmR0YUZsdWNFWmhWMDVQWjBoaU1rWlVTMHR2T1dzeGIxWnJXVkZNUldsWWFHOU9LMHBFVWpSTlVEWlBRMEpxT0hkbloxazNUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZvY0U5bUNsbEtXV1IzYUdJek5HbEdhR1ZxZERaSFYwcG5aRUpuZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDJkWldVZEJNVlZrUlZGRlFpOTNVamhOU0hGSFpVZG9NR1JJUW5wUGFUaDJXakpzTUdGSVZtbE1iVTUyWWxNNWVtSklUbWhNVjFwNVdWY3hiQXBrTWpsNVlYazVlbUpJVG1oTVYyUndaRWRvTVZscE1XNWFWelZzWTIxR01HSXpTWFpNYldSd1pFZG9NVmxwT1ROaU0wcHlXbTE0ZG1RelRYWmFNbFoxQ2xwWVNtaGtSemw1V0RKT2RtSnVVbWhoVnpWc1kydzVlbUpJVG1oTmVUVTFZbGQ0UVdOdFZtMWplVGt3V1Zka2Vrd3pXWGhNYWxsMVRVUkJOVUpuYjNJS1FtZEZSVUZaVHk5TlFVVkNRa04wYjJSSVVuZGplbTkyVEROU2RtRXlWblZNYlVacVpFZHNkbUp1VFhWYU1td3dZVWhXYVdSWVRteGpiVTUyWW01U2JBcGlibEYxV1RJNWRFMUNPRWREYVhOSFFWRlJRbWMzT0hkQlVVbEZSVmhrZG1OdGRHMWlSemt6V0RKU2NHTXpRbWhrUjA1dlRVUlpSME5wYzBkQlVWRkNDbWMzT0hkQlVVMUZTMGROZUU1SFRURk9SRnBzVGxSUk5VNUVRbWhPUkVWM1RWUnJNVnBYVW14UFYwWm9UVWRWTTFwWFZYbGFWMWw0V2xSRk1scEVRWGNLVmxGWlMwdDNXVUpDUVVkRWRucEJRa0pCVWtoTWJXUndaRWRvTVZscE9UTmlNMHB5V20xNGRtUXpUWFprYlZaNVlWZGFjRnBZU1hSYVZFcHNURzFHY3dwaVF6VXpZak5LY2xwdGVIWmtNVGxyWVZoT2QxbFlVbXBoUXpWMFdWZHNkVXh0Um5OaVF6VjZZa2hPYUUxNU5UVmlWM2QzVEVGWlMwdDNXVUpDUVVkRUNuWjZRVUpDVVZGbFl6SjRlbGxUTVcxamJVWjBXbGhrZG1OdGMzWmFXR2hvWWxoQ2MxcFRNWGRaVjA1eVdWZGtiRTFDTUVkRGFYTkhRVkZSUW1jM09IY0tRVkZaUlVRelNteGFiazEyWVVkV2FGcElUWFppVjBad1ltcEJOMEpuYjNKQ1owVkZRVmxQTDAxQlJVbENRekJOU3pKb01HUklRbnBQYVRoMlpFYzVjZ3BhVnpSMVdWZE9NR0ZYT1hWamVUVnVZVmhTYjJSWFNqRmpNbFo1V1RJNWRXUkhWblZrUXpWcVlqSXdkMmRaWjBkRGFYTkhRVkZSUW1jM09IZEJVV3RGQ21WbmVEUmhTRkl3WTBoTk5reDVPVzVoV0ZKdlpGZEpkVmt5T1hSTU0wNXpZekpGZEZwdVNtaGlWMVl6WWpOS2Nrd3pUbk5qTWtWMFdqSnNNR0ZJVm1rS1RGZGtiR0p0Vm5sWldGSjJZMms0ZFZveWJEQmhTRlpwVEROa2RtTnRkRzFpUnprelkzazVibHBYTld4amJVWXdZak5LWmxreU9YVmtSMFp3WW0xV2VRcFlNMDV6WXpKRmVreHViSFJpUlVKNVdsZGFla3d6VW1oYU0wMTJaR3BGZFU1cE5IZE5SR2RIUTJselIwRlJVVUpuTnpoM1FWRnZSVXRuZDI5TlJHTXpDazlYV1ROWmJWWnFUbXBvYkUxdFNtMU9WRkpvVGpKSmQxbFVUWGxaYlZrd1RucFplbHBxU1RGWlYwbDVUMVJqZDAxcVFXUkNaMjl5UW1kRlJVRlpUeThLVFVGRlRFSkJPRTFFVjJSd1pFZG9NVmxwTVc5aU0wNHdXbGRSZDFGUldVdExkMWxDUWtGSFJIWjZRVUpFUVZGNlJFUkdiMlJJVW5kamVtOTJUREprY0Fwa1IyZ3hXV2sxYW1JeU1IWmpNbmg2V1ZNeGJXTnRSblJhV0dSMlkyMXpkbHBZYUdoaVdFSnpXbE14ZDFsWFRuSlpWMlJzVFVSblIwTnBjMGRCVVZGQ0NtYzNPSGRCVVRCRlMyZDNiMWw2UlRCWmVsVXdUbTFWTVU1RWF6Qk5SMFV3VFZSQmVFOVVWbXhhUjFVMVdWZEZkMXBVWkd4YVZFcHNXbXBHYkUxVVdtc0tUVVJCWmtKbmIzSkNaMFZGUVZsUEwwMUJSVTlDUWtWTlJETktiRnB1VFhaaFIxWm9Xa2hOZG1KWFJuQmlha0ZhUW1kdmNrSm5SVVZCV1U4dlRVRkZVQXBDUVhOTlExUlJORTVxVFhsT1ZHZDNUMVJCZUVKbmIzSkNaMFZGUVZsUEwwMUJSVkZDUTAxTlNWZG9NR1JJUW5wUGFUaDJXakpzTUdGSVZtbE1iVTUyQ21KVE9YcGlTRTVvVEZkYWVWbFhNV3hrTWpsNVlYcEJXVUpuYjNKQ1owVkZRVmxQTDAxQlJWSkNRVzlOUTBSbmQwNUVUWGhOVkdjelRVbEhZa0puYjNJS1FtZEZSVUZaVHk5TlFVVlRRa2xIVFVSSlIwcGhTRkl3WTBoTk5reDVPVzVoV0ZKdlpGZEpkVmt5T1hSTU0wNXpZekpGZEZwdVNtaGlWMVl6WWpOS2NncE1NbFkwV1ZjeGQySkhWWFJqUjBacVlUSkdibHBUT0hWYU1td3dZVWhXYVV3elpIWmpiWFJ0WWtjNU0yTjVPVEphV0Vwd1dtMXNiR05wTVd4TmJWVjFDbGxYZUhOTWJtUjJZMjEwYldKSE9UTllNbEp3WXpOQ2FHUkhUbTlNYlRGb1lWYzBkVmxYZUhOTWJrNXpZekpGZWt4dWJIUmlSVUo1V2xkYWVrd3lhR3dLV1ZkU2Vrd3lNV2hoVnpSM1QwRlpTMHQzV1VKQ1FVZEVkbnBCUWtWM1VYRkVRMmhxVFZSU2FrNVVVVEphVkZVd1QxUlJkMWxVVVhoTlJFVTFUbGRXYXdwYVZHeG9XVlJDYkU0eVZteE5iVlp0VFZkVmVFNXRVWGROUTBWSFEybHpSMEZSVVVKbk56aDNRVkpSUlVWM2QxSmtNamw1WVRKYWMySXpaR1phUjJ4NkNtTkhSakJaTW1kM1drRlpTMHQzV1VKQ1FVZEVkbnBCUWtaUlVsZEVSbEp2WkVoU2QyTjZiM1pNTW1Sd1pFZG9NVmxwTldwaU1qQjJZeko0ZWxsVE1XMEtZMjFHZEZwWVpIWmpiWE4yV2xob2FHSllRbk5hVXpGM1dWZE9jbGxYWkd4TU1rWnFaRWRzZG1KdVRYWmpibFoxWTNrNE1VMUVXWHBPZWtFMVRVUkplUXBNTWtZd1pFZFdkR05JVW5wTWVrVjNaMWx2UjBOcGMwZEJVVkZDTVc1clEwSkJTVVZtUVZJMlFVaG5RV1JuUkdSUVZFSnhlSE5qVWsxdFRWcElhSGxhQ2xwNlkwTnZhM0JsZFU0ME9ISm1LMGhwYmt0QlRIbHVkV3BuUVVGQldXaE1Xa1pvUjBGQlFVVkJkMEpJVFVWVlEwbElSRGhQVEc5SVNWbzBkek5aWVZrS1NsQlpiMnRLVlZSVlJrczFaQzlTTjJNemRqbHVPR0psVG10R2NrRnBSVUV3VnpReVJXTjZSVlJWWVZab1lWVlFOR2xKTkhRNEwxbFhZa3R1WjA1T2JBbzNUM0k0VVM5MVNqUnVaM2REWjFsSlMyOWFTWHBxTUVWQmQwMUVXbmRCZDFwQlNYZGtUVlJ3Vm0welJXbFVWVFp0YUZsSFlWcFhOMVZHVm1OemRXSnRDa3hYVm1oTlJVNTNZMlJwY0N0VlFYUkJlWGhQUkZsUloyMVNaRzEzU20xNVJHWlRZVUZxUWtkM1RISTFjV3AxVG5KeVJFZzFPVGxDYkVsRldqaFZla2tLVUU5NVNuVTNOM1oxYjFCU2VHVjRNRXRYZHpoaFZFZFFaUzlxVUM5dGNrcG5aakZhYWpKelBRb3RMUzB0TFVWT1JDQkRSVkpVU1VaSlEwRlVSUzB0TFMwdENnPT0ifX0=\",\"integratedTime\":1684892047,\"logIndex\":21488498,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}","dev.sigstore.cosign/certificate":"-----BEGIN CERTIFICATE-----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\nPOyJu77vuoPRxex0KWw8aTGPe/jP/mrJgf1Zj2s=\n-----END CERTIFICATE-----\n","dev.sigstore.cosign/chain":"-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIIB9zCCAXygAwIBAgIUALZNAPFdxHPwjeDloDwyYChAO/4wCgYIKoZIzj0EAwMw\nKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0y\nMTEwMDcxMzU2NTlaFw0zMTEwMDUxMzU2NThaMCoxFTATBgNVBAoTDHNpZ3N0b3Jl\nLmRldjERMA8GA1UEAxMIc2lnc3RvcmUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAT7\nXeFT4rb3PQGwS4IajtLk3/OlnpgangaBclYpsYBr5i+4ynB07ceb3LP0OIOZdxex\nX69c5iVuyJRQ+Hz05yi+UF3uBWAlHpiS5sh0+H2GHE7SXrk1EC5m1Tr19L9gg92j\nYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRY\nwB5fkUWlZql6zJChkyLQKsXF+jAfBgNVHSMEGDAWgBRYwB5fkUWlZql6zJChkyLQ\nKsXF+jAKBggqhkjOPQQDAwNpADBmAjEAj1nHeXZp+13NWBNa+EDsDP8G1WWg1tCM\nWP/WHPqpaVo0jhsweNFZgSs0eE7wYI4qAjEA2WB9ot98sIkoF3vZYdd3/VtWB5b9\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----","predicateType":"https://slsa.dev/provenance/v0.2"}}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c new file mode 100644 index 000000000..b972ff1dd Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f new file mode 100644 index 000000000..2c6cd5b63 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/4bafca3e878040ec2f918e456650ee667ae03e8dc819e26353bf42bd60dee9c2 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/4bafca3e878040ec2f918e456650ee667ae03e8dc819e26353bf42bd60dee9c2 new file mode 100644 index 000000000..2ec2359fd Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/4bafca3e878040ec2f918e456650ee667ae03e8dc819e26353bf42bd60dee9c2 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a new file mode 100644 index 000000000..6dcc4d33a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/6a353e333eb116103813d4912f0b8d06e747412299b52f92a21bf87c1c54680a b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/6a353e333eb116103813d4912f0b8d06e747412299b52f92a21bf87c1c54680a new file mode 100644 index 000000000..5de394870 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/6a353e333eb116103813d4912f0b8d06e747412299b52f92a21bf87c1c54680a @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQC47ecnMCzTWfjRP4AoY7D+qofJRObeCd3yCaHzNEDXIwIgJRIDfPknlaDHQlewCiYLndYfFcjmOxgkjUPleF3ZHw4="}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c new file mode 100644 index 000000000..17dec20d0 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7cd9684be65e37236fb3580a327fab44f225d22bc1b8f9ab8fa08c9b85f055ec b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7cd9684be65e37236fb3580a327fab44f225d22bc1b8f9ab8fa08c9b85f055ec new file mode 100644 index 000000000..667126c91 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7cd9684be65e37236fb3580a327fab44f225d22bc1b8f9ab8fa08c9b85f055ec @@ -0,0 +1,61 @@ +{ + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "schemaVersion": 2, + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:035c17888bfa045e9bafc3538bf8c41c3da87c502f5ec5515795c134801dbb83", + "size": 3028 + }, + "layers": [ + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639", + "size": 103732 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58", + "size": 21202 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db", + "size": 716491 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265", + "size": 317 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0", + "size": 198 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c", + "size": 113 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f", + "size": 385 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c", + "size": 355 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a", + "size": 130562 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:4bafca3e878040ec2f918e456650ee667ae03e8dc819e26353bf42bd60dee9c2", + "size": 647979 + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7fd9e31f7e252fc043edccba825b85398e7582643ce743be35ad7107fe0c5ea7 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7fd9e31f7e252fc043edccba825b85398e7582643ce743be35ad7107fe0c5ea7 new file mode 100644 index 000000000..83f24223d --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/7fd9e31f7e252fc043edccba825b85398e7582643ce743be35ad7107fe0c5ea7 @@ -0,0 +1 @@ +{"architecture":"unknown","os":"unknown","config":{},"rootfs":{"type":"layers","diff_ids":["sha256:90bd5e7ffe5c5c94a631ce42a5483325703d0a9d0a70cccdbceae99e89dbb016"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/90bd5e7ffe5c5c94a631ce42a5483325703d0a9d0a70cccdbceae99e89dbb016 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/90bd5e7ffe5c5c94a631ce42a5483325703d0a9d0a70cccdbceae99e89dbb016 new file mode 100644 index 000000000..e60aba1e2 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/90bd5e7ffe5c5c94a631ce42a5483325703d0a9d0a70cccdbceae99e89dbb016 @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.1","predicateType":"https://slsa.dev/provenance/v0.2","subject":[{"name":"pkg:docker/ghcr.io/slsa-framework/example-package.verifier-e2e.all.tag.main.default.slsa3@main?platform=linux%2Famd64","digest":{"sha256":"7cd9684be65e37236fb3580a327fab44f225d22bc1b8f9ab8fa08c9b85f055ec"}}],"predicate":{"builder":{"id":"https://github.com/slsa-framework/example-package/actions/runs/5063709022"},"buildType":"https://mobyproject.org/buildkit@v1","materials":[{"uri":"pkg:docker/golang@1.20?digest=sha256:685a22e459f9516f27d975c5cc6accc11223ee81fdfbbae60e39cc3b87357306\u0026platform=linux%2Famd64","digest":{"sha256":"685a22e459f9516f27d975c5cc6accc11223ee81fdfbbae60e39cc3b87357306"}},{"uri":"pkg:docker/gcr.io/distroless/static?digest=sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e\u0026platform=linux%2Famd64","digest":{"sha256":"7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},{"uri":"https://github.com/slsa-framework/example-package.git#c14c546e54940a410195ede9aa0e7ee2ef1e16d0","digest":{"sha1":"c14c546e54940a410195ede9aa0e7ee2ef1e16d0"}}],"invocation":{"configSource":{"uri":"https://github.com/slsa-framework/example-package.git#c14c546e54940a410195ede9aa0e7ee2ef1e16d0","digest":{"sha1":"c14c546e54940a410195ede9aa0e7ee2ef1e16d0"},"entryPoint":"Dockerfile"},"parameters":{"frontend":"dockerfile.v0","args":{"label:org.opencontainers.image.created":"2023-05-24T01:31:44.950Z","label:org.opencontainers.image.description":"","label:org.opencontainers.image.licenses":"Apache-2.0","label:org.opencontainers.image.revision":"c14c546e54940a410195ede9aa0e7ee2ef1e16d0","label:org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.title":"example-package","label:org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.version":"main"},"secrets":[{"id":"GIT_AUTH_HEADER","optional":true},{"id":"GIT_AUTH_TOKEN","optional":true}]},"environment":{"platform":"linux/amd64"}},"buildConfig":{"llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"docker-image://gcr.io/distroless/static@sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step1","op":{"Op":{"source":{"identifier":"docker-image://docker.io/library/golang:1.20@sha256:685a22e459f9516f27d975c5cc6accc11223ee81fdfbbae60e39cc3b87357306"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step2","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":-1,"output":0,"Action":{"mkdir":{"path":"/app","mode":493,"makeParents":true,"timestamp":-1}}}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step1:0"]},{"id":"step3","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#c14c546e54940a410195ede9aa0e7ee2ef1e16d0","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step4","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step2:0","step3:0"]},{"id":"step5","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","go get -d -v"],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.4","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step4:0"]},{"id":"step6","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","CGO_ENABLED=0 go build -ldflags=\"-w -s\" -v -o app ."],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.4","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step5:0"]},{"id":"step7","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/app/app","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step0:0","step6:0"]},{"id":"step8","op":{"Op":null},"inputs":["step7:0"]}],"digestMapping":{"sha256:51cb9cc2007e998ed1377a26d53bf5d38bd7aaff9d6ad5a9f7675d7d0cf64b4c":"step1","sha256:6478a99d0aea9701e5e3ed3b2fc21a91b3dd093b280e699d78794d427eabe8de":"step7","sha256:76a68b541a53a20d8ffbadbab61860d1c97bea6729f577b67d12abb55442aa28":"step5","sha256:7b3620039e5c1a7dd032dc3c334ad49b77779875585b3f893d5ed02350629fed":"step2","sha256:7f7143fde0bb513512ebab42c8e1ae3ed0f5f5de6fc61be2118cbfaf7454f632":"step6","sha256:870da2ded59e047464d47cc2f3980cfa72495626f9551bea4b6b892ddf191c5d":"step4","sha256:8f09375c18dc794fee6a9e4c7247acaa88398d162424c7fd0b56e43a3a7ebb6c":"step0","sha256:94c60c08d854ed15a26e7d8e765a31e17aa20d5c01c3c0f7841b04574158d7ca":"step3","sha256:db91c6435a71bd9a1f570d0e29fbbd10cbf93e6fdf1504ee9cf7564640718e65":"step8"}},"metadata":{"buildInvocationID":"j6fosxfpi15ygjfmg79swarf4","buildStartedOn":"2023-05-24T01:31:46.107002826Z","buildFinishedOn":"2023-05-24T01:32:17.789818808Z","completeness":{"parameters":true,"environment":true,"materials":true},"reproducible":false,"https://mobyproject.org/buildkit@v1#metadata":{"source":{"locations":{"step0":{"locations":[{"ranges":[{"start":{"line":13},"end":{"line":13}}]}]},"step1":{"locations":[{"ranges":[{"start":{"line":1},"end":{"line":1}}]}]},"step2":{"locations":[{"ranges":[{"start":{"line":3},"end":{"line":3}}]}]},"step3":{},"step4":{"locations":[{"ranges":[{"start":{"line":4},"end":{"line":4}}]}]},"step5":{"locations":[{"ranges":[{"start":{"line":6},"end":{"line":6}}]}]},"step6":{"locations":[{"ranges":[{"start":{"line":9},"end":{"line":9}}]}]},"step7":{"locations":[{"ranges":[{"start":{"line":15},"end":{"line":15}}]}]}},"infos":[{"filename":"Dockerfile","data":"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","llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#c14c546e54940a410195ede9aa0e7ee2ef1e16d0","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step1","op":{"Op":null},"inputs":["step0:0"]}],"digestMapping":{"sha256:94c60c08d854ed15a26e7d8e765a31e17aa20d5c01c3c0f7841b04574158d7ca":"step0","sha256:bcd6ad2ef458aee84c9c82278576998a633ea94e123e743b58f281c056e2f66d":"step1"}}]},"layers":{"step0:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}],[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}]],"step1:0":[[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:918547b9432687b1e1d238e82dc1e0ea0b736aafbf3c402eea98c6db81a9cb65","size":55049070},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5d79063a01c561833dc6546d4e647fda0121a59e1a9a17874a3e30854555475e","size":15760340},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:4eedd9c5abf7e5f63753a5e788cb0872a715fa1141e8ce5ea87638e6cd370a41","size":54584552},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:dccdd0152d2d0555ad1f2d5efaff828aeab701d8fe035fb5e4e0ff9aebb5621b","size":86030155},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:390e1150e8c78664a584e36df5cfc84bee76eaa1f5388ffd395edd4685a4dde1","size":100149101},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:766cb406aff2b1d8a4244c62b7422107d88d9d468f786cbc421145ca0cd2f1fb","size":155}],[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:918547b9432687b1e1d238e82dc1e0ea0b736aafbf3c402eea98c6db81a9cb65","size":55049070},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5d79063a01c561833dc6546d4e647fda0121a59e1a9a17874a3e30854555475e","size":15760340},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:4eedd9c5abf7e5f63753a5e788cb0872a715fa1141e8ce5ea87638e6cd370a41","size":54584552},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:dccdd0152d2d0555ad1f2d5efaff828aeab701d8fe035fb5e4e0ff9aebb5621b","size":86030155},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:390e1150e8c78664a584e36df5cfc84bee76eaa1f5388ffd395edd4685a4dde1","size":100149101},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:766cb406aff2b1d8a4244c62b7422107d88d9d468f786cbc421145ca0cd2f1fb","size":155}]],"step7:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4bafca3e878040ec2f918e456650ee667ae03e8dc819e26353bf42bd60dee9c2","size":647979}]]}}}}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 new file mode 100644 index 000000000..2f49092f3 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db new file mode 100644 index 000000000..0594c669b Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 new file mode 100644 index 000000000..3dc40828e Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 new file mode 100644 index 000000000..363737e18 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 new file mode 100644 index 000000000..0b81632a1 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/ffda0195ed228772f6b4753d58f762c7e952566f174a49fe5cb1fb775eddf81b b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/ffda0195ed228772f6b4753d58f762c7e952566f174a49fe5cb1fb775eddf81b new file mode 100644 index 000000000..29e04b345 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/blobs/sha256/ffda0195ed228772f6b4753d58f762c7e952566f174a49fe5cb1fb775eddf81b @@ -0,0 +1,19 @@ +{ + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "schemaVersion": 2, + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:7fd9e31f7e252fc043edccba825b85398e7582643ce743be35ad7107fe0c5ea7", + "size": 167 + }, + "layers": [ + { + "mediaType": "application/vnd.in-toto+json", + "digest": "sha256:90bd5e7ffe5c5c94a631ce42a5483325703d0a9d0a70cccdbceae99e89dbb016", + "size": 14169, + "annotations": { + "in-toto.io/predicate-type": "https://slsa.dev/provenance/v0.2" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/index.json b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/index.json new file mode 100755 index 000000000..53c93b27c --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/index.json @@ -0,0 +1,21 @@ +{ + "schemaVersion": 2, + "manifests": [ + { + "mediaType": "application/vnd.oci.image.index.v1+json", + "size": 856, + "digest": "sha256:0159a9079cf264809b03fef298492057b31d221c4d22211730942877caa658a1", + "annotations": { + "kind": "dev.cosignproject.cosign/imageIndex" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "size": 10368, + "digest": "sha256:1b7e72ba31845231a69a6db723a1e4f0290813183eaa31c8d60d3c16c6d71d23", + "annotations": { + "kind": "dev.cosignproject.cosign/atts" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/oci-layout b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/oci-layout new file mode 100755 index 000000000..224a86981 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.6.0/container_workflow_dispatch/oci-layout @@ -0,0 +1,3 @@ +{ + "imageLayoutVersion": "1.0.0" +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch.digest b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch.digest new file mode 100644 index 000000000..f06ce039e --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch.digest @@ -0,0 +1 @@ +sha256:ca6221e2d0def24e302530f727689a2ab8539a690c740527db33a520284cf141 \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c new file mode 100644 index 000000000..b972ff1dd Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/3b6bc85571318f9aaba55a5eb599a946b7492c0dfd8b5952760d0b5ce88e1558 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/3b6bc85571318f9aaba55a5eb599a946b7492c0dfd8b5952760d0b5ce88e1558 new file mode 100644 index 000000000..1f363e4be --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/3b6bc85571318f9aaba55a5eb599a946b7492c0dfd8b5952760d0b5ce88e1558 @@ -0,0 +1,19 @@ +{ + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "schemaVersion": 2, + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:a1abac53d6ea6d96603b6de85da053079ed7c86d2be4249b071cca747f588461", + "size": 167 + }, + "layers": [ + { + "mediaType": "application/vnd.in-toto+json", + "digest": "sha256:5df72ae6c51fcff1ee6bf5d3807841fd0490907ec0c2329f9559134ed48faeed", + "size": 14169, + "annotations": { + "in-toto.io/predicate-type": "https://slsa.dev/provenance/v0.2" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/4a1b72c77c15781687300c3b0362513b5b040ac33dcaee4e245c24621d494d4d b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/4a1b72c77c15781687300c3b0362513b5b040ac33dcaee4e245c24621d494d4d new file mode 100644 index 000000000..cb54f379f --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/4a1b72c77c15781687300c3b0362513b5b040ac33dcaee4e245c24621d494d4d @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEYCIQCEeqkqWwmnpRIhjsE6odCn0recw/p+CuETtmrnweGebwIhAMwYEj6zajYBhVZtbhFTtGiy1pbtWEBZ+u4NDII1EXTG"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f new file mode 100644 index 000000000..2c6cd5b63 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a new file mode 100644 index 000000000..6dcc4d33a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/590e0b6222ec244abc2806e267ec3fff1c77ab4a38d0c642ab7fed04855c0bb5 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/590e0b6222ec244abc2806e267ec3fff1c77ab4a38d0c642ab7fed04855c0bb5 new file mode 100644 index 000000000..8db52dfd5 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/590e0b6222ec244abc2806e267ec3fff1c77ab4a38d0c642ab7fed04855c0bb5 @@ -0,0 +1 @@ +{"architecture":"amd64","config":{"User":"0","Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Entrypoint":["/app"],"WorkingDir":"/","Labels":{"org.opencontainers.image.created":"2023-06-07T14:40:46.596Z","org.opencontainers.image.description":"","org.opencontainers.image.licenses":"Apache-2.0","org.opencontainers.image.revision":"62cb1f1e485829bafe8bbec8b9900c0cb7624fe7","org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","org.opencontainers.image.title":"example-package","org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","org.opencontainers.image.version":"main"},"OnBuild":null},"created":"2023-06-07T14:41:12.803853761Z","history":[{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"2023-06-07T14:41:12.803853761Z","created_by":"COPY /app/app /app # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2023-06-07T14:41:12.803853761Z","created_by":"ENTRYPOINT [\"/app\"]","comment":"buildkit.dockerfile.v0","empty_layer":true}],"moby.buildkit.buildinfo.v1":"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","os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:e023e0e48e6e29e90e519f4dd356d058ff2bffbd16e28b802f3b8f93aa4ccb17","sha256:6fbdf253bbc2490dcfede5bdb58ca0db63ee8aff565f6ea9f918f3bce9e2d5aa","sha256:7bea6b893187b14fc0a759fe5f8972d1292a9c0554c87cbf485f0947c26b8a05","sha256:ff5700ec54186528cbae40f54c24b1a34fb7c01527beaa1232868c16e2353f52","sha256:d52f02c6501c9c4410568f0bf6ff30d30d8290f57794c308fe36ea78393afac2","sha256:e624a5370eca2b8266e74d179326e2a8767d361db14d13edd9fb57e408731784","sha256:1a73b54f556b477f0a8b939d13c504a3b4f4db71f7a09c63afbc10acb3de5849","sha256:d2d7ec0f6756eb51cf1602c6f8ac4dd811d3d052661142e0110357bf0b581457","sha256:4cb10dd2545bd173858450b80853b850e49608260f1a0789e0d0b39edf12f500","sha256:ed089d1abe26528b53cac6ff540996a9bdb1d0f71763f985cbe0f38213134cb3"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/5df72ae6c51fcff1ee6bf5d3807841fd0490907ec0c2329f9559134ed48faeed b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/5df72ae6c51fcff1ee6bf5d3807841fd0490907ec0c2329f9559134ed48faeed new file mode 100644 index 000000000..62414ba46 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/5df72ae6c51fcff1ee6bf5d3807841fd0490907ec0c2329f9559134ed48faeed @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.1","predicateType":"https://slsa.dev/provenance/v0.2","subject":[{"name":"pkg:docker/ghcr.io/slsa-framework/example-package.verifier-e2e.all.tag.main.default.slsa3@main?platform=linux%2Famd64","digest":{"sha256":"664e0d6fa6c052d40d47532cc3c2de3717b531c3ac11fed35e7cbb82fb801ead"}}],"predicate":{"builder":{"id":"https://github.com/slsa-framework/example-package/actions/runs/5201384557"},"buildType":"https://mobyproject.org/buildkit@v1","materials":[{"uri":"pkg:docker/golang@1.20?digest=sha256:690e4135bf2a4571a572bfd5ddfa806b1cb9c3dea0446ebadaf32bc2ea09d4f9\u0026platform=linux%2Famd64","digest":{"sha256":"690e4135bf2a4571a572bfd5ddfa806b1cb9c3dea0446ebadaf32bc2ea09d4f9"}},{"uri":"pkg:docker/gcr.io/distroless/static?digest=sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e\u0026platform=linux%2Famd64","digest":{"sha256":"7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},{"uri":"https://github.com/slsa-framework/example-package.git#62cb1f1e485829bafe8bbec8b9900c0cb7624fe7","digest":{"sha1":"62cb1f1e485829bafe8bbec8b9900c0cb7624fe7"}}],"invocation":{"configSource":{"uri":"https://github.com/slsa-framework/example-package.git#62cb1f1e485829bafe8bbec8b9900c0cb7624fe7","digest":{"sha1":"62cb1f1e485829bafe8bbec8b9900c0cb7624fe7"},"entryPoint":"Dockerfile"},"parameters":{"frontend":"dockerfile.v0","args":{"label:org.opencontainers.image.created":"2023-06-07T14:40:46.596Z","label:org.opencontainers.image.description":"","label:org.opencontainers.image.licenses":"Apache-2.0","label:org.opencontainers.image.revision":"62cb1f1e485829bafe8bbec8b9900c0cb7624fe7","label:org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.title":"example-package","label:org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.version":"main"},"secrets":[{"id":"GIT_AUTH_HEADER","optional":true},{"id":"GIT_AUTH_TOKEN","optional":true}]},"environment":{"platform":"linux/amd64"}},"buildConfig":{"llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"docker-image://gcr.io/distroless/static@sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step1","op":{"Op":{"source":{"identifier":"docker-image://docker.io/library/golang:1.20@sha256:690e4135bf2a4571a572bfd5ddfa806b1cb9c3dea0446ebadaf32bc2ea09d4f9"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step2","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":-1,"output":0,"Action":{"mkdir":{"path":"/app","mode":493,"makeParents":true,"timestamp":-1}}}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step1:0"]},{"id":"step3","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#62cb1f1e485829bafe8bbec8b9900c0cb7624fe7","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step4","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step2:0","step3:0"]},{"id":"step5","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","go get -d -v"],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.4","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step4:0"]},{"id":"step6","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","CGO_ENABLED=0 go build -ldflags=\"-w -s\" -v -o app ."],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.4","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step5:0"]},{"id":"step7","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/app/app","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step0:0","step6:0"]},{"id":"step8","op":{"Op":null},"inputs":["step7:0"]}],"digestMapping":{"sha256:3e10553bfe08302bf408d2ec72288114ac84ac61a4b25c67ca87a5e109a44308":"step5","sha256:40dfca31d8eaa5c385c166dbdfb4f961ec37ad67a40e460602d06cc664425007":"step1","sha256:510ec1dc1c6b001f25db3f431b7aa3f20efb648f30c315238d1518d6d6fa9a85":"step2","sha256:6cec93513b2f92a22727d5ceb73ad07c23dbb33fbfa78ab83292b0000b43b3ca":"step6","sha256:702c49ec03f93ba715513e57b06fe4c794dfedea6cffd793f258ae331730375b":"step7","sha256:775b6000882bc622aa4d8335258749f2cd15d667195b34a9e15af947019d007a":"step8","sha256:8f09375c18dc794fee6a9e4c7247acaa88398d162424c7fd0b56e43a3a7ebb6c":"step0","sha256:ddff82fb20df441750788327869ad244008ea97d3d820f15b1c0427256196739":"step4","sha256:e5c957d16c7ec2f0a97b4b54a5fdbd127fb85cf7302bf784c03f9bc5c985a501":"step3"}},"metadata":{"buildInvocationID":"uka2yomn7m38kbg364rjkggbx","buildStartedOn":"2023-06-07T14:40:47.483931883Z","buildFinishedOn":"2023-06-07T14:41:12.908256053Z","completeness":{"parameters":true,"environment":true,"materials":true},"reproducible":false,"https://mobyproject.org/buildkit@v1#metadata":{"source":{"locations":{"step0":{"locations":[{"ranges":[{"start":{"line":13},"end":{"line":13}}]}]},"step1":{"locations":[{"ranges":[{"start":{"line":1},"end":{"line":1}}]}]},"step2":{"locations":[{"ranges":[{"start":{"line":3},"end":{"line":3}}]}]},"step3":{},"step4":{"locations":[{"ranges":[{"start":{"line":4},"end":{"line":4}}]}]},"step5":{"locations":[{"ranges":[{"start":{"line":6},"end":{"line":6}}]}]},"step6":{"locations":[{"ranges":[{"start":{"line":9},"end":{"line":9}}]}]},"step7":{"locations":[{"ranges":[{"start":{"line":15},"end":{"line":15}}]}]}},"infos":[{"filename":"Dockerfile","data":"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","llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#62cb1f1e485829bafe8bbec8b9900c0cb7624fe7","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step1","op":{"Op":null},"inputs":["step0:0"]}],"digestMapping":{"sha256:5f82b3ccd332bafc642445c2247576d1001a07264f5d0bddf7ddeb359f079f27":"step1","sha256:e5c957d16c7ec2f0a97b4b54a5fdbd127fb85cf7302bf784c03f9bc5c985a501":"step0"}}]},"layers":{"step0:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}],[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}]],"step1:0":[[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:bd73737482dd5575526c7207872963479808d979ab2741c321706b8553918474","size":55049027},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:6710592d62aa1338ac1c1c363dedc255659f666cc41441c7e0f735c484db10ff","size":15760489},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:75256935197ed1bb3b994a77c01efa00349b901014448a260fafd9c3719a741d","size":54584391},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:948a624948bad16368a8875d007bc505810d290412e61357e0e44549e775dd3c","size":86031145},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:147e02c24f40116f23669411aa9b2a6b2f964ddce0e045d3933cc4ad19337cb3","size":100149104},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:cd56b3199c0c96901ea545187395ab9d886e75aeb4d953f018a21c5782dc9498","size":156}],[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:bd73737482dd5575526c7207872963479808d979ab2741c321706b8553918474","size":55049027},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:6710592d62aa1338ac1c1c363dedc255659f666cc41441c7e0f735c484db10ff","size":15760489},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:75256935197ed1bb3b994a77c01efa00349b901014448a260fafd9c3719a741d","size":54584391},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:948a624948bad16368a8875d007bc505810d290412e61357e0e44549e775dd3c","size":86031145},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:147e02c24f40116f23669411aa9b2a6b2f964ddce0e045d3933cc4ad19337cb3","size":100149104},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:cd56b3199c0c96901ea545187395ab9d886e75aeb4d953f018a21c5782dc9498","size":156}]],"step7:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:d8fea4b4260b2a1df26c2e2fb952ddedc47413053d56900175b81485282bb8f2","size":647977}]]}}}}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/664e0d6fa6c052d40d47532cc3c2de3717b531c3ac11fed35e7cbb82fb801ead b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/664e0d6fa6c052d40d47532cc3c2de3717b531c3ac11fed35e7cbb82fb801ead new file mode 100644 index 000000000..43f14f872 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/664e0d6fa6c052d40d47532cc3c2de3717b531c3ac11fed35e7cbb82fb801ead @@ -0,0 +1,61 @@ +{ + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "schemaVersion": 2, + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:590e0b6222ec244abc2806e267ec3fff1c77ab4a38d0c642ab7fed04855c0bb5", + "size": 3028 + }, + "layers": [ + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639", + "size": 103732 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58", + "size": 21202 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db", + "size": 716491 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265", + "size": 317 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0", + "size": 198 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c", + "size": 113 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f", + "size": 385 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c", + "size": 355 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a", + "size": 130562 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:d8fea4b4260b2a1df26c2e2fb952ddedc47413053d56900175b81485282bb8f2", + "size": 647977 + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c new file mode 100644 index 000000000..17dec20d0 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/a1abac53d6ea6d96603b6de85da053079ed7c86d2be4249b071cca747f588461 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/a1abac53d6ea6d96603b6de85da053079ed7c86d2be4249b071cca747f588461 new file mode 100644 index 000000000..db1544dd2 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/a1abac53d6ea6d96603b6de85da053079ed7c86d2be4249b071cca747f588461 @@ -0,0 +1 @@ +{"architecture":"unknown","os":"unknown","config":{},"rootfs":{"type":"layers","diff_ids":["sha256:5df72ae6c51fcff1ee6bf5d3807841fd0490907ec0c2329f9559134ed48faeed"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 new file mode 100644 index 000000000..2f49092f3 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db new file mode 100644 index 000000000..0594c669b Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/ca6221e2d0def24e302530f727689a2ab8539a690c740527db33a520284cf141 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/ca6221e2d0def24e302530f727689a2ab8539a690c740527db33a520284cf141 new file mode 100755 index 000000000..c9a7baaff --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/ca6221e2d0def24e302530f727689a2ab8539a690c740527db33a520284cf141 @@ -0,0 +1,28 @@ +{ + "mediaType": "application/vnd.oci.image.index.v1+json", + "schemaVersion": 2, + "manifests": [ + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:664e0d6fa6c052d40d47532cc3c2de3717b531c3ac11fed35e7cbb82fb801ead", + "size": 2183, + "platform": { + "architecture": "amd64", + "os": "linux" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:3b6bc85571318f9aaba55a5eb599a946b7492c0dfd8b5952760d0b5ce88e1558", + "size": 567, + "annotations": { + "vnd.docker.reference.digest": "sha256:664e0d6fa6c052d40d47532cc3c2de3717b531c3ac11fed35e7cbb82fb801ead", + "vnd.docker.reference.type": "attestation-manifest" + }, + "platform": { + "architecture": "unknown", + "os": "unknown" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/d8fea4b4260b2a1df26c2e2fb952ddedc47413053d56900175b81485282bb8f2 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/d8fea4b4260b2a1df26c2e2fb952ddedc47413053d56900175b81485282bb8f2 new file mode 100644 index 000000000..94910f45c Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/d8fea4b4260b2a1df26c2e2fb952ddedc47413053d56900175b81485282bb8f2 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/dbc658f204833d5ffcad9bf9c47a5af6cd39eea875f0a69879ae4850237ab777 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/dbc658f204833d5ffcad9bf9c47a5af6cd39eea875f0a69879ae4850237ab777 new file mode 100644 index 000000000..677395d68 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/dbc658f204833d5ffcad9bf9c47a5af6cd39eea875f0a69879ae4850237ab777 @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":243,"digest":"sha256:df5a248d9e4fd1aa3a8d5f693f9ba04ff10855966fb3cd7030cc33647d98ce2e"},"layers":[{"mediaType":"application/vnd.dsse.envelope.v1+json","size":12092,"digest":"sha256:4a1b72c77c15781687300c3b0362513b5b040ac33dcaee4e245c24621d494d4d","annotations":{"dev.cosignproject.cosign/signature":"","dev.sigstore.cosign/bundle":"{\"SignedEntryTimestamp\":\"MEUCIQCgtGbmnIatUyuIXOJ5OP6IJshUMUaQ1/MnJW3xqMZRDwIgAvh3gR8+wSDJ4OzId6iRENeMHeIUOrnmYKNNnP2wOic=\",\"Payload\":{\"body\":\"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI0YTFiNzJjNzdjMTU3ODE2ODczMDBjM2IwMzYyNTEzYjViMDQwYWMzM2RjYWVlNGUyNDVjMjQ2MjFkNDk0ZDRkIn0sInBheWxvYWRIYXNoIjp7ImFsZ29yaXRobSI6InNoYTI1NiIsInZhbHVlIjoiY2I4MTQ3YTZmYjgzNDg0ODg5MDRmMjQxZmUxNzFjNGM2YWFhODlkYmM2NTZmZmIwZGE2NjMzYTgzNGY1N2M4ZSJ9fSwicHVibGljS2V5IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVaHRha05EUW5nclowRjNTVUpCWjBsVlRrWlBVeXRYTmtRMmNIaHdZamRWWVVoVUsyTkNTV05ZY1dKTmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcE5kMDVxUVROTlZGRXdUWHBCTWxkb1kwNU5hazEzVG1wQk0wMVVVVEZOZWtFeVYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZVYkVWVVQybFJURVJ3ZUZwM1dqWkxSVWhuUjB4UlkycGhiRk52VGxkQ1kyaGpSa3dLZUVkSVZsWjVMM1JpV1ZvM04zbGlZbUY1VGpWb1FrcEtZM2syV2l0RmJGSmtMMVZKWlVWdlpsaGxTMUo0U1Zsd1Z6WlBRMEpxTkhkbloxazJUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZ2V25aTUNtaGhhMGR4WTNaMVluVkhXRXRDTVd0WVZqRmFjMUpKZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDJkWldVZEJNVlZrUlZGRlFpOTNVamhOU0hGSFpVZG9NR1JJUW5wUGFUaDJXakpzTUdGSVZtbE1iVTUyWWxNNWVtSklUbWhNVjFwNVdWY3hiQXBrTWpsNVlYazVlbUpJVG1oTVYyUndaRWRvTVZscE1XNWFWelZzWTIxR01HSXpTWFpNYldSd1pFZG9NVmxwT1ROaU0wcHlXbTE0ZG1RelRYWmFNbFoxQ2xwWVNtaGtSemw1V0RKT2RtSnVVbWhoVnpWc1kydzVlbUpJVG1oTmVUVTFZbGQ0UVdOdFZtMWplVGt3V1Zka2Vrd3pXWGhNYW1OMVRVUkJOVUpuYjNJS1FtZEZSVUZaVHk5TlFVVkNRa04wYjJSSVVuZGplbTkyVEROU2RtRXlWblZNYlVacVpFZHNkbUp1VFhWYU1td3dZVWhXYVdSWVRteGpiVTUyWW01U2JBcGlibEYxV1RJNWRFMUNPRWREYVhOSFFWRlJRbWMzT0hkQlVVbEZSVmhrZG1OdGRHMWlSemt6V0RKU2NHTXpRbWhrUjA1dlRVUlpSME5wYzBkQlVWRkNDbWMzT0hkQlVVMUZTMFJaZVZreVNYaGFha1pzVGtSbk1VOUVTVFZaYlVadFdsUm9hVmx0Vm1wUFIwazFUMVJCZDFsNlFtcFphbU15VFdwU2JWcFVZM2NLVmxGWlMwdDNXVUpDUVVkRWRucEJRa0pCVWtoTWJXUndaRWRvTVZscE9UTmlNMHB5V20xNGRtUXpUWFprYlZaNVlWZGFjRnBZU1hSYVZFcHNURzFHY3dwaVF6VXpZak5LY2xwdGVIWmtNVGxyWVZoT2QxbFlVbXBoUXpWMFdWZHNkVXh0Um5OaVF6VjZZa2hPYUUxNU5UVmlWM2QzVEVGWlMwdDNXVUpDUVVkRUNuWjZRVUpDVVZGbFl6SjRlbGxUTVcxamJVWjBXbGhrZG1OdGMzWmFXR2hvWWxoQ2MxcFRNWGRaVjA1eVdWZGtiRTFDTUVkRGFYTkhRVkZSUW1jM09IY0tRVkZaUlVRelNteGFiazEyWVVkV2FGcElUWFppVjBad1ltcEJOMEpuYjNKQ1owVkZRVmxQTDAxQlJVbENRekJOU3pKb01HUklRbnBQYVRoMlpFYzVjZ3BhVnpSMVdWZE9NR0ZYT1hWamVUVnVZVmhTYjJSWFNqRmpNbFo1V1RJNWRXUkhWblZrUXpWcVlqSXdkMmRaWjBkRGFYTkhRVkZSUW1jM09IZEJVV3RGQ21WbmVEUmhTRkl3WTBoTk5reDVPVzVoV0ZKdlpGZEpkVmt5T1hSTU0wNXpZekpGZEZwdVNtaGlWMVl6WWpOS2Nrd3pUbk5qTWtWMFdqSnNNR0ZJVm1rS1RGZGtiR0p0Vm5sWldGSjJZMms0ZFZveWJEQmhTRlpwVEROa2RtTnRkRzFpUnprelkzazVibHBYTld4amJVWXdZak5LWmxreU9YVmtSMFp3WW0xV2VRcFlNMDV6WXpKRmVreHViSFJpUlVKNVdsZGFla3d6VW1oYU0wMTJaR3BGZFU1NU5IZE5SR2RIUTJselIwRlJVVUpuTnpoM1FWRnZSVXRuZDI5YVZGVXhDbGxxWXpKWk1sVXdUV3BGZDA5RVNtdGFiVVV3V1dwTk1GbFVXbWhaZWs1cVRsZFZNVTlYVW14TlIxbDZXVzFKTVU5RVFXUkNaMjl5UW1kRlJVRlpUeThLVFVGRlRFSkJPRTFFVjJSd1pFZG9NVmxwTVc5aU0wNHdXbGRSZDFGUldVdExkMWxDUWtGSFJIWjZRVUpFUVZGNlJFUkdiMlJJVW5kamVtOTJUREprY0Fwa1IyZ3hXV2sxYW1JeU1IWmpNbmg2V1ZNeGJXTnRSblJhV0dSMlkyMXpkbHBZYUdoaVdFSnpXbE14ZDFsWFRuSlpWMlJzVFVSblIwTnBjMGRCVVZGQ0NtYzNPSGRCVVRCRlMyZDNiMDVxU21wWmFrWnRUVmRWTUU5RVZUUk5hbXhwV1ZkYWJFOUhTbWxhVjAwMFdXcHJOVTFFUW1wTlIwNXBUbnBaZVU1SFdtd0tUbnBCWmtKbmIzSkNaMFZGUVZsUEwwMUJSVTlDUWtWTlJETktiRnB1VFhaaFIxWm9Xa2hOZG1KWFJuQmlha0ZhUW1kdmNrSm5SVVZCV1U4dlRVRkZVQXBDUVhOTlExUlJORTVxVFhsT1ZHZDNUMVJCZUVKbmIzSkNaMFZGUVZsUEwwMUJSVkZDUTAxTlNWZG9NR1JJUW5wUGFUaDJXakpzTUdGSVZtbE1iVTUyQ21KVE9YcGlTRTVvVEZkYWVWbFhNV3hrTWpsNVlYcEJXVUpuYjNKQ1owVkZRVmxQTDAxQlJWSkNRVzlOUTBSbmQwNUVUWGhOVkdjelRVbEhZa0puYjNJS1FtZEZSVUZaVHk5TlFVVlRRa2xIVFVSSlIwcGhTRkl3WTBoTk5reDVPVzVoV0ZKdlpGZEpkVmt5T1hSTU0wNXpZekpGZEZwdVNtaGlWMVl6WWpOS2NncE1NbFkwV1ZjeGQySkhWWFJqUjBacVlUSkdibHBUT0hWYU1td3dZVWhXYVV3elpIWmpiWFJ0WWtjNU0yTjVPVEphV0Vwd1dtMXNiR05wTVd4TmJWVjFDbGxYZUhOTWJtUjJZMjEwYldKSE9UTllNbEp3WXpOQ2FHUkhUbTlNYlRGb1lWYzBkVmxYZUhOTWJrNXpZekpGZWt4dWJIUmlSVUo1V2xkYWVrd3lhR3dLV1ZkU2Vrd3lNV2hoVnpSM1QwRlpTMHQzV1VKQ1FVZEVkbnBCUWtWM1VYRkVRMmN5VFcxT2FVMVhXWGhhVkZFMFRsUm5lVTlYU21oYWJWVTBXVzFLYkFwWmVtaHBUMVJyZDAxSFRYZFpNa2t6VG1wSk1GcHRWVE5OUTBWSFEybHpSMEZSVVVKbk56aDNRVkpSUlVWM2QxSmtNamw1WVRKYWMySXpaR1phUjJ4NkNtTkhSakJaTW1kM1drRlpTMHQzV1VKQ1FVZEVkbnBCUWtaUlVsZEVSbEp2WkVoU2QyTjZiM1pNTW1Sd1pFZG9NVmxwTldwaU1qQjJZeko0ZWxsVE1XMEtZMjFHZEZwWVpIWmpiWE4yV2xob2FHSllRbk5hVXpGM1dWZE9jbGxYWkd4TU1rWnFaRWRzZG1KdVRYWmpibFoxWTNrNE1VMXFRWGhOZW1jd1RsUlZNd3BNTWtZd1pFZFdkR05JVW5wTWVrVjNaMWxyUjBOcGMwZEJVVkZDTVc1clEwSkJTVVZsZDFJMVFVaGpRV1JSUkdSUVZFSnhlSE5qVWsxdFRWcElhSGxhQ2xwNlkwTnZhM0JsZFU0ME9ISm1LMGhwYmt0QlRIbHVkV3BuUVVGQldXbFhWRGRhUmtGQlFVVkJkMEpIVFVWUlEwbEJibHBaZFhOWlkzaG1iVkpZUzJzS2RITTVVV1pZTkZSbFNWSTNObWg1SzB4bmVrc3hhMmd2Ym5oWGFVRnBRVUZxVkVWNWFGYzVaMnBPYmxRM1FpdHpkMjh3Wm5WQ05pdG5kakZRVVZkMWNncGtlalIyU1VoaFdrOXFRVXRDWjJkeGFHdHFUMUJSVVVSQmQwNXdRVVJDYlVGcVJVRjRRVE5vU1ZCNVVYRlJXRmRsV0hkRFpYbzRTWEp4T0c5aFZFVTRDak4wT0ZabVZrUmtSbTVoVjNWSGJqaEtTekpQWjJGb01YZExWVzFGYlRCVmRXTnROMEZxUlVGelExRlBXREUxTDNsalRrSlpVRFZWZHpoa01qQkRXV2NLWlc4eE1YWk5PVWxIWkVoRWJDOURVV3h0WkVRNGIycHdURkF3V1ZaT1VFdGFhRzkzWWxSWk9Rb3RMUzB0TFVWT1JDQkRSVkpVU1VaSlEwRlVSUzB0TFMwdENnPT0ifX0=\",\"integratedTime\":1686148986,\"logIndex\":23032409,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}","dev.sigstore.cosign/certificate":"-----BEGIN CERTIFICATE-----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\neo11vM9IGdHDl/CQlmdD8ojpLP0YVNPKZhowbTY9\n-----END CERTIFICATE-----\n","dev.sigstore.cosign/chain":"-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----","predicateType":"https://slsa.dev/provenance/v0.2"}}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/df5a248d9e4fd1aa3a8d5f693f9ba04ff10855966fb3cd7030cc33647d98ce2e b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/df5a248d9e4fd1aa3a8d5f693f9ba04ff10855966fb3cd7030cc33647d98ce2e new file mode 100644 index 000000000..0f3db582e --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/df5a248d9e4fd1aa3a8d5f693f9ba04ff10855966fb3cd7030cc33647d98ce2e @@ -0,0 +1 @@ +{"architecture":"","created":"2023-06-07T14:43:07.862588422Z","history":[{"created":"0001-01-01T00:00:00Z"}],"os":"","rootfs":{"type":"layers","diff_ids":["sha256:4a1b72c77c15781687300c3b0362513b5b040ac33dcaee4e245c24621d494d4d"]},"config":{}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 new file mode 100644 index 000000000..3dc40828e Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 new file mode 100644 index 000000000..363737e18 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 new file mode 100644 index 000000000..0b81632a1 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/index.json b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/index.json new file mode 100755 index 000000000..d831b9c42 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/index.json @@ -0,0 +1,21 @@ +{ + "schemaVersion": 2, + "manifests": [ + { + "mediaType": "application/vnd.oci.image.index.v1+json", + "size": 856, + "digest": "sha256:ca6221e2d0def24e302530f727689a2ab8539a690c740527db33a520284cf141", + "annotations": { + "kind": "dev.cosignproject.cosign/imageIndex" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "size": 10368, + "digest": "sha256:dbc658f204833d5ffcad9bf9c47a5af6cd39eea875f0a69879ae4850237ab777", + "annotations": { + "kind": "dev.cosignproject.cosign/atts" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/oci-layout b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/oci-layout new file mode 100755 index 000000000..224a86981 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.7.0/container_workflow_dispatch/oci-layout @@ -0,0 +1,3 @@ +{ + "imageLayoutVersion": "1.0.0" +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch.digest b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch.digest new file mode 100644 index 000000000..a6e186641 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch.digest @@ -0,0 +1 @@ +sha256:038d72307b94cd27dffbfb458b695758929980cebec68ca892061a280636952b \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/038d72307b94cd27dffbfb458b695758929980cebec68ca892061a280636952b b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/038d72307b94cd27dffbfb458b695758929980cebec68ca892061a280636952b new file mode 100755 index 000000000..0f9b5cc8e --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/038d72307b94cd27dffbfb458b695758929980cebec68ca892061a280636952b @@ -0,0 +1,28 @@ +{ + "schemaVersion": 2, + "mediaType": "application/vnd.oci.image.index.v1+json", + "manifests": [ + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:5c323fdfbf3cbe9d5cc4580f2dcc34a43fdbcf46c25784d68c25fe6909055060", + "size": 2183, + "platform": { + "architecture": "amd64", + "os": "linux" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:085e838ef71453d1911bf61a3b499719b09659a5dd2a7c89e8e359fe342a4ab5", + "size": 567, + "annotations": { + "vnd.docker.reference.digest": "sha256:5c323fdfbf3cbe9d5cc4580f2dcc34a43fdbcf46c25784d68c25fe6909055060", + "vnd.docker.reference.type": "attestation-manifest" + }, + "platform": { + "architecture": "unknown", + "os": "unknown" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/085e838ef71453d1911bf61a3b499719b09659a5dd2a7c89e8e359fe342a4ab5 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/085e838ef71453d1911bf61a3b499719b09659a5dd2a7c89e8e359fe342a4ab5 new file mode 100644 index 000000000..5b82cd998 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/085e838ef71453d1911bf61a3b499719b09659a5dd2a7c89e8e359fe342a4ab5 @@ -0,0 +1,19 @@ +{ + "schemaVersion": 2, + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:9482db6a03f933341e26c555d2456e98526cfe8d7fbf7bd1370460b06a5cdd9f", + "size": 167 + }, + "layers": [ + { + "mediaType": "application/vnd.in-toto+json", + "digest": "sha256:b5d5bed7682d285fe850b15e8e5a3df200ff2f202d12f1c72017b03c1aed29d4", + "size": 14044, + "annotations": { + "in-toto.io/predicate-type": "https://slsa.dev/provenance/v0.2" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/195f75fe5d0554704527695e9205c457d3544bd0b078340bebd109a761c57920 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/195f75fe5d0554704527695e9205c457d3544bd0b078340bebd109a761c57920 new file mode 100644 index 000000000..f5e4fd498 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/195f75fe5d0554704527695e9205c457d3544bd0b078340bebd109a761c57920 @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":243,"digest":"sha256:66e6ea84946fc865c5b4627520930f4e25ebbc869fe829e7baa2b2da952f3bd6"},"layers":[{"mediaType":"application/vnd.dsse.envelope.v1+json","size":12140,"digest":"sha256:291729ce6264067c1a61f8156f9133f2efcc3f72341d5cd22f2b9ba279ecb25f","annotations":{"dev.cosignproject.cosign/signature":"","dev.sigstore.cosign/bundle":"{\"SignedEntryTimestamp\":\"MEQCIECDOdcNGfGkLow12wGzOmdcIwcYJVaKRQ6vGyjbEzmmAiAM0FMv+tmfFcclfgzk000DK/zK/KP43kgM0bBLBhIo+g==\",\"Payload\":{\"body\":\"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\",\"integratedTime\":1691126891,\"logIndex\":30024022,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}","dev.sigstore.cosign/certificate":"-----BEGIN CERTIFICATE-----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\ny6Z+nazj6A==\n-----END CERTIFICATE-----\n","dev.sigstore.cosign/chain":"-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----","predicateType":"https://slsa.dev/provenance/v0.2"}}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c new file mode 100644 index 000000000..b972ff1dd Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/291729ce6264067c1a61f8156f9133f2efcc3f72341d5cd22f2b9ba279ecb25f b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/291729ce6264067c1a61f8156f9133f2efcc3f72341d5cd22f2b9ba279ecb25f new file mode 100644 index 000000000..e16b5e094 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/291729ce6264067c1a61f8156f9133f2efcc3f72341d5cd22f2b9ba279ecb25f @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIDodhsSypT9YNJhniYuZZTPq/ZV3nuYZ85XbolmRdLJuAiAkSZ86nchhyx4q4KVYJ9ESGexC9/NMRMWVnzRl2aiLpQ=="}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f new file mode 100644 index 000000000..2c6cd5b63 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a new file mode 100644 index 000000000..6dcc4d33a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/5c323fdfbf3cbe9d5cc4580f2dcc34a43fdbcf46c25784d68c25fe6909055060 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/5c323fdfbf3cbe9d5cc4580f2dcc34a43fdbcf46c25784d68c25fe6909055060 new file mode 100644 index 000000000..baf841029 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/5c323fdfbf3cbe9d5cc4580f2dcc34a43fdbcf46c25784d68c25fe6909055060 @@ -0,0 +1,61 @@ +{ + "schemaVersion": 2, + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:fa05c7ac17c3df1a35c3746f0c023a464bf47fea352b6d9caa320f6dc82c28f1", + "size": 2153 + }, + "layers": [ + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639", + "size": 103732 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58", + "size": 21202 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db", + "size": 716491 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265", + "size": 317 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0", + "size": 198 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c", + "size": 113 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f", + "size": 385 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c", + "size": 355 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a", + "size": 130562 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:ef39a1978fe1d3994ab1e3feff1b9ca573b63f2a287aec44e9c28715bddf727b", + "size": 648811 + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/66e6ea84946fc865c5b4627520930f4e25ebbc869fe829e7baa2b2da952f3bd6 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/66e6ea84946fc865c5b4627520930f4e25ebbc869fe829e7baa2b2da952f3bd6 new file mode 100644 index 000000000..85e410c1b --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/66e6ea84946fc865c5b4627520930f4e25ebbc869fe829e7baa2b2da952f3bd6 @@ -0,0 +1 @@ +{"architecture":"","created":"2023-08-04T05:28:12.189847216Z","history":[{"created":"0001-01-01T00:00:00Z"}],"os":"","rootfs":{"type":"layers","diff_ids":["sha256:291729ce6264067c1a61f8156f9133f2efcc3f72341d5cd22f2b9ba279ecb25f"]},"config":{}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c new file mode 100644 index 000000000..17dec20d0 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/9482db6a03f933341e26c555d2456e98526cfe8d7fbf7bd1370460b06a5cdd9f b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/9482db6a03f933341e26c555d2456e98526cfe8d7fbf7bd1370460b06a5cdd9f new file mode 100644 index 000000000..ec0053c2e --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/9482db6a03f933341e26c555d2456e98526cfe8d7fbf7bd1370460b06a5cdd9f @@ -0,0 +1 @@ +{"architecture":"unknown","os":"unknown","config":{},"rootfs":{"type":"layers","diff_ids":["sha256:b5d5bed7682d285fe850b15e8e5a3df200ff2f202d12f1c72017b03c1aed29d4"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 new file mode 100644 index 000000000..2f49092f3 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db new file mode 100644 index 000000000..0594c669b Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/b5d5bed7682d285fe850b15e8e5a3df200ff2f202d12f1c72017b03c1aed29d4 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/b5d5bed7682d285fe850b15e8e5a3df200ff2f202d12f1c72017b03c1aed29d4 new file mode 100644 index 000000000..6a2594913 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/b5d5bed7682d285fe850b15e8e5a3df200ff2f202d12f1c72017b03c1aed29d4 @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.1","predicateType":"https://slsa.dev/provenance/v0.2","subject":[{"name":"pkg:docker/ghcr.io/slsa-framework/example-package.verifier-e2e.all.tag.main.default.slsa3@main?platform=linux%2Famd64","digest":{"sha256":"5c323fdfbf3cbe9d5cc4580f2dcc34a43fdbcf46c25784d68c25fe6909055060"}}],"predicate":{"builder":{"id":"https://github.com/slsa-framework/example-package/actions/runs/5758772739"},"buildType":"https://mobyproject.org/buildkit@v1","materials":[{"uri":"pkg:docker/golang@1.20?digest=sha256:010a0ffe47398a3646993df44906c065c526eabf309d01fb0cbc9a5696024a60\u0026platform=linux%2Famd64","digest":{"sha256":"010a0ffe47398a3646993df44906c065c526eabf309d01fb0cbc9a5696024a60"}},{"uri":"pkg:docker/gcr.io/distroless/static?digest=sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e\u0026platform=linux%2Famd64","digest":{"sha256":"7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},{"uri":"https://github.com/slsa-framework/example-package.git#6cf671f47f3752f97b9f5bff511e37b938fe10d2","digest":{"sha1":"6cf671f47f3752f97b9f5bff511e37b938fe10d2"}}],"invocation":{"configSource":{"uri":"https://github.com/slsa-framework/example-package.git#6cf671f47f3752f97b9f5bff511e37b938fe10d2","digest":{"sha1":"6cf671f47f3752f97b9f5bff511e37b938fe10d2"},"entryPoint":"Dockerfile"},"parameters":{"frontend":"dockerfile.v0","args":{"label:org.opencontainers.image.created":"2023-08-04T05:26:42.155Z","label:org.opencontainers.image.description":"","label:org.opencontainers.image.licenses":"Apache-2.0","label:org.opencontainers.image.revision":"6cf671f47f3752f97b9f5bff511e37b938fe10d2","label:org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.title":"example-package","label:org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.version":"main"},"secrets":[{"id":"GIT_AUTH_HEADER","optional":true},{"id":"GIT_AUTH_TOKEN","optional":true}]},"environment":{"platform":"linux/amd64"}},"buildConfig":{"llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"docker-image://gcr.io/distroless/static@sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step1","op":{"Op":{"source":{"identifier":"docker-image://docker.io/library/golang:1.20@sha256:010a0ffe47398a3646993df44906c065c526eabf309d01fb0cbc9a5696024a60"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step2","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":-1,"output":0,"Action":{"mkdir":{"path":"/app","mode":493,"makeParents":true,"timestamp":-1}}}]}},"constraints":{}},"inputs":["step1:0"]},{"id":"step3","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#6cf671f47f3752f97b9f5bff511e37b938fe10d2","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step4","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"constraints":{}},"inputs":["step2:0","step3:0"]},{"id":"step5","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","go get -d -v"],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.6","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step4:0"]},{"id":"step6","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","CGO_ENABLED=0 go build -ldflags=\"-w -s\" -v -o app ."],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.6","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step5:0"]},{"id":"step7","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/app/app","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"constraints":{}},"inputs":["step0:0","step6:0"]},{"id":"step8","op":{"Op":null},"inputs":["step7:0"]}],"digestMapping":{"sha256:27319d2aeab76fa42518045c6cae19a2541787b29ab97fe2d1393937d7969cb7":"step8","sha256:4510a0ba42b96a3816548a6a5123fe426bf9e51ee30bc7116930a33e44011d48":"step6","sha256:6db9fc981a956f542a8cb60ecdade1bb290f35b27c1f9a58fe97ee5d7a909318":"step7","sha256:8904dd39d6a3aa670960de671ae1bd954e8d6d6527f4cb2d4c8b04aa229bec25":"step2","sha256:8f09375c18dc794fee6a9e4c7247acaa88398d162424c7fd0b56e43a3a7ebb6c":"step0","sha256:94787fc1e74cab3ac551689368adab3be245f50b76271cafa05e49ee5e0bfdeb":"step1","sha256:e74f02e07f5f72c4f87a988afbe9ef498b4552876d2404c319e361601cfbeef3":"step4","sha256:ed89cafeccc65cc13d4cd47d078cd09ac38e2ed22afd7291c89759c7579269fa":"step5","sha256:fe528ca39a3ed89fd4e8ef32db64a90429ef47baa4a1b7b60bb2e0dfc1ad8cea":"step3"}},"metadata":{"buildInvocationID":"jrwgk889mwiwqdnq5hl2lqs3z","buildStartedOn":"2023-08-04T05:26:43.0109763Z","buildFinishedOn":"2023-08-04T05:27:08.993361353Z","completeness":{"parameters":true,"environment":true,"materials":true},"reproducible":false,"https://mobyproject.org/buildkit@v1#metadata":{"source":{"locations":{"step0":{"locations":[{"ranges":[{"start":{"line":13},"end":{"line":13}}]}]},"step1":{"locations":[{"ranges":[{"start":{"line":1},"end":{"line":1}}]}]},"step2":{"locations":[{"ranges":[{"start":{"line":3},"end":{"line":3}}]}]},"step3":{},"step4":{"locations":[{"ranges":[{"start":{"line":4},"end":{"line":4}}]}]},"step5":{"locations":[{"ranges":[{"start":{"line":6},"end":{"line":6}}]}]},"step6":{"locations":[{"ranges":[{"start":{"line":9},"end":{"line":9}}]}]},"step7":{"locations":[{"ranges":[{"start":{"line":15},"end":{"line":15}}]}]}},"infos":[{"filename":"Dockerfile","language":"Dockerfile","data":"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","llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#6cf671f47f3752f97b9f5bff511e37b938fe10d2","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step1","op":{"Op":null},"inputs":["step0:0"]}],"digestMapping":{"sha256:0d943e46863e9879fc3599198194e91313a4632a1d3f89df1e274c9512776351":"step1","sha256:fe528ca39a3ed89fd4e8ef32db64a90429ef47baa4a1b7b60bb2e0dfc1ad8cea":"step0"}}]},"layers":{"step0:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}],[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}]],"step1:0":[[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:785ef8b9b236a5f027f33cae77513051704c0538bff455ff5548105c954c3b1c","size":49557354},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5a6dad8f55ae6c733e986316bd08205c8b2c41640bf8d08ff6e9bbcb6884304f","size":24030539},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:bd36c7bfe5f4bdffcc0bbb74b0fb38feb35c286ea58b5992617fb38b0c933603","size":64112293},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:9e59e6b803ed24f34e9d1001d46221a69fa46b48d7d007de7d32fc07d031a408","size":92267552},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:71bc00cb1b5e594e3c1309344539d42089e20e4de2d4294812306be323c21a5e","size":100216050},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:c39afecc952947cb68ac70bec162f10dd96fbb4e6ed295c6d98ca90050e926a3","size":156}],[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:785ef8b9b236a5f027f33cae77513051704c0538bff455ff5548105c954c3b1c","size":49557354},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5a6dad8f55ae6c733e986316bd08205c8b2c41640bf8d08ff6e9bbcb6884304f","size":24030539},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:bd36c7bfe5f4bdffcc0bbb74b0fb38feb35c286ea58b5992617fb38b0c933603","size":64112293},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:9e59e6b803ed24f34e9d1001d46221a69fa46b48d7d007de7d32fc07d031a408","size":92267552},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:71bc00cb1b5e594e3c1309344539d42089e20e4de2d4294812306be323c21a5e","size":100216050},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:c39afecc952947cb68ac70bec162f10dd96fbb4e6ed295c6d98ca90050e926a3","size":156}]],"step7:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:ef39a1978fe1d3994ab1e3feff1b9ca573b63f2a287aec44e9c28715bddf727b","size":648811}]]}}}}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 new file mode 100644 index 000000000..3dc40828e Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/ef39a1978fe1d3994ab1e3feff1b9ca573b63f2a287aec44e9c28715bddf727b b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/ef39a1978fe1d3994ab1e3feff1b9ca573b63f2a287aec44e9c28715bddf727b new file mode 100644 index 000000000..1bc2c326d Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/ef39a1978fe1d3994ab1e3feff1b9ca573b63f2a287aec44e9c28715bddf727b differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fa05c7ac17c3df1a35c3746f0c023a464bf47fea352b6d9caa320f6dc82c28f1 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fa05c7ac17c3df1a35c3746f0c023a464bf47fea352b6d9caa320f6dc82c28f1 new file mode 100644 index 000000000..e04a29223 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fa05c7ac17c3df1a35c3746f0c023a464bf47fea352b6d9caa320f6dc82c28f1 @@ -0,0 +1 @@ +{"architecture":"amd64","config":{"User":"0","Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Entrypoint":["/app"],"WorkingDir":"/","Labels":{"org.opencontainers.image.created":"2023-08-04T05:26:42.155Z","org.opencontainers.image.description":"","org.opencontainers.image.licenses":"Apache-2.0","org.opencontainers.image.revision":"6cf671f47f3752f97b9f5bff511e37b938fe10d2","org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","org.opencontainers.image.title":"example-package","org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","org.opencontainers.image.version":"main"},"OnBuild":null},"created":"2023-08-04T05:27:08.87906323Z","history":[{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"2023-08-04T05:27:08.87906323Z","created_by":"COPY /app/app /app # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2023-08-04T05:27:08.87906323Z","created_by":"ENTRYPOINT [\"/app\"]","comment":"buildkit.dockerfile.v0","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:e023e0e48e6e29e90e519f4dd356d058ff2bffbd16e28b802f3b8f93aa4ccb17","sha256:6fbdf253bbc2490dcfede5bdb58ca0db63ee8aff565f6ea9f918f3bce9e2d5aa","sha256:7bea6b893187b14fc0a759fe5f8972d1292a9c0554c87cbf485f0947c26b8a05","sha256:ff5700ec54186528cbae40f54c24b1a34fb7c01527beaa1232868c16e2353f52","sha256:d52f02c6501c9c4410568f0bf6ff30d30d8290f57794c308fe36ea78393afac2","sha256:e624a5370eca2b8266e74d179326e2a8767d361db14d13edd9fb57e408731784","sha256:1a73b54f556b477f0a8b939d13c504a3b4f4db71f7a09c63afbc10acb3de5849","sha256:d2d7ec0f6756eb51cf1602c6f8ac4dd811d3d052661142e0110357bf0b581457","sha256:4cb10dd2545bd173858450b80853b850e49608260f1a0789e0d0b39edf12f500","sha256:be25d7896d63e03998411a1ca2f3d2475568fc0c20a0ca5e3a37029e24fe6e68"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 new file mode 100644 index 000000000..363737e18 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 new file mode 100644 index 000000000..0b81632a1 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/index.json b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/index.json new file mode 100755 index 000000000..4eaa8b148 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/index.json @@ -0,0 +1,21 @@ +{ + "schemaVersion": 2, + "manifests": [ + { + "mediaType": "application/vnd.oci.image.index.v1+json", + "size": 856, + "digest": "sha256:038d72307b94cd27dffbfb458b695758929980cebec68ca892061a280636952b", + "annotations": { + "kind": "dev.cosignproject.cosign/imageIndex" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "size": 10470, + "digest": "sha256:195f75fe5d0554704527695e9205c457d3544bd0b078340bebd109a761c57920", + "annotations": { + "kind": "dev.cosignproject.cosign/atts" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/oci-layout b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/oci-layout new file mode 100755 index 000000000..224a86981 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.8.0/container_workflow_dispatch/oci-layout @@ -0,0 +1,3 @@ +{ + "imageLayoutVersion": "1.0.0" +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch.digest b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch.digest new file mode 100644 index 000000000..3149f7bfa --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch.digest @@ -0,0 +1 @@ +sha256:5b146084201148bf151871fa779767f013c47706d031106af0d727fb5b88f5ac \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/10dc279526ec7dec3af88852fd3b0db3e130792b2e2f23f7a7db99285e792b98 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/10dc279526ec7dec3af88852fd3b0db3e130792b2e2f23f7a7db99285e792b98 new file mode 100644 index 000000000..815a58fb3 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/10dc279526ec7dec3af88852fd3b0db3e130792b2e2f23f7a7db99285e792b98 @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.1","predicateType":"https://slsa.dev/provenance/v0.2","subject":[{"name":"pkg:docker/ghcr.io/slsa-framework/example-package.verifier-e2e.all.tag.main.default.slsa3@v13.0.30?platform=linux%2Famd64","digest":{"sha256":"7606c85a2e0bc3af20a2e0de046f4c97c275ba689a60fcc0140186acf852ffd3"}},{"name":"pkg:docker/ghcr.io/slsa-framework/example-package.verifier-e2e.all.tag.main.default.slsa3@latest?platform=linux%2Famd64","digest":{"sha256":"7606c85a2e0bc3af20a2e0de046f4c97c275ba689a60fcc0140186acf852ffd3"}}],"predicate":{"builder":{"id":"https://github.com/slsa-framework/example-package/actions/runs/5947345653"},"buildType":"https://mobyproject.org/buildkit@v1","materials":[{"uri":"pkg:docker/golang@1.20?digest=sha256:bc5f0b5e43282627279fe5262ae275fecb3d2eae3b33977a7fd200c7a760d6f1\u0026platform=linux%2Famd64","digest":{"sha256":"bc5f0b5e43282627279fe5262ae275fecb3d2eae3b33977a7fd200c7a760d6f1"}},{"uri":"pkg:docker/gcr.io/distroless/static?digest=sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e\u0026platform=linux%2Famd64","digest":{"sha256":"7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},{"uri":"https://github.com/slsa-framework/example-package.git#2bcaa7495e1cbd11fbd4f598d857b3a6f18df933","digest":{"sha1":"2bcaa7495e1cbd11fbd4f598d857b3a6f18df933"}}],"invocation":{"configSource":{"uri":"https://github.com/slsa-framework/example-package.git#2bcaa7495e1cbd11fbd4f598d857b3a6f18df933","digest":{"sha1":"2bcaa7495e1cbd11fbd4f598d857b3a6f18df933"},"entryPoint":"Dockerfile"},"parameters":{"frontend":"dockerfile.v0","args":{"label:org.opencontainers.image.created":"2023-08-23T05:20:21.969Z","label:org.opencontainers.image.description":"","label:org.opencontainers.image.licenses":"Apache-2.0","label:org.opencontainers.image.revision":"2bcaa7495e1cbd11fbd4f598d857b3a6f18df933","label:org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.title":"example-package","label:org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","label:org.opencontainers.image.version":"v13.0.30"},"secrets":[{"id":"GIT_AUTH_HEADER","optional":true},{"id":"GIT_AUTH_TOKEN","optional":true}]},"environment":{"platform":"linux/amd64"}},"buildConfig":{"llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"docker-image://gcr.io/distroless/static@sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step1","op":{"Op":{"source":{"identifier":"docker-image://docker.io/library/golang:1.20@sha256:bc5f0b5e43282627279fe5262ae275fecb3d2eae3b33977a7fd200c7a760d6f1"}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}}},{"id":"step2","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":-1,"output":0,"Action":{"mkdir":{"path":"/app","mode":493,"makeParents":true,"timestamp":-1}}}]}},"constraints":{}},"inputs":["step1:0"]},{"id":"step3","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#2bcaa7495e1cbd11fbd4f598d857b3a6f18df933","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step4","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"constraints":{}},"inputs":["step2:0","step3:0"]},{"id":"step5","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","go get -d -v"],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.7","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step4:0"]},{"id":"step6","op":{"Op":{"exec":{"meta":{"args":["/bin/sh","-c","CGO_ENABLED=0 go build -ldflags=\"-w -s\" -v -o app ."],"env":["PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","GOLANG_VERSION=1.20.7","GOPATH=/go"],"cwd":"/app","removeMountStubsRecursive":true},"mounts":[{"input":0,"dest":"/","output":0}]}},"platform":{"Architecture":"amd64","OS":"linux"},"constraints":{}},"inputs":["step5:0"]},{"id":"step7","op":{"Op":{"file":{"actions":[{"input":0,"secondaryInput":1,"output":0,"Action":{"copy":{"src":"/app/app","dest":"/app","mode":-1,"followSymlink":true,"dirCopyContents":true,"createDestPath":true,"allowWildcard":true,"allowEmptyWildcard":true,"timestamp":-1}}}]}},"constraints":{}},"inputs":["step0:0","step6:0"]},{"id":"step8","op":{"Op":null},"inputs":["step7:0"]}],"digestMapping":{"sha256:010281cc5020ed2576183298b65d57dc08ad8ab9a37205bf48c237ccea0d8ed3":"step6","sha256:1ab3192ef9660c8d6eb9f75c432c6c5a0bb4cb3be6b3ff300c253451cdf35fcc":"step8","sha256:406e35cff5e33d9957f4c3aa0123d95fdc64d90461ad3208adbcb903d646aabf":"step7","sha256:51c3325d6ccca2c3df9aa513dd9394fbac722ee00cf65aea4e0c798f8960aa93":"step3","sha256:7caaad9a78ec1cb3335f62d352f519b8eead19f6a6ef1a15f4065d20a13aed8b":"step4","sha256:8f09375c18dc794fee6a9e4c7247acaa88398d162424c7fd0b56e43a3a7ebb6c":"step0","sha256:99cbe3feba6bbc32a546743e8d6559f34efdf8913990ff425d77fe3d2c453ab1":"step2","sha256:9fece5f3d627a11db2e1bd7c4f25e3e95a471093cd56253cdf3079b28d817f21":"step5","sha256:b662f49df1fb47a2c64a2b691254fb29a77a58e35c8da3cba1e1643f811dedb1":"step1"}},"metadata":{"buildInvocationID":"3550cpmbxk0t70c1wdtumbsli","buildStartedOn":"2023-08-23T05:20:23.062697403Z","buildFinishedOn":"2023-08-23T05:20:54.03470042Z","completeness":{"parameters":true,"environment":true,"materials":true},"reproducible":false,"https://mobyproject.org/buildkit@v1#metadata":{"source":{"locations":{"step0":{"locations":[{"ranges":[{"start":{"line":13},"end":{"line":13}}]}]},"step1":{"locations":[{"ranges":[{"start":{"line":1},"end":{"line":1}}]}]},"step2":{"locations":[{"ranges":[{"start":{"line":3},"end":{"line":3}}]}]},"step3":{},"step4":{"locations":[{"ranges":[{"start":{"line":4},"end":{"line":4}}]}]},"step5":{"locations":[{"ranges":[{"start":{"line":6},"end":{"line":6}}]}]},"step6":{"locations":[{"ranges":[{"start":{"line":9},"end":{"line":9}}]}]},"step7":{"locations":[{"ranges":[{"start":{"line":15},"end":{"line":15}}]}]}},"infos":[{"filename":"Dockerfile","language":"Dockerfile","data":"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","llbDefinition":[{"id":"step0","op":{"Op":{"source":{"identifier":"git://github.com/slsa-framework/example-package.git#2bcaa7495e1cbd11fbd4f598d857b3a6f18df933","attrs":{"git.authheadersecret":"GIT_AUTH_HEADER","git.authtokensecret":"GIT_AUTH_TOKEN","git.fullurl":"https://github.com/slsa-framework/example-package.git"}}},"constraints":{}}},{"id":"step1","op":{"Op":null},"inputs":["step0:0"]}],"digestMapping":{"sha256:51c3325d6ccca2c3df9aa513dd9394fbac722ee00cf65aea4e0c798f8960aa93":"step0","sha256:5a22e5c328aaf9b5e6db4f5d75169c540976cf33776edf4e09e1499822084670":"step1"}}]},"layers":{"step0:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}],[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562}]],"step1:0":[[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:785ef8b9b236a5f027f33cae77513051704c0538bff455ff5548105c954c3b1c","size":49557354},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5a6dad8f55ae6c733e986316bd08205c8b2c41640bf8d08ff6e9bbcb6884304f","size":24030539},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:bd36c7bfe5f4bdffcc0bbb74b0fb38feb35c286ea58b5992617fb38b0c933603","size":64112293},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:9e59e6b803ed24f34e9d1001d46221a69fa46b48d7d007de7d32fc07d031a408","size":92267552},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:f9e56f8fc7184d9d3111c02d7ad7d3e3e6cddfd6c0f8bde653720b14d76a3233","size":100223279},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5e649a4c4e0bfd0c56b695ffd1199960a518ec1f7fdb98dc7ad345dc0c5b0f6f","size":156}],[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:785ef8b9b236a5f027f33cae77513051704c0538bff455ff5548105c954c3b1c","size":49557354},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5a6dad8f55ae6c733e986316bd08205c8b2c41640bf8d08ff6e9bbcb6884304f","size":24030539},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:bd36c7bfe5f4bdffcc0bbb74b0fb38feb35c286ea58b5992617fb38b0c933603","size":64112293},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:9e59e6b803ed24f34e9d1001d46221a69fa46b48d7d007de7d32fc07d031a408","size":92267552},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:f9e56f8fc7184d9d3111c02d7ad7d3e3e6cddfd6c0f8bde653720b14d76a3233","size":100223279},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","digest":"sha256:5e649a4c4e0bfd0c56b695ffd1199960a518ec1f7fdb98dc7ad345dc0c5b0f6f","size":156}]],"step7:0":[[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639","size":103732},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58","size":21202},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db","size":716491},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265","size":317},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0","size":198},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c","size":113},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f","size":385},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c","size":355},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a","size":130562},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:fae15c0b6b42691083a94fd78ce64bd27c6378539d8dd3fb383cf024e1aac260","size":648815}]]}}}}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c new file mode 100644 index 000000000..b972ff1dd Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/280a265e62bd3fb7b54f60712b585eec918bd747ad31dd9d96c02014f5329842 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/280a265e62bd3fb7b54f60712b585eec918bd747ad31dd9d96c02014f5329842 new file mode 100644 index 000000000..8b43e1894 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/280a265e62bd3fb7b54f60712b585eec918bd747ad31dd9d96c02014f5329842 @@ -0,0 +1,19 @@ +{ + "schemaVersion": 2, + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:9e0ead4f1d9a7486c64047ec5aa74cfd7ca8892e4319e8b985cadf4163fe44b8", + "size": 167 + }, + "layers": [ + { + "mediaType": "application/vnd.in-toto+json", + "digest": "sha256:10dc279526ec7dec3af88852fd3b0db3e130792b2e2f23f7a7db99285e792b98", + "size": 14271, + "annotations": { + "in-toto.io/predicate-type": "https://slsa.dev/provenance/v0.2" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f new file mode 100644 index 000000000..2c6cd5b63 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a new file mode 100644 index 000000000..6dcc4d33a Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/5b146084201148bf151871fa779767f013c47706d031106af0d727fb5b88f5ac b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/5b146084201148bf151871fa779767f013c47706d031106af0d727fb5b88f5ac new file mode 100755 index 000000000..2c5d0efc7 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/5b146084201148bf151871fa779767f013c47706d031106af0d727fb5b88f5ac @@ -0,0 +1,28 @@ +{ + "schemaVersion": 2, + "mediaType": "application/vnd.oci.image.index.v1+json", + "manifests": [ + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:7606c85a2e0bc3af20a2e0de046f4c97c275ba689a60fcc0140186acf852ffd3", + "size": 2183, + "platform": { + "architecture": "amd64", + "os": "linux" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "digest": "sha256:280a265e62bd3fb7b54f60712b585eec918bd747ad31dd9d96c02014f5329842", + "size": 567, + "annotations": { + "vnd.docker.reference.digest": "sha256:7606c85a2e0bc3af20a2e0de046f4c97c275ba689a60fcc0140186acf852ffd3", + "vnd.docker.reference.type": "attestation-manifest" + }, + "platform": { + "architecture": "unknown", + "os": "unknown" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/7606c85a2e0bc3af20a2e0de046f4c97c275ba689a60fcc0140186acf852ffd3 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/7606c85a2e0bc3af20a2e0de046f4c97c275ba689a60fcc0140186acf852ffd3 new file mode 100644 index 000000000..0f9667d9e --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/7606c85a2e0bc3af20a2e0de046f4c97c275ba689a60fcc0140186acf852ffd3 @@ -0,0 +1,61 @@ +{ + "schemaVersion": 2, + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "config": { + "mediaType": "application/vnd.oci.image.config.v1+json", + "digest": "sha256:a067ba5dae3a4c56003cf3fa9aef6c9d6618c92f585a2e112aa1cbc4d7efcd19", + "size": 2160 + }, + "layers": [ + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639", + "size": 103732 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58", + "size": 21202 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db", + "size": 716491 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265", + "size": 317 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0", + "size": 198 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c", + "size": 113 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:4aa0ea1413d37a58615488592a0b827ea4b2e48fa5a77cf707d0e35f025e613f", + "size": 385 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c", + "size": 355 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:5627a970d25e752d971a501ec7e35d0d6fdcd4a3ce9e958715a686853024794a", + "size": 130562 + }, + { + "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip", + "digest": "sha256:fae15c0b6b42691083a94fd78ce64bd27c6378539d8dd3fb383cf024e1aac260", + "size": 648815 + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c new file mode 100644 index 000000000..17dec20d0 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/7c881f9ab25e0d86562a123b5fb56aebf8aa0ddd7d48ef602faf8d1e7cf43d8c differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/8ddcdd13bb4094aab70816400017e5c1a5593509dad146421aa712a2c5efedc5 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/8ddcdd13bb4094aab70816400017e5c1a5593509dad146421aa712a2c5efedc5 new file mode 100644 index 000000000..470c13e5b --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/8ddcdd13bb4094aab70816400017e5c1a5593509dad146421aa712a2c5efedc5 @@ -0,0 +1 @@ +{"architecture":"","created":"2023-08-23T05:22:09.250238557Z","history":[{"created":"0001-01-01T00:00:00Z"}],"os":"","rootfs":{"type":"layers","diff_ids":["sha256:a5e176610c4305f4068a2d2e2884c5d57b3e28d46ccbb825a85212dc09010814"]},"config":{}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/9e0ead4f1d9a7486c64047ec5aa74cfd7ca8892e4319e8b985cadf4163fe44b8 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/9e0ead4f1d9a7486c64047ec5aa74cfd7ca8892e4319e8b985cadf4163fe44b8 new file mode 100644 index 000000000..c76b1ff9f --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/9e0ead4f1d9a7486c64047ec5aa74cfd7ca8892e4319e8b985cadf4163fe44b8 @@ -0,0 +1 @@ +{"architecture":"unknown","os":"unknown","config":{},"rootfs":{"type":"layers","diff_ids":["sha256:10dc279526ec7dec3af88852fd3b0db3e130792b2e2f23f7a7db99285e792b98"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a067ba5dae3a4c56003cf3fa9aef6c9d6618c92f585a2e112aa1cbc4d7efcd19 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a067ba5dae3a4c56003cf3fa9aef6c9d6618c92f585a2e112aa1cbc4d7efcd19 new file mode 100644 index 000000000..ed7dd4d9a --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a067ba5dae3a4c56003cf3fa9aef6c9d6618c92f585a2e112aa1cbc4d7efcd19 @@ -0,0 +1 @@ +{"architecture":"amd64","config":{"User":"0","Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Entrypoint":["/app"],"WorkingDir":"/","Labels":{"org.opencontainers.image.created":"2023-08-23T05:20:21.969Z","org.opencontainers.image.description":"","org.opencontainers.image.licenses":"Apache-2.0","org.opencontainers.image.revision":"2bcaa7495e1cbd11fbd4f598d857b3a6f18df933","org.opencontainers.image.source":"https://github.com/slsa-framework/example-package","org.opencontainers.image.title":"example-package","org.opencontainers.image.url":"https://github.com/slsa-framework/example-package","org.opencontainers.image.version":"v13.0.30"},"OnBuild":null},"created":"2023-08-23T05:20:53.897507136Z","history":[{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"0001-01-01T00:00:00Z"},{"created":"2023-08-23T05:20:53.897507136Z","created_by":"COPY /app/app /app # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2023-08-23T05:20:53.897507136Z","created_by":"ENTRYPOINT [\"/app\"]","comment":"buildkit.dockerfile.v0","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:e023e0e48e6e29e90e519f4dd356d058ff2bffbd16e28b802f3b8f93aa4ccb17","sha256:6fbdf253bbc2490dcfede5bdb58ca0db63ee8aff565f6ea9f918f3bce9e2d5aa","sha256:7bea6b893187b14fc0a759fe5f8972d1292a9c0554c87cbf485f0947c26b8a05","sha256:ff5700ec54186528cbae40f54c24b1a34fb7c01527beaa1232868c16e2353f52","sha256:d52f02c6501c9c4410568f0bf6ff30d30d8290f57794c308fe36ea78393afac2","sha256:e624a5370eca2b8266e74d179326e2a8767d361db14d13edd9fb57e408731784","sha256:1a73b54f556b477f0a8b939d13c504a3b4f4db71f7a09c63afbc10acb3de5849","sha256:d2d7ec0f6756eb51cf1602c6f8ac4dd811d3d052661142e0110357bf0b581457","sha256:4cb10dd2545bd173858450b80853b850e49608260f1a0789e0d0b39edf12f500","sha256:ef80ed09dad1a86267c8587f5a446b9db6954da5040171a1e9fd129b823596ef"]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a5e176610c4305f4068a2d2e2884c5d57b3e28d46ccbb825a85212dc09010814 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a5e176610c4305f4068a2d2e2884c5d57b3e28d46ccbb825a85212dc09010814 new file mode 100644 index 000000000..1583d0328 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a5e176610c4305f4068a2d2e2884c5d57b3e28d46ccbb825a85212dc09010814 @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIFiVCtXSJ24K+ZsC2M+2HWPZVPrvgUrHsJwjU/kpG3hJAiEAz9KhThAj3fkzN8JIwoR1wFN1SMjWJPNQBfVbt28GH0s="}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 new file mode 100644 index 000000000..2f49092f3 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/a7ca0d9ba68fdce7e15bc0952d3e898e970548ca24d57698725836c039086639 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db new file mode 100644 index 000000000..0594c669b Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/b02a7525f878e61fc1ef8a7405a2cc17f866e8de222c1c98fd6681aff6e509db differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/d86a56f046e85503c3e54a6fb12fade50c53eb39bcdddc8fd624cc71ecf3b88c b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/d86a56f046e85503c3e54a6fb12fade50c53eb39bcdddc8fd624cc71ecf3b88c new file mode 100644 index 000000000..346c1ce35 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/d86a56f046e85503c3e54a6fb12fade50c53eb39bcdddc8fd624cc71ecf3b88c @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":243,"digest":"sha256:8ddcdd13bb4094aab70816400017e5c1a5593509dad146421aa712a2c5efedc5"},"layers":[{"mediaType":"application/vnd.dsse.envelope.v1+json","size":13392,"digest":"sha256:a5e176610c4305f4068a2d2e2884c5d57b3e28d46ccbb825a85212dc09010814","annotations":{"dev.cosignproject.cosign/signature":"","dev.sigstore.cosign/bundle":"{\"SignedEntryTimestamp\":\"MEUCIQDqCf23oHpVxFumnWwYQcCHtXlGX9kSkaAA+ykdEta7ygIgI9EF3f+Em6rz+h+K357yTdPVQryw552/fhbAEJsBsw8=\",\"Payload\":{\"body\":\"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\",\"integratedTime\":1692768128,\"logIndex\":32414261,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}","dev.sigstore.cosign/certificate":"-----BEGIN CERTIFICATE-----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\nIwMmr1lm6eud10FAL9krqT4RQqxSWUCTvmaqu2Bbh764MFE=\n-----END CERTIFICATE-----\n","dev.sigstore.cosign/chain":"-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----","predicateType":"https://slsa.dev/provenance/v0.2"}}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 new file mode 100644 index 000000000..3dc40828e Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/e8c73c638ae9ec5ad70c49df7e484040d889cca6b4a9af056579c3d058ea93f0 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fae15c0b6b42691083a94fd78ce64bd27c6378539d8dd3fb383cf024e1aac260 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fae15c0b6b42691083a94fd78ce64bd27c6378539d8dd3fb383cf024e1aac260 new file mode 100644 index 000000000..5de81f409 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fae15c0b6b42691083a94fd78ce64bd27c6378539d8dd3fb383cf024e1aac260 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 new file mode 100644 index 000000000..363737e18 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fcb6f6d2c9986d9cd6a2ea3cc2936e5fc613e09f1af9042329011e43057f3265 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 new file mode 100644 index 000000000..0b81632a1 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/blobs/sha256/fe5ca62666f04366c8e7f605aa82997d71320183e99962fa76b3209fdfbb8b58 differ diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/index.json b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/index.json new file mode 100755 index 000000000..8e7668236 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/index.json @@ -0,0 +1,21 @@ +{ + "schemaVersion": 2, + "manifests": [ + { + "mediaType": "application/vnd.oci.image.index.v1+json", + "size": 856, + "digest": "sha256:5b146084201148bf151871fa779767f013c47706d031106af0d727fb5b88f5ac", + "annotations": { + "kind": "dev.cosignproject.cosign/imageIndex" + } + }, + { + "mediaType": "application/vnd.oci.image.manifest.v1+json", + "size": 10388, + "digest": "sha256:d86a56f046e85503c3e54a6fb12fade50c53eb39bcdddc8fd624cc71ecf3b88c", + "annotations": { + "kind": "dev.cosignproject.cosign/atts" + } + } + ] +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/oci-layout b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/oci-layout new file mode 100755 index 000000000..224a86981 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_generic_container/v1.9.0/container_workflow_dispatch/oci-layout @@ -0,0 +1,3 @@ +{ + "imageLayoutVersion": "1.0.0" +} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..9ebcab765 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..a70ded405 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfZ28tYmluYXJ5LWxpbnV4LWFtZDY0LXYxMy4wLjMwIiwiZGlnZXN0Ijp7InNoYTI1NiI6IjdkZDkzZGRmMzcyMDcwYjJhYTkzNmNkZWZkZjMzZDZhZDkwMTVkNDRiMTJlYWEzZjFiZDc4YzYwMjkwOGY4NmMifX1dLCJwcmVkaWNhdGUiOnsiYnVpbGRlciI6eyJpZCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9nb19zbHNhMy55bWxAcmVmcy90YWdzL3YxLjYuMCJ9LCJidWlsZFR5cGUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yL2dvQHYxIiwiaW52b2NhdGlvbiI6eyJjb25maWdTb3VyY2UiOnsidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2VAcmVmcy90YWdzL3YxMy4wLjMwIiwiZGlnZXN0Ijp7InNoYTEiOiJjMTRjNTQ2ZTU0OTQwYTQxMDE5NWVkZTlhYTBlN2VlMmVmMWUxNmQwIn0sImVudHJ5UG9pbnQiOiIuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbCJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6Imlhbmxld2lzIiwiZ2l0aHViX2FjdG9yX2lkIjoiNDkyODkiLCJnaXRodWJfYmFzZV9yZWYiOiIiLCJnaXRodWJfZXZlbnRfbmFtZSI6InB1c2giLCJnaXRodWJfZXZlbnRfcGF5bG9hZCI6eyJhZnRlciI6ImMxNGM1NDZlNTQ5NDBhNDEwMTk1ZWRlOWFhMGU3ZWUyZWYxZTE2ZDAiLCJiYXNlX3JlZiI6InJlZnMvaGVhZHMvbWFpbiIsImJlZm9yZSI6IjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjb21taXRzIjpbXSwiY29tcGFyZSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tcGFyZS92MTMuMC4zMCIsImNyZWF0ZWQiOnRydWUsImRlbGV0ZWQiOmZhbHNlLCJmb3JjZWQiOmZhbHNlLCJoZWFkX2NvbW1pdCI6eyJhdXRob3IiOnsiZW1haWwiOiJnaXRodWItYWN0aW9uc0BnaXRodWIuY29tIiwibmFtZSI6ImdpdGh1Yi1hY3Rpb25zIiwidXNlcm5hbWUiOiJpbnZhbGlkLWVtYWlsLWFkZHJlc3MifSwiY29tbWl0dGVyIjp7ImVtYWlsIjoiZ2l0aHViLWFjdGlvbnNAZ2l0aHViLmNvbSIsIm5hbWUiOiJnaXRodWItYWN0aW9ucyIsInVzZXJuYW1lIjoiaW52YWxpZC1lbWFpbC1hZGRyZXNzIn0sImRpc3RpbmN0Ijp0cnVlLCJpZCI6ImMxNGM1NDZlNTQ5NDBhNDEwMTk1ZWRlOWFhMGU3ZWUyZWYxZTE2ZDAiLCJtZXNzYWdlIjoic3luYydpbmcgYnJhbmNoMSAtIFR1ZSBNYXkgMjMgMDY6MjE6MjkgVVRDIDIwMjMiLCJ0aW1lc3RhbXAiOiIyMDIzLTA1LTIzVDA2OjIxOjI5WiIsInRyZWVfaWQiOiJlZGUwZTg3ZGJlOWY4MGU0ZGFhYmQxMDRmMTNjNDI5YmI1Y2ExZDg1IiwidXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXQvYzE0YzU0NmU1NDk0MGE0MTAxOTVlZGU5YWEwZTdlZTJlZjFlMTZkMCJ9LCJvcmdhbml6YXRpb24iOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS84MDQzMTE4Nz92PTQiLCJkZXNjcmlwdGlvbiI6IlN1cHBseS1jaGFpbiBMZXZlbHMgZm9yIFNvZnR3YXJlIEFydGlmYWN0cyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvZXZlbnRzIiwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2hvb2tzIiwiaWQiOjgwNDMxMTg3LCJpc3N1ZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2lzc3VlcyIsImxvZ2luIjoic2xzYS1mcmFtZXdvcmsiLCJtZW1iZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9tZW1iZXJzey9tZW1iZXJ9Iiwibm9kZV9pZCI6Ik1ERXlPazl5WjJGdWFYcGhkR2x2Ympnd05ETXhNVGczIiwicHVibGljX21lbWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3B1YmxpY19tZW1iZXJzey9tZW1iZXJ9IiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3JlcG9zIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrIn0sInB1c2hlciI6eyJlbWFpbCI6Imlhbmxld2lzQGdvb2dsZS5jb20iLCJuYW1lIjoiaWFubGV3aXMifSwicmVmIjoicmVmcy90YWdzL3YxMy4wLjMwIiwicmVwb3NpdG9yeSI6eyJhbGxvd19mb3JraW5nIjp0cnVlLCJhcmNoaXZlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3thcmNoaXZlX2Zvcm1hdH17L3JlZn0iLCJhcmNoaXZlZCI6ZmFsc2UsImFzc2lnbmVlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hc3NpZ25lZXN7L3VzZXJ9IiwiYmxvYnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L2Jsb2Jzey9zaGF9IiwiYnJhbmNoZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYnJhbmNoZXN7L2JyYW5jaH0iLCJjbG9uZV91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsImNvbGxhYm9yYXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29sbGFib3JhdG9yc3svY29sbGFib3JhdG9yfSIsImNvbW1lbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1lbnRzey9udW1iZXJ9IiwiY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXRzey9zaGF9IiwiY29tcGFyZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21wYXJlL3tiYXNlfS4uLntoZWFkfSIsImNvbnRlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbnRlbnRzL3srcGF0aH0iLCJjb250cmlidXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29udHJpYnV0b3JzIiwiY3JlYXRlZF9hdCI6MTY1MTA4Nzg0MywiZGVmYXVsdF9icmFuY2giOiJtYWluIiwiZGVwbG95bWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZGVwbG95bWVudHMiLCJkZXNjcmlwdGlvbiI6bnVsbCwiZGlzYWJsZWQiOmZhbHNlLCJkb3dubG9hZHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZG93bmxvYWRzIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2V2ZW50cyIsImZvcmsiOmZhbHNlLCJmb3JrcyI6MTYsImZvcmtzX2NvdW50IjoxNiwiZm9ya3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZm9ya3MiLCJmdWxsX25hbWUiOiJzbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJnaXRfY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvY29tbWl0c3svc2hhfSIsImdpdF9yZWZzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9yZWZzey9zaGF9IiwiZ2l0X3RhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RhZ3N7L3NoYX0iLCJnaXRfdXJsIjoiZ2l0Oi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0IiwiaGFzX2Rpc2N1c3Npb25zIjpmYWxzZSwiaGFzX2Rvd25sb2FkcyI6dHJ1ZSwiaGFzX2lzc3VlcyI6dHJ1ZSwiaGFzX3BhZ2VzIjpmYWxzZSwiaGFzX3Byb2plY3RzIjp0cnVlLCJoYXNfd2lraSI6dHJ1ZSwiaG9tZXBhZ2UiOm51bGwsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2hvb2tzIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlIiwiaWQiOjQ4NjMyNTgwOSwiaXNfdGVtcGxhdGUiOmZhbHNlLCJpc3N1ZV9jb21tZW50X3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsImlzc3VlX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9pc3N1ZXMvZXZlbnRzey9udW1iZXJ9IiwiaXNzdWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlc3svbnVtYmVyfSIsImtleXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uva2V5c3sva2V5X2lkfSIsImxhYmVsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9sYWJlbHN7L25hbWV9IiwibGFuZ3VhZ2UiOiJTdGFybGFyayIsImxhbmd1YWdlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9sYW5ndWFnZXMiLCJsaWNlbnNlIjp7ImtleSI6ImFwYWNoZS0yLjAiLCJuYW1lIjoiQXBhY2hlIExpY2Vuc2UgMi4wIiwibm9kZV9pZCI6Ik1EYzZUR2xqWlc1elpUST0iLCJzcGR4X2lkIjoiQXBhY2hlLTIuMCIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vbGljZW5zZXMvYXBhY2hlLTIuMCJ9LCJtYXN0ZXJfYnJhbmNoIjoibWFpbiIsIm1lcmdlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9tZXJnZXMiLCJtaWxlc3RvbmVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL21pbGVzdG9uZXN7L251bWJlcn0iLCJtaXJyb3JfdXJsIjpudWxsLCJuYW1lIjoiZXhhbXBsZS1wYWNrYWdlIiwibm9kZV9pZCI6IlJfa2dET0hQeS1NUSIsIm5vdGlmaWNhdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvbm90aWZpY2F0aW9uc3s/c2luY2UsYWxsLHBhcnRpY2lwYXRpbmd9Iiwib3Blbl9pc3N1ZXMiOjI4LCJvcGVuX2lzc3Vlc19jb3VudCI6MjgsIm9yZ2FuaXphdGlvbiI6InNsc2EtZnJhbWV3b3JrIiwib3duZXIiOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS84MDQzMTE4Nz92PTQiLCJlbWFpbCI6bnVsbCwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZXZlbnRzey9wcml2YWN5fSIsImZvbGxvd2Vyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLCJnaXN0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL2dpc3Rzey9naXN0X2lkfSIsImdyYXZhdGFyX2lkIjoiIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsiLCJpZCI6ODA0MzExODcsImxvZ2luIjoic2xzYS1mcmFtZXdvcmsiLCJuYW1lIjoic2xzYS1mcmFtZXdvcmsiLCJub2RlX2lkIjoiTURFeU9rOXlaMkZ1YVhwaGRHbHZiamd3TkRNeE1UZzMiLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJPcmdhbml6YXRpb24iLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrIn0sInByaXZhdGUiOmZhbHNlLCJwdWxsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9wdWxsc3svbnVtYmVyfSIsInB1c2hlZF9hdCI6MTY4NDg5MTkwNywicmVsZWFzZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvcmVsZWFzZXN7L2lkfSIsInNpemUiOjUxNTYsInNzaF91cmwiOiJnaXRAZ2l0aHViLmNvbTpzbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0Iiwic3RhcmdhemVycyI6Nywic3RhcmdhemVyc19jb3VudCI6Nywic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdGFyZ2F6ZXJzIiwic3RhdHVzZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhdHVzZXMve3NoYX0iLCJzdWJzY3JpYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpcHRpb24iLCJzdm5fdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsInRhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RlYW1zIiwidG9waWNzIjpbXSwidHJlZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RyZWVzey9zaGF9IiwidXBkYXRlZF9hdCI6IjIwMjMtMDQtMDJUMjE6Mzg6MjhaIiwidXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsInZpc2liaWxpdHkiOiJwdWJsaWMiLCJ3YXRjaGVycyI6Nywid2F0Y2hlcnNfY291bnQiOjcsIndlYl9jb21taXRfc2lnbm9mZl9yZXF1aXJlZCI6dHJ1ZX0sInNlbmRlciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzQ5Mjg5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2lhbmxld2lzIiwiaWQiOjQ5Mjg5LCJsb2dpbiI6Imlhbmxld2lzIiwibm9kZV9pZCI6Ik1EUTZWWE5sY2pRNU1qZzUiLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcyJ9fSwiZ2l0aHViX2hlYWRfcmVmIjoiIiwiZ2l0aHViX3JlZiI6InJlZnMvdGFncy92MTMuMC4zMCIsImdpdGh1Yl9yZWZfdHlwZSI6InRhZyIsImdpdGh1Yl9yZXBvc2l0b3J5X2lkIjoiNDg2MzI1ODA5IiwiZ2l0aHViX3JlcG9zaXRvcnlfb3duZXIiOiJzbHNhLWZyYW1ld29yayIsImdpdGh1Yl9yZXBvc2l0b3J5X293bmVyX2lkIjoiODA0MzExODciLCJnaXRodWJfcnVuX2F0dGVtcHQiOiIxIiwiZ2l0aHViX3J1bl9pZCI6IjUwNjM3MTI4ODYiLCJnaXRodWJfcnVuX251bWJlciI6IjQ5IiwiZ2l0aHViX3NoYTEiOiJjMTRjNTQ2ZTU0OTQwYTQxMDE5NWVkZTlhYTBlN2VlMmVmMWUxNmQwIiwib3MiOiJ1YnVudHUyMiJ9fSwiYnVpbGRDb25maWciOnsic3RlcHMiOlt7IndvcmtpbmdEaXIiOiIvaG9tZS9ydW5uZXIvd29yay9leGFtcGxlLXBhY2thZ2UvZXhhbXBsZS1wYWNrYWdlL19fUFJPSkVDVF9DSEVDS09VVF9ESVJfXyIsImNvbW1hbmQiOlsiL29wdC9ob3N0ZWR0b29sY2FjaGUvZ28vMS4xOC4xMC94NjQvYmluL2dvIiwibW9kIiwidmVuZG9yIl0sImVudiI6bnVsbH0seyJ3b3JraW5nRGlyIjoiL2hvbWUvcnVubmVyL3dvcmsvZXhhbXBsZS1wYWNrYWdlL2V4YW1wbGUtcGFja2FnZS9fX1BST0pFQ1RfQ0hFQ0tPVVRfRElSX18iLCJjb21tYW5kIjpbIi9vcHQvaG9zdGVkdG9vbGNhY2hlL2dvLzEuMTguMTAveDY0L2Jpbi9nbyIsImJ1aWxkIiwiLW1vZD12ZW5kb3IiLCItdHJpbXBhdGgiLCItdGFncz1uZXRnbyIsIi1vIiwiZ2hhX2dvLWJpbmFyeS1saW51eC1hbWQ2NC12MTMuMC4zMCJdLCJlbnYiOlsiR09PUz1saW51eCIsIkdPQVJDSD1hbWQ2NCIsIkdPMTExTU9EVUxFPW9uIiwiQ0dPX0VOQUJMRUQ9MCJdfV0sInZlcnNpb24iOjF9LCJtZXRhZGF0YSI6eyJidWlsZEludm9jYXRpb25JRCI6IjUwNjM3MTI4ODYtMSIsImNvbXBsZXRlbmVzcyI6eyJwYXJhbWV0ZXJzIjp0cnVlLCJlbnZpcm9ubWVudCI6ZmFsc2UsIm1hdGVyaWFscyI6ZmFsc2V9LCJyZXByb2R1Y2libGUiOmZhbHNlfSwibWF0ZXJpYWxzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZUByZWZzL3RhZ3MvdjEzLjAuMzAiLCJkaWdlc3QiOnsic2hhMSI6ImMxNGM1NDZlNTQ5NDBhNDEwMTk1ZWRlOWFhMGU3ZWUyZWYxZTE2ZDAifX0seyJ1cmkiOiJodHRwczovL2dpdGh1Yi5jb20vYWN0aW9ucy92aXJ0dWFsLWVudmlyb25tZW50cy9yZWxlYXNlcy90YWcvdWJ1bnR1MjIvMjAyMzA1MDcuMSJ9XX19","signatures":[{"keyid":"","sig":"MEYCIQCYRa7Zw0SrwIuTVkLsjjTilf7ID3nnM8dtfrcfkbimaQIhAPWKIvs7TT3iRUqTUFY1D2cRMC+nTzwyQ+qrp34Xjayj","cert":"-----BEGIN CERTIFICATE-----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\nJhQYICzTGz/KytgTkT78Fl5Anrpt27gsjLG4mVpiuxUg71EpxC2nNA==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..9ebcab765 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..9ebcab765 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..e35ab1a4b --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIAgpPAHMWvmtAZ2iRFMFKc96pF/HUx8Ce4LJvVujMo8oAiAusPOXWjc7XoJp4n+6WUrqMXFHxB5/KCe2HEviB101nQ==","cert":"-----BEGIN CERTIFICATE-----\nMIIHbTCCBvKgAwIBAgIUMZ0HxiYpeOzanmanW6y0Cgn8uD4wCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjMwNTI0MDEzNDIzWhcNMjMwNTI0MDE0NDIzWjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAEy1ihbgF3IkAnb6v1XJufdsFp9h3CmjNzCAHp\n6daA7ZxK3JnvSlBItiE8C+v6a5pclghu+kUsx/X1Y5WiQ8j18aOCBhEwggYNMA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUu5rm\npYfL7LrcYKAnNP8/VpnNYBMwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8wfQYDVR0RAQH/BHMwcYZvaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3\nb3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8uZ2l0aHViL3dvcmtmbG93cy9idWls\nZGVyX2dvX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuNi4wMDkGCisGAQQBg78wAQEE\nK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20wEgYK\nKwYBBAGDvzABAgQEcHVzaDA2BgorBgEEAYO/MAEDBChjMTRjNTQ2ZTU0OTQwYTQx\nMDE5NWVkZTlhYTBlN2VlMmVmMWUxNmQwMFUGCisGAQQBg78wAQQERy5naXRodWIv\nd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFp\nbi5hbGwuc2xzYTMueW1sMCwGCisGAQQBg78wAQUEHnNsc2EtZnJhbWV3b3JrL2V4\nYW1wbGUtcGFja2FnZTAdBgorBgEEAYO/MAEGBA9yZWZzL3RhZ3MvdjE0LjIwOwYK\nKwYBBAGDvzABCAQtDCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNv\nbnRlbnQuY29tMH8GCisGAQQBg78wAQkEcQxvaHR0cHM6Ly9naXRodWIuY29tL3Ns\nc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8uZ2l0aHViL3dvcmtm\nbG93cy9idWlsZGVyX2dvX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuNi4wMDgGCisG\nAQQBg78wAQoEKgwoMDc3OWY3YmVjNjhlMmJmNTRhN2IwYTMyYmY0NzYzZjI1YWIy\nOTcwMjAdBgorBgEEAYO/MAELBA8MDWdpdGh1Yi1ob3N0ZWQwQQYKKwYBBAGDvzAB\nDAQzDDFodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1w\nYWNrYWdlMDgGCisGAQQBg78wAQ0EKgwoYzE0YzU0NmU1NDk0MGE0MTAxOTVlZGU5\nYWEwZTdlZTJlZjFlMTZkMDAfBgorBgEEAYO/MAEOBBEMD3JlZnMvdGFncy92MTQu\nMjAZBgorBgEEAYO/MAEPBAsMCTQ4NjMyNTgwOTAxBgorBgEEAYO/MAEQBCMMIWh0\ndHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yazAYBgorBgEEAYO/MAERBAoM\nCDgwNDMxMTg3MIGbBgorBgEEAYO/MAESBIGMDIGJaHR0cHM6Ly9naXRodWIuY29t\nL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS8uZ2l0aHViL3dvcmtmbG93\ncy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNs\nc2EzLnltbEByZWZzL3RhZ3MvdjE0LjIwOAYKKwYBBAGDvzABEwQqDChjMTRjNTQ2\nZTU0OTQwYTQxMDE5NWVkZTlhYTBlN2VlMmVmMWUxNmQwMBQGCisGAQQBg78wARQE\nBgwEcHVzaDBkBgorBgEEAYO/MAEVBFYMVGh0dHBzOi8vZ2l0aHViLmNvbS9zbHNh\nLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYWN0aW9ucy9ydW5zLzUwNjM3MTI4\nMzIvYXR0ZW1wdHMvMTCBigYKKwYBBAHWeQIEAgR8BHoAeAB2AN09MGrGxxEyYxke\nHJlnNwKiSl643jyt/4eKcoAvKe6OAAABiEtklXYAAAQDAEcwRQIhAK45cy9vvodT\nv/FHPtFqDf6h6gxO8LTfNGI/JpBzxOZrAiAoRXM6I5O4DyfaSITnQqm6lnma+9mm\nu0JsCka5N6/gFzAKBggqhkjOPQQDAwNpADBmAjEA0rdjZdYsKKSXU5/AZ6p4wCtv\noWy1sEgs9VvI8L07xBrZk+rgTUlybe0a39ml01RKAjEA2RyI7fhOgFFxqKF8botu\naeccQEChWA1pxuf8JwcvRdXHvBw+I1jEKapbnHZbK5hJ\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..86bbad7dd --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIDhpU1K/VHgM5aW5OJoyKBn2gUrrPJK3qjCCRRP9CegNAiEA4R/OqNdijTX8FjXAjd+57NraRDDPC8MzbCe/sTJwUFo=","cert":"-----BEGIN CERTIFICATE-----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\nT3stJPEf0WmoiOvI29zJZ2ymOKOc8jWE0g==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..9ebcab765 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..2cb36ac8b --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.6.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIB5DnVBjzM9KoNcWnND/egH3bjpoV8gzS4vFBdsgP1hJAiEAkl6JPLRpgm+5VG2L/hQEvkGd/MXUtE4uv2Lm6qsac9Y=","cert":"-----BEGIN CERTIFICATE-----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\nXW07dxSRr9+0\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..a5030527c Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..9797ace8e --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfZ28tYmluYXJ5LWxpbnV4LWFtZDY0LXYxMy4wLjMwIiwiZGlnZXN0Ijp7InNoYTI1NiI6ImYwY2U4OGQ0MTliMTllYzAyNzM2M2M3MzU1NjFlMjlmNmU2NjFjMmI3M2IxMGE0ZWMwNDcwOWI4YWU4ZmIwMTIifX1dLCJwcmVkaWNhdGUiOnsiYnVpbGRlciI6eyJpZCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9nb19zbHNhMy55bWxAcmVmcy90YWdzL3YxLjcuMCJ9LCJidWlsZFR5cGUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yL2dvQHYxIiwiaW52b2NhdGlvbiI6eyJjb25maWdTb3VyY2UiOnsidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2VAcmVmcy90YWdzL3YxMy4wLjMwIiwiZGlnZXN0Ijp7InNoYTEiOiI2MmNiMWYxZTQ4NTgyOWJhZmU4YmJlYzhiOTkwMGMwY2I3NjI0ZmU3In0sImVudHJ5UG9pbnQiOiIuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbCJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6Imlhbmxld2lzIiwiZ2l0aHViX2FjdG9yX2lkIjoiNDkyODkiLCJnaXRodWJfYmFzZV9yZWYiOiIiLCJnaXRodWJfZXZlbnRfbmFtZSI6InB1c2giLCJnaXRodWJfZXZlbnRfcGF5bG9hZCI6eyJhZnRlciI6IjYyY2IxZjFlNDg1ODI5YmFmZThiYmVjOGI5OTAwYzBjYjc2MjRmZTciLCJiYXNlX3JlZiI6InJlZnMvaGVhZHMvbWFpbiIsImJlZm9yZSI6IjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjb21taXRzIjpbXSwiY29tcGFyZSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tcGFyZS92MTMuMC4zMCIsImNyZWF0ZWQiOnRydWUsImRlbGV0ZWQiOmZhbHNlLCJmb3JjZWQiOmZhbHNlLCJoZWFkX2NvbW1pdCI6eyJhdXRob3IiOnsiZW1haWwiOiJhc3JhYUBnb29nbGUuY29tIiwibmFtZSI6IkFzcmEgQWxpIiwidXNlcm5hbWUiOiJhc3JhYSJ9LCJjb21taXR0ZXIiOnsiZW1haWwiOiJhc3JhYUBnb29nbGUuY29tIiwibmFtZSI6IkFzcmEgQWxpIiwidXNlcm5hbWUiOiJhc3JhYSJ9LCJkaXN0aW5jdCI6dHJ1ZSwiaWQiOiI2MmNiMWYxZTQ4NTgyOWJhZmU4YmJlYzhiOTkwMGMwY2I3NjI0ZmU3IiwibWVzc2FnZSI6InVwZGF0ZSBhZHZlcnNhcmlhbCB0ZXN0cyB0byB2MS43LjBcblxuU2lnbmVkLW9mZi1ieTogQXNyYSBBbGkgXHUwMDNjYXNyYWFAZ29vZ2xlLmNvbVx1MDAzZSIsInRpbWVzdGFtcCI6IjIwMjMtMDYtMDdUMDk6MzE6MTQtMDU6MDAiLCJ0cmVlX2lkIjoiNTJlZjZmNDc5ODVhZGI5NjcyMGNjYTA2NmNjNThjYmRiNDdiYTEwZSIsInVybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tbWl0LzYyY2IxZjFlNDg1ODI5YmFmZThiYmVjOGI5OTAwYzBjYjc2MjRmZTcifSwib3JnYW5pemF0aW9uIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvODA0MzExODc/dj00IiwiZGVzY3JpcHRpb24iOiJTdXBwbHktY2hhaW4gTGV2ZWxzIGZvciBTb2Z0d2FyZSBBcnRpZmFjdHMiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2V2ZW50cyIsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9ob29rcyIsImlkIjo4MDQzMTE4NywiaXNzdWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9pc3N1ZXMiLCJsb2dpbiI6InNsc2EtZnJhbWV3b3JrIiwibWVtYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvbWVtYmVyc3svbWVtYmVyfSIsIm5vZGVfaWQiOiJNREV5T2s5eVoyRnVhWHBoZEdsdmJqZ3dORE14TVRnMyIsInB1YmxpY19tZW1iZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9wdWJsaWNfbWVtYmVyc3svbWVtYmVyfSIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9yZXBvcyIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yayJ9LCJwdXNoZXIiOnsiZW1haWwiOiJpYW5sZXdpc0Bnb29nbGUuY29tIiwibmFtZSI6Imlhbmxld2lzIn0sInJlZiI6InJlZnMvdGFncy92MTMuMC4zMCIsInJlcG9zaXRvcnkiOnsiYWxsb3dfZm9ya2luZyI6dHJ1ZSwiYXJjaGl2ZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS97YXJjaGl2ZV9mb3JtYXR9ey9yZWZ9IiwiYXJjaGl2ZWQiOmZhbHNlLCJhc3NpZ25lZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYXNzaWduZWVzey91c2VyfSIsImJsb2JzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9ibG9ic3svc2hhfSIsImJyYW5jaGVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2JyYW5jaGVzey9icmFuY2h9IiwiY2xvbmVfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJjb2xsYWJvcmF0b3JzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbGxhYm9yYXRvcnN7L2NvbGxhYm9yYXRvcn0iLCJjb21tZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21tZW50c3svbnVtYmVyfSIsImNvbW1pdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tbWl0c3svc2hhfSIsImNvbXBhcmVfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tcGFyZS97YmFzZX0uLi57aGVhZH0iLCJjb250ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb250ZW50cy97K3BhdGh9IiwiY29udHJpYnV0b3JzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbnRyaWJ1dG9ycyIsImNyZWF0ZWRfYXQiOjE2NTEwODc4NDMsImRlZmF1bHRfYnJhbmNoIjoibWFpbiIsImRlcGxveW1lbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2RlcGxveW1lbnRzIiwiZGVzY3JpcHRpb24iOm51bGwsImRpc2FibGVkIjpmYWxzZSwiZG93bmxvYWRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2Rvd25sb2FkcyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9ldmVudHMiLCJmb3JrIjpmYWxzZSwiZm9ya3MiOjE2LCJmb3Jrc19jb3VudCI6MTYsImZvcmtzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2ZvcmtzIiwiZnVsbF9uYW1lIjoic2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlIiwiZ2l0X2NvbW1pdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L2NvbW1pdHN7L3NoYX0iLCJnaXRfcmVmc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvcmVmc3svc2hhfSIsImdpdF90YWdzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC90YWdzey9zaGF9IiwiZ2l0X3VybCI6ImdpdDovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsImhhc19kaXNjdXNzaW9ucyI6ZmFsc2UsImhhc19kb3dubG9hZHMiOnRydWUsImhhc19pc3N1ZXMiOnRydWUsImhhc19wYWdlcyI6ZmFsc2UsImhhc19wcm9qZWN0cyI6dHJ1ZSwiaGFzX3dpa2kiOnRydWUsImhvbWVwYWdlIjpudWxsLCJob29rc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9ob29rcyIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsImlkIjo0ODYzMjU4MDksImlzX3RlbXBsYXRlIjpmYWxzZSwiaXNzdWVfY29tbWVudF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9pc3N1ZXMvY29tbWVudHN7L251bWJlcn0iLCJpc3N1ZV9ldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaXNzdWVzL2V2ZW50c3svbnVtYmVyfSIsImlzc3Vlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9pc3N1ZXN7L251bWJlcn0iLCJrZXlzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2tleXN7L2tleV9pZH0iLCJsYWJlbHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbGFiZWxzey9uYW1lfSIsImxhbmd1YWdlIjoiTWFrZWZpbGUiLCJsYW5ndWFnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbGFuZ3VhZ2VzIiwibGljZW5zZSI6eyJrZXkiOiJhcGFjaGUtMi4wIiwibmFtZSI6IkFwYWNoZSBMaWNlbnNlIDIuMCIsIm5vZGVfaWQiOiJNRGM2VEdsalpXNXpaVEk9Iiwic3BkeF9pZCI6IkFwYWNoZS0yLjAiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL2xpY2Vuc2VzL2FwYWNoZS0yLjAifSwibWFzdGVyX2JyYW5jaCI6Im1haW4iLCJtZXJnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbWVyZ2VzIiwibWlsZXN0b25lc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9taWxlc3RvbmVzey9udW1iZXJ9IiwibWlycm9yX3VybCI6bnVsbCwibmFtZSI6ImV4YW1wbGUtcGFja2FnZSIsIm5vZGVfaWQiOiJSX2tnRE9IUHktTVEiLCJub3RpZmljYXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL25vdGlmaWNhdGlvbnN7P3NpbmNlLGFsbCxwYXJ0aWNpcGF0aW5nfSIsIm9wZW5faXNzdWVzIjozMywib3Blbl9pc3N1ZXNfY291bnQiOjMzLCJvcmdhbml6YXRpb24iOiJzbHNhLWZyYW1ld29yayIsIm93bmVyIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvODA0MzExODc/dj00IiwiZW1haWwiOm51bGwsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrIiwiaWQiOjgwNDMxMTg3LCJsb2dpbiI6InNsc2EtZnJhbWV3b3JrIiwibmFtZSI6InNsc2EtZnJhbWV3b3JrIiwibm9kZV9pZCI6Ik1ERXlPazl5WjJGdWFYcGhkR2x2Ympnd05ETXhNVGczIiwib3JnYW5pemF0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL29yZ3MiLCJyZWNlaXZlZF9ldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9yZWNlaXZlZF9ldmVudHMiLCJyZXBvc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3JlcG9zIiwic2l0ZV9hZG1pbiI6ZmFsc2UsInN0YXJyZWRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9zdGFycmVkey9vd25lcn17L3JlcG99Iiwic3Vic2NyaXB0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3N1YnNjcmlwdGlvbnMiLCJ0eXBlIjoiT3JnYW5pemF0aW9uIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yayJ9LCJwcml2YXRlIjpmYWxzZSwicHVsbHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvcHVsbHN7L251bWJlcn0iLCJwdXNoZWRfYXQiOjE2ODYxNDg4NTcsInJlbGVhc2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3JlbGVhc2Vzey9pZH0iLCJzaXplIjo1Mzk5LCJzc2hfdXJsIjoiZ2l0QGdpdGh1Yi5jb206c2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsInN0YXJnYXplcnMiOjcsInN0YXJnYXplcnNfY291bnQiOjcsInN0YXJnYXplcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3N0YXR1c2VzL3tzaGF9Iiwic3Vic2NyaWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaWJlcnMiLCJzdWJzY3JpcHRpb25fdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ0YWdzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RhZ3MiLCJ0ZWFtc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC90cmVlc3svc2hhfSIsInVwZGF0ZWRfYXQiOiIyMDIzLTA2LTA3VDAyOjAxOjA5WiIsInVybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ2aXNpYmlsaXR5IjoicHVibGljIiwid2F0Y2hlcnMiOjcsIndhdGNoZXJzX2NvdW50Ijo3LCJ3ZWJfY29tbWl0X3NpZ25vZmZfcmVxdWlyZWQiOnRydWV9LCJzZW5kZXIiOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS80OTI4OT92PTQiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9ldmVudHN7L3ByaXZhY3l9IiwiZm9sbG93ZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvZm9sbG93ZXJzIiwiZm9sbG93aW5nX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsImdpc3RzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvZ2lzdHN7L2dpc3RfaWR9IiwiZ3JhdmF0YXJfaWQiOiIiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9pYW5sZXdpcyIsImlkIjo0OTI4OSwibG9naW4iOiJpYW5sZXdpcyIsIm5vZGVfaWQiOiJNRFE2VlhObGNqUTVNamc1Iiwib3JnYW5pemF0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL29yZ3MiLCJyZWNlaXZlZF9ldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9yZWNlaXZlZF9ldmVudHMiLCJyZXBvc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3JlcG9zIiwic2l0ZV9hZG1pbiI6ZmFsc2UsInN0YXJyZWRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9zdGFycmVkey9vd25lcn17L3JlcG99Iiwic3Vic2NyaXB0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3N1YnNjcmlwdGlvbnMiLCJ0eXBlIjoiVXNlciIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMifX0sImdpdGh1Yl9oZWFkX3JlZiI6IiIsImdpdGh1Yl9yZWYiOiJyZWZzL3RhZ3MvdjEzLjAuMzAiLCJnaXRodWJfcmVmX3R5cGUiOiJ0YWciLCJnaXRodWJfcmVwb3NpdG9yeV9pZCI6IjQ4NjMyNTgwOSIsImdpdGh1Yl9yZXBvc2l0b3J5X293bmVyIjoic2xzYS1mcmFtZXdvcmsiLCJnaXRodWJfcmVwb3NpdG9yeV9vd25lcl9pZCI6IjgwNDMxMTg3IiwiZ2l0aHViX3J1bl9hdHRlbXB0IjoiMSIsImdpdGh1Yl9ydW5faWQiOiI1MjAxMzkwMzM3IiwiZ2l0aHViX3J1bl9udW1iZXIiOiI2NSIsImdpdGh1Yl9zaGExIjoiNjJjYjFmMWU0ODU4MjliYWZlOGJiZWM4Yjk5MDBjMGNiNzYyNGZlNyIsIm9zIjoidWJ1bnR1MjIifX0sImJ1aWxkQ29uZmlnIjp7InN0ZXBzIjpbeyJ3b3JraW5nRGlyIjoiL2hvbWUvcnVubmVyL3dvcmsvZXhhbXBsZS1wYWNrYWdlL2V4YW1wbGUtcGFja2FnZS9fX1BST0pFQ1RfQ0hFQ0tPVVRfRElSX18iLCJjb21tYW5kIjpbIi9vcHQvaG9zdGVkdG9vbGNhY2hlL2dvLzEuMTguMTAveDY0L2Jpbi9nbyIsIm1vZCIsInZlbmRvciJdLCJlbnYiOm51bGx9LHsid29ya2luZ0RpciI6Ii9ob21lL3J1bm5lci93b3JrL2V4YW1wbGUtcGFja2FnZS9leGFtcGxlLXBhY2thZ2UvX19QUk9KRUNUX0NIRUNLT1VUX0RJUl9fIiwiY29tbWFuZCI6WyIvb3B0L2hvc3RlZHRvb2xjYWNoZS9nby8xLjE4LjEwL3g2NC9iaW4vZ28iLCJidWlsZCIsIi1tb2Q9dmVuZG9yIiwiLXRyaW1wYXRoIiwiLXRhZ3M9bmV0Z28iLCItbyIsImdoYV9nby1iaW5hcnktbGludXgtYW1kNjQtdjEzLjAuMzAiXSwiZW52IjpbIkdPT1M9bGludXgiLCJHT0FSQ0g9YW1kNjQiLCJHTzExMU1PRFVMRT1vbiIsIkNHT19FTkFCTEVEPTAiXX1dLCJ2ZXJzaW9uIjoxfSwibWV0YWRhdGEiOnsiYnVpbGRJbnZvY2F0aW9uSUQiOiI1MjAxMzkwMzM3LTEiLCJjb21wbGV0ZW5lc3MiOnsicGFyYW1ldGVycyI6dHJ1ZSwiZW52aXJvbm1lbnQiOmZhbHNlLCJtYXRlcmlhbHMiOmZhbHNlfSwicmVwcm9kdWNpYmxlIjpmYWxzZX0sIm1hdGVyaWFscyI6W3sidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2VAcmVmcy90YWdzL3YxMy4wLjMwIiwiZGlnZXN0Ijp7InNoYTEiOiI2MmNiMWYxZTQ4NTgyOWJhZmU4YmJlYzhiOTkwMGMwY2I3NjI0ZmU3In19LHsidXJpIjoiaHR0cHM6Ly9naXRodWIuY29tL2FjdGlvbnMvdmlydHVhbC1lbnZpcm9ubWVudHMvcmVsZWFzZXMvdGFnL3VidW50dTIyLzIwMjMwNTE3LjEifV19fQ==","signatures":[{"keyid":"","sig":"MEQCIENeNZh1/PuhiU+gd3qZFbKHNDfayrwfPcGs3I/4rbo6AiAl/XSuevsQK58coeG8TiY53KM1OC0vGzEK85/AKP77kw==","cert":"-----BEGIN CERTIFICATE-----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\nZ35qmtJjfIr7vL7wEq6s+c6cvOss8NV7dmlSC4fe5X0lydXYM3qM37I=\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..a5030527c Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..a5030527c Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..33480cea3 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQDR20XotiievxhB/JVsZw6vBzNG94wqHy5eyb/aGtsowwIgUtx39ghjQunhgV09E7ThwpmuQPpxN6NjmqGXLNR9K9c=","cert":"-----BEGIN CERTIFICATE-----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\niyN6mh+s4DCMs9XLzNQ/jp04fD0Xo+zmB68czp8kjw==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..1f246d2fc --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIFjw2F9891nmw8SMqYIyNKwjQwwOqDGkefQj8CSw5t7oAiEAmo/vvK/yHS9TKdzUR1PJAaPEBqsZ8NsC01ufg+UxW48=","cert":"-----BEGIN CERTIFICATE-----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\nSiOWyfT/Yaol2OBDR6tTikrQCclm/E/G4Pc=\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..a5030527c Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..2c8eca3f5 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.7.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCICc280g3bH8e5mKM19gcRze8/s0qsZhrv/Vii1CI8fT+AiA2lZGr8zI8dV7El6F7NDEe4n1mxJLZpa2Vt77cJteLxg==","cert":"-----BEGIN CERTIFICATE-----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\nc0HnGIwISuqsuQ==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..d081d3b05 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..a91708fc2 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQC0Ql3xuMWHZuOL3w5BQ6Yxi87f/HwTljdLBNoDcoe/MgIgELBBE1/eFwQQB9luJapg9Qis47vxfY9pEo2B9Sds06k=","cert":"-----BEGIN CERTIFICATE-----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\nw/0zk6GmYnCOIvTm6hhBcNM/\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..d081d3b05 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..d081d3b05 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..e81dac82b --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfZ28tYmluYXJ5LWxpbnV4LWFtZDY0LXYxNC4yIiwiZGlnZXN0Ijp7InNoYTI1NiI6IjEwMzY1MmE1MDhhMDIzNjY2YzMxNWMxMmQxN2U5MWM3OWQxMTdkYTliMDgzMmNjZDFlYmJjZmFhNTliY2UwZTAifX1dLCJwcmVkaWNhdGUiOnsiYnVpbGRlciI6eyJpZCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9nb19zbHNhMy55bWxAcmVmcy90YWdzL3YxLjguMCJ9LCJidWlsZFR5cGUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yL2dvQHYxIiwiaW52b2NhdGlvbiI6eyJjb25maWdTb3VyY2UiOnsidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2VAcmVmcy90YWdzL3YxNC4yIiwiZGlnZXN0Ijp7InNoYTEiOiI2Y2Y2NzFmNDdmMzc1MmY5N2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyIn0sImVudHJ5UG9pbnQiOiIuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbCJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6Imlhbmxld2lzIiwiZ2l0aHViX2FjdG9yX2lkIjoiNDkyODkiLCJnaXRodWJfYmFzZV9yZWYiOiIiLCJnaXRodWJfZXZlbnRfbmFtZSI6InB1c2giLCJnaXRodWJfZXZlbnRfcGF5bG9hZCI6eyJhZnRlciI6IjZjZjY3MWY0N2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIiLCJiYXNlX3JlZiI6InJlZnMvaGVhZHMvbWFpbiIsImJlZm9yZSI6IjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjb21taXRzIjpbXSwiY29tcGFyZSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tcGFyZS92MTQuMiIsImNyZWF0ZWQiOnRydWUsImRlbGV0ZWQiOmZhbHNlLCJmb3JjZWQiOmZhbHNlLCJoZWFkX2NvbW1pdCI6eyJhdXRob3IiOnsiZW1haWwiOiJpYW5sZXdpc0Bnb29nbGUuY29tIiwibmFtZSI6IklhbiBMZXdpcyIsInVzZXJuYW1lIjoiaWFubGV3aXMifSwiY29tbWl0dGVyIjp7ImVtYWlsIjoibm9yZXBseUBnaXRodWIuY29tIiwibmFtZSI6IkdpdEh1YiIsInVzZXJuYW1lIjoid2ViLWZsb3cifSwiZGlzdGluY3QiOnRydWUsImlkIjoiNmNmNjcxZjQ3ZjM3NTJmOTdiOWY1YmZmNTExZTM3YjkzOGZlMTBkMiIsIm1lc3NhZ2UiOiJVcGRhdGUgdmVyaWZpZXItZTJlLmFsbC53b3JrZmxvd19kaXNwYXRjaC5tYWluLmFsbC5zbHNhMy55bWxcblxuU2lnbmVkLW9mZi1ieTogSWFuIExld2lzIFx1MDAzY2lhbmxld2lzQGdvb2dsZS5jb21cdTAwM2UiLCJ0aW1lc3RhbXAiOiIyMDIzLTA4LTA0VDE0OjI2OjA4KzA5OjAwIiwidHJlZV9pZCI6IjgyMDJhOWE3MDc1MTdhMmVlM2UyNWVjMzRiZGMzOGM4NmEzZWRkYjYiLCJ1cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1pdC82Y2Y2NzFmNDdmMzc1MmY5N2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyIn0sIm9yZ2FuaXphdGlvbiI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzgwNDMxMTg3P3Y9NCIsImRlc2NyaXB0aW9uIjoiU3VwcGx5LWNoYWluIExldmVscyBmb3IgU29mdHdhcmUgQXJ0aWZhY3RzIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9ldmVudHMiLCJob29rc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvaG9va3MiLCJpZCI6ODA0MzExODcsImlzc3Vlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvaXNzdWVzIiwibG9naW4iOiJzbHNhLWZyYW1ld29yayIsIm1lbWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL21lbWJlcnN7L21lbWJlcn0iLCJub2RlX2lkIjoiTURFeU9rOXlaMkZ1YVhwaGRHbHZiamd3TkRNeE1UZzMiLCJwdWJsaWNfbWVtYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvcHVibGljX21lbWJlcnN7L21lbWJlcn0iLCJyZXBvc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvcmVwb3MiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsifSwicHVzaGVyIjp7ImVtYWlsIjoiaWFubGV3aXNAZ29vZ2xlLmNvbSIsIm5hbWUiOiJpYW5sZXdpcyJ9LCJyZWYiOiJyZWZzL3RhZ3MvdjE0LjIiLCJyZXBvc2l0b3J5Ijp7ImFsbG93X2ZvcmtpbmciOnRydWUsImFyY2hpdmVfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsImFyY2hpdmVkIjpmYWxzZSwiYXNzaWduZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2Fzc2lnbmVlc3svdXNlcn0iLCJibG9ic191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvYmxvYnN7L3NoYX0iLCJicmFuY2hlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9icmFuY2hlc3svYnJhbmNofSIsImNsb25lX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0IiwiY29sbGFib3JhdG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb2xsYWJvcmF0b3Jzey9jb2xsYWJvcmF0b3J9IiwiY29tbWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tbWVudHN7L251bWJlcn0iLCJjb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1pdHN7L3NoYX0iLCJjb21wYXJlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbXBhcmUve2Jhc2V9Li4ue2hlYWR9IiwiY29udGVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29udGVudHMveytwYXRofSIsImNvbnRyaWJ1dG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb250cmlidXRvcnMiLCJjcmVhdGVkX2F0IjoxNjUxMDg3ODQzLCJkZWZhdWx0X2JyYW5jaCI6Im1haW4iLCJkZXBsb3ltZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9kZXBsb3ltZW50cyIsImRlc2NyaXB0aW9uIjpudWxsLCJkaXNhYmxlZCI6ZmFsc2UsImRvd25sb2Fkc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9kb3dubG9hZHMiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZXZlbnRzIiwiZm9yayI6ZmFsc2UsImZvcmtzIjoyMCwiZm9ya3NfY291bnQiOjIwLCJmb3Jrc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9mb3JrcyIsImZ1bGxfbmFtZSI6InNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsImdpdF9jb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9jb21taXRzey9zaGF9IiwiZ2l0X3JlZnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3JlZnN7L3NoYX0iLCJnaXRfdGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvdGFnc3svc2hhfSIsImdpdF91cmwiOiJnaXQ6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJoYXNfZGlzY3Vzc2lvbnMiOmZhbHNlLCJoYXNfZG93bmxvYWRzIjp0cnVlLCJoYXNfaXNzdWVzIjp0cnVlLCJoYXNfcGFnZXMiOmZhbHNlLCJoYXNfcHJvamVjdHMiOnRydWUsImhhc193aWtpIjp0cnVlLCJob21lcGFnZSI6bnVsbCwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaG9va3MiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJpZCI6NDg2MzI1ODA5LCJpc190ZW1wbGF0ZSI6ZmFsc2UsImlzc3VlX2NvbW1lbnRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaXNzdWVzL2NvbW1lbnRzey9udW1iZXJ9IiwiaXNzdWVfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlcy9ldmVudHN7L251bWJlcn0iLCJpc3N1ZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaXNzdWVzey9udW1iZXJ9Iiwia2V5c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9rZXlzey9rZXlfaWR9IiwibGFiZWxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2xhYmVsc3svbmFtZX0iLCJsYW5ndWFnZSI6IlR5cGVTY3JpcHQiLCJsYW5ndWFnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbGFuZ3VhZ2VzIiwibGljZW5zZSI6eyJrZXkiOiJhcGFjaGUtMi4wIiwibmFtZSI6IkFwYWNoZSBMaWNlbnNlIDIuMCIsIm5vZGVfaWQiOiJNRGM2VEdsalpXNXpaVEk9Iiwic3BkeF9pZCI6IkFwYWNoZS0yLjAiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL2xpY2Vuc2VzL2FwYWNoZS0yLjAifSwibWFzdGVyX2JyYW5jaCI6Im1haW4iLCJtZXJnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbWVyZ2VzIiwibWlsZXN0b25lc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9taWxlc3RvbmVzey9udW1iZXJ9IiwibWlycm9yX3VybCI6bnVsbCwibmFtZSI6ImV4YW1wbGUtcGFja2FnZSIsIm5vZGVfaWQiOiJSX2tnRE9IUHktTVEiLCJub3RpZmljYXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL25vdGlmaWNhdGlvbnN7P3NpbmNlLGFsbCxwYXJ0aWNpcGF0aW5nfSIsIm9wZW5faXNzdWVzIjo0MSwib3Blbl9pc3N1ZXNfY291bnQiOjQxLCJvcmdhbml6YXRpb24iOiJzbHNhLWZyYW1ld29yayIsIm93bmVyIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvODA0MzExODc/dj00IiwiZW1haWwiOm51bGwsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrIiwiaWQiOjgwNDMxMTg3LCJsb2dpbiI6InNsc2EtZnJhbWV3b3JrIiwibmFtZSI6InNsc2EtZnJhbWV3b3JrIiwibm9kZV9pZCI6Ik1ERXlPazl5WjJGdWFYcGhkR2x2Ympnd05ETXhNVGczIiwib3JnYW5pemF0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL29yZ3MiLCJyZWNlaXZlZF9ldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9yZWNlaXZlZF9ldmVudHMiLCJyZXBvc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3JlcG9zIiwic2l0ZV9hZG1pbiI6ZmFsc2UsInN0YXJyZWRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9zdGFycmVkey9vd25lcn17L3JlcG99Iiwic3Vic2NyaXB0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL3Nsc2EtZnJhbWV3b3JrL3N1YnNjcmlwdGlvbnMiLCJ0eXBlIjoiT3JnYW5pemF0aW9uIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yayJ9LCJwcml2YXRlIjpmYWxzZSwicHVsbHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvcHVsbHN7L251bWJlcn0iLCJwdXNoZWRfYXQiOjE2OTExMjY4MDUsInJlbGVhc2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3JlbGVhc2Vzey9pZH0iLCJzaXplIjo2MzIzLCJzc2hfdXJsIjoiZ2l0QGdpdGh1Yi5jb206c2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsInN0YXJnYXplcnMiOjExLCJzdGFyZ2F6ZXJzX2NvdW50IjoxMSwic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdGFyZ2F6ZXJzIiwic3RhdHVzZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhdHVzZXMve3NoYX0iLCJzdWJzY3JpYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpcHRpb24iLCJzdm5fdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsInRhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RlYW1zIiwidG9waWNzIjpbXSwidHJlZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RyZWVzey9zaGF9IiwidXBkYXRlZF9hdCI6IjIwMjMtMDgtMDJUMjA6MDk6NDNaIiwidXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsInZpc2liaWxpdHkiOiJwdWJsaWMiLCJ3YXRjaGVycyI6MTEsIndhdGNoZXJzX2NvdW50IjoxMSwid2ViX2NvbW1pdF9zaWdub2ZmX3JlcXVpcmVkIjp0cnVlfSwic2VuZGVyIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvNDkyODk/dj00IiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvZXZlbnRzey9wcml2YWN5fSIsImZvbGxvd2Vyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLCJnaXN0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2dpc3Rzey9naXN0X2lkfSIsImdyYXZhdGFyX2lkIjoiIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vaWFubGV3aXMiLCJpZCI6NDkyODksImxvZ2luIjoiaWFubGV3aXMiLCJub2RlX2lkIjoiTURRNlZYTmxjalE1TWpnNSIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9zdWJzY3JpcHRpb25zIiwidHlwZSI6IlVzZXIiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzIn19LCJnaXRodWJfaGVhZF9yZWYiOiIiLCJnaXRodWJfcmVmIjoicmVmcy90YWdzL3YxNC4yIiwiZ2l0aHViX3JlZl90eXBlIjoidGFnIiwiZ2l0aHViX3JlcG9zaXRvcnlfaWQiOiI0ODYzMjU4MDkiLCJnaXRodWJfcmVwb3NpdG9yeV9vd25lciI6InNsc2EtZnJhbWV3b3JrIiwiZ2l0aHViX3JlcG9zaXRvcnlfb3duZXJfaWQiOiI4MDQzMTE4NyIsImdpdGh1Yl9ydW5fYXR0ZW1wdCI6IjEiLCJnaXRodWJfcnVuX2lkIjoiNTc1ODc3NjMwNCIsImdpdGh1Yl9ydW5fbnVtYmVyIjoiNjkiLCJnaXRodWJfc2hhMSI6IjZjZjY3MWY0N2YzNzUyZjk3YjlmNWJmZjUxMWUzN2I5MzhmZTEwZDIiLCJvcyI6InVidW50dTIyIn19LCJidWlsZENvbmZpZyI6eyJzdGVwcyI6W3sid29ya2luZ0RpciI6Ii9ob21lL3J1bm5lci93b3JrL2V4YW1wbGUtcGFja2FnZS9leGFtcGxlLXBhY2thZ2UvX19QUk9KRUNUX0NIRUNLT1VUX0RJUl9fIiwiY29tbWFuZCI6WyIvb3B0L2hvc3RlZHRvb2xjYWNoZS9nby8xLjE4LjEwL3g2NC9iaW4vZ28iLCJtb2QiLCJ2ZW5kb3IiXSwiZW52IjpudWxsfSx7IndvcmtpbmdEaXIiOiIvaG9tZS9ydW5uZXIvd29yay9leGFtcGxlLXBhY2thZ2UvZXhhbXBsZS1wYWNrYWdlL19fUFJPSkVDVF9DSEVDS09VVF9ESVJfXyIsImNvbW1hbmQiOlsiL29wdC9ob3N0ZWR0b29sY2FjaGUvZ28vMS4xOC4xMC94NjQvYmluL2dvIiwiYnVpbGQiLCItbW9kPXZlbmRvciIsIi10cmltcGF0aCIsIi10YWdzPW5ldGdvIiwiLW8iLCJnaGFfZ28tYmluYXJ5LWxpbnV4LWFtZDY0LXYxNC4yIl0sImVudiI6WyJHT09TPWxpbnV4IiwiR09BUkNIPWFtZDY0IiwiR08xMTFNT0RVTEU9b24iLCJDR09fRU5BQkxFRD0wIl19XSwidmVyc2lvbiI6MX0sIm1ldGFkYXRhIjp7ImJ1aWxkSW52b2NhdGlvbklEIjoiNTc1ODc3NjMwNC0xIiwiY29tcGxldGVuZXNzIjp7InBhcmFtZXRlcnMiOnRydWUsImVudmlyb25tZW50IjpmYWxzZSwibWF0ZXJpYWxzIjpmYWxzZX0sInJlcHJvZHVjaWJsZSI6ZmFsc2V9LCJtYXRlcmlhbHMiOlt7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlQHJlZnMvdGFncy92MTQuMiIsImRpZ2VzdCI6eyJzaGExIjoiNmNmNjcxZjQ3ZjM3NTJmOTdiOWY1YmZmNTExZTM3YjkzOGZlMTBkMiJ9fSx7InVyaSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hY3Rpb25zL3ZpcnR1YWwtZW52aXJvbm1lbnRzL3JlbGVhc2VzL3RhZy91YnVudHUyMi8yMDIzMDcyOC4zLjAifV19fQ==","signatures":[{"keyid":"","sig":"MEQCIHGqEXziAjElrJEt8se6dvz/XRKk9FRJ0Tm3/snwUnmUAiAXu0+FHkW+mmgpPyEpn2l70IyrUOn+XXhYIbaIVmllOA==","cert":"-----BEGIN CERTIFICATE-----\nMIIHhTCCBwqgAwIBAgIUYEbN7R+TPrurKt2v0kYIl7nL0YwwCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjMwODA0MDUyOTE0WhcNMjMwODA0MDUzOTE0WjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAEnB/aGbYBYOEGZ+iULAK5ZGOMIiHyWg3qseXJ\nrQnk1/9a41buCqxWRD5gQ6eMxDho+9VaH9XDfoxlASX9CSNP+KOCBikwggYlMA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUMt/0\nD1W4E+PauDIwsn9w/kDEPiswHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8wfQYDVR0RAQH/BHMwcYZvaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3\nb3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8uZ2l0aHViL3dvcmtmbG93cy9idWls\nZGVyX2dvX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuOC4wMDkGCisGAQQBg78wAQEE\nK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20wEgYK\nKwYBBAGDvzABAgQEcHVzaDA2BgorBgEEAYO/MAEDBCg2Y2Y2NzFmNDdmMzc1MmY5\nN2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyMFUGCisGAQQBg78wAQQERy5naXRodWIv\nd29ya2Zsb3dzL3ZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFp\nbi5hbGwuc2xzYTMueW1sMCwGCisGAQQBg78wAQUEHnNsc2EtZnJhbWV3b3JrL2V4\nYW1wbGUtcGFja2FnZTAdBgorBgEEAYO/MAEGBA9yZWZzL3RhZ3MvdjE0LjIwOwYK\nKwYBBAGDvzABCAQtDCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNv\nbnRlbnQuY29tMH8GCisGAQQBg78wAQkEcQxvaHR0cHM6Ly9naXRodWIuY29tL3Ns\nc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8uZ2l0aHViL3dvcmtm\nbG93cy9idWlsZGVyX2dvX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuOC4wMDgGCisG\nAQQBg78wAQoEKgwoY2RlYjNhOTE2NjEwYmMwMGFmNWRlZTgzZDFhY2RkM2M3MDc5\nOTIzYTAdBgorBgEEAYO/MAELBA8MDWdpdGh1Yi1ob3N0ZWQwQQYKKwYBBAGDvzAB\nDAQzDDFodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1w\nYWNrYWdlMDgGCisGAQQBg78wAQ0EKgwoNmNmNjcxZjQ3ZjM3NTJmOTdiOWY1YmZm\nNTExZTM3YjkzOGZlMTBkMjAfBgorBgEEAYO/MAEOBBEMD3JlZnMvdGFncy92MTQu\nMjAZBgorBgEEAYO/MAEPBAsMCTQ4NjMyNTgwOTAxBgorBgEEAYO/MAEQBCMMIWh0\ndHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yazAYBgorBgEEAYO/MAERBAoM\nCDgwNDMxMTg3MIGbBgorBgEEAYO/MAESBIGMDIGJaHR0cHM6Ly9naXRodWIuY29t\nL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS8uZ2l0aHViL3dvcmtmbG93\ncy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNs\nc2EzLnltbEByZWZzL3RhZ3MvdjE0LjIwOAYKKwYBBAGDvzABEwQqDCg2Y2Y2NzFm\nNDdmMzc1MmY5N2I5ZjViZmY1MTFlMzdiOTM4ZmUxMGQyMBQGCisGAQQBg78wARQE\nBgwEcHVzaDBkBgorBgEEAYO/MAEVBFYMVGh0dHBzOi8vZ2l0aHViLmNvbS9zbHNh\nLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYWN0aW9ucy9ydW5zLzU3NTg3NzYz\nMDQvYXR0ZW1wdHMvMTAWBgorBgEEAYO/MAEWBAgMBnB1YmxpYzCBigYKKwYBBAHW\neQIEAgR8BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAAB\nib8FetUAAAQDAEcwRQIhAJYEjKW4NdO7veBvWNs1MyY35WaWMQm67H6WLSmDW4Uq\nAiB0V8PKGLZmu2UHT7ZTiTl933DuWWtZ/B/tHjPePa/jODAKBggqhkjOPQQDAwNp\nADBmAjEA9MINOeBCs+CAIs/3NoYM242nJFdgPACBpfYPF8zbxxnk+9gY+mCLoJgI\nA5YsWToaAjEA1DPuwWAappCWlXzn5//oXUilfO8VekVPyiF7p/864Fx1WuUFP+W6\nkUEI2rZt4sUY\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..1d09df4ff --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIGdPhzL8A10+dfIAenqBHnatWTOS4CD8WGMS83TSwdamAiA+oyNhNYDTlH3l8U0VEiaZXLSQa85a5rJaW7LKsb4DXQ==","cert":"-----BEGIN CERTIFICATE-----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\nR9IK4w==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..d081d3b05 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..d486f1ba4 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.8.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQD+FvKlvDmpUKD2lEAomZle193yAnn0oIX+7aES3wr0mQIgV2Plbmj0Aqrakx3tsgGBDm+SbMQT6fLREL6vUKVjass=","cert":"-----BEGIN CERTIFICATE-----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\nsw4FfTUfSQWEunXaNBD+b/4ZXbtkolQGFWRiPs/jd4hIQw==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..99cd0da36 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl new file mode 100644 index 000000000..c682850a2 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCsmrmCMQQntQcKUZ3kGcL6GE8Sjb1WoaCpQHbsfzbRcQIgQKi4G1O56/ypvO+umESDCxW7T+TjyP7nc85YWJD7oWY=","cert":"-----BEGIN CERTIFICATE-----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\nkPbixYqSt55d92ILFUWL+oYB\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..99cd0da36 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..99cd0da36 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.2.intoto.jsonl new file mode 100644 index 000000000..c30f88c22 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.2.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfZ28tYmluYXJ5LWxpbnV4LWFtZDY0LXYxNC4yIiwiZGlnZXN0Ijp7InNoYTI1NiI6ImM3M2RkNmEwNDk0NzRhNTk0ZmY5NWVmMDVlODdkNzNkNTQyNTQwNTFjNGI4Mzc3OWE5ODI4MjMyNGZmZGQ3MjYifX1dLCJwcmVkaWNhdGUiOnsiYnVpbGRlciI6eyJpZCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9nb19zbHNhMy55bWxAcmVmcy90YWdzL3YxLjkuMCJ9LCJidWlsZFR5cGUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yL2dvQHYxIiwiaW52b2NhdGlvbiI6eyJjb25maWdTb3VyY2UiOnsidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2VAcmVmcy90YWdzL3YxNC4yIiwiZGlnZXN0Ijp7InNoYTEiOiIyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIn0sImVudHJ5UG9pbnQiOiIuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbCJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6Imlhbmxld2lzIiwiZ2l0aHViX2FjdG9yX2lkIjoiNDkyODkiLCJnaXRodWJfYmFzZV9yZWYiOiIiLCJnaXRodWJfZXZlbnRfbmFtZSI6InB1c2giLCJnaXRodWJfZXZlbnRfcGF5bG9hZCI6eyJhZnRlciI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMiLCJiYXNlX3JlZiI6InJlZnMvaGVhZHMvbWFpbiIsImJlZm9yZSI6IjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjb21taXRzIjpbXSwiY29tcGFyZSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tcGFyZS92MTQuMiIsImNyZWF0ZWQiOnRydWUsImRlbGV0ZWQiOmZhbHNlLCJmb3JjZWQiOmZhbHNlLCJoZWFkX2NvbW1pdCI6eyJhdXRob3IiOnsiZW1haWwiOiI2NDUwNTA5OStsYXVyZW50c2ltb25AdXNlcnMubm9yZXBseS5naXRodWIuY29tIiwibmFtZSI6ImxhdXJlbnRzaW1vbiIsInVzZXJuYW1lIjoibGF1cmVudHNpbW9uIn0sImNvbW1pdHRlciI6eyJlbWFpbCI6Im5vcmVwbHlAZ2l0aHViLmNvbSIsIm5hbWUiOiJHaXRIdWIiLCJ1c2VybmFtZSI6IndlYi1mbG93In0sImRpc3RpbmN0Ijp0cnVlLCJpZCI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMiLCJtZXNzYWdlIjoiVXBkYXRlIHZlcmlmaWVyLWUyZS5hbGwud29ya2Zsb3dfZGlzcGF0Y2gubWFpbi5hbGwuc2xzYTMueW1sXG5cblNpZ25lZC1vZmYtYnk6IGxhdXJlbnRzaW1vbiBcdTAwM2M2NDUwNTA5OStsYXVyZW50c2ltb25AdXNlcnMubm9yZXBseS5naXRodWIuY29tXHUwMDNlIiwidGltZXN0YW1wIjoiMjAyMy0wOC0yMlQyMjoxMjowMC0wNzowMCIsInRyZWVfaWQiOiJkYjgyNWJjZjQzYmZkYTAwYjM4Zjc1YWY3MjRkODZiZTEyZWU0MDk5IiwidXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXQvMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMyJ9LCJvcmdhbml6YXRpb24iOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS84MDQzMTE4Nz92PTQiLCJkZXNjcmlwdGlvbiI6IlN1cHBseS1jaGFpbiBMZXZlbHMgZm9yIFNvZnR3YXJlIEFydGlmYWN0cyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvZXZlbnRzIiwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2hvb2tzIiwiaWQiOjgwNDMxMTg3LCJpc3N1ZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2lzc3VlcyIsImxvZ2luIjoic2xzYS1mcmFtZXdvcmsiLCJtZW1iZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9tZW1iZXJzey9tZW1iZXJ9Iiwibm9kZV9pZCI6Ik1ERXlPazl5WjJGdWFYcGhkR2x2Ympnd05ETXhNVGczIiwicHVibGljX21lbWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3B1YmxpY19tZW1iZXJzey9tZW1iZXJ9IiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL3JlcG9zIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrIn0sInB1c2hlciI6eyJlbWFpbCI6Imlhbmxld2lzQGdvb2dsZS5jb20iLCJuYW1lIjoiaWFubGV3aXMifSwicmVmIjoicmVmcy90YWdzL3YxNC4yIiwicmVwb3NpdG9yeSI6eyJhbGxvd19mb3JraW5nIjp0cnVlLCJhcmNoaXZlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3thcmNoaXZlX2Zvcm1hdH17L3JlZn0iLCJhcmNoaXZlZCI6ZmFsc2UsImFzc2lnbmVlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hc3NpZ25lZXN7L3VzZXJ9IiwiYmxvYnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L2Jsb2Jzey9zaGF9IiwiYnJhbmNoZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvYnJhbmNoZXN7L2JyYW5jaH0iLCJjbG9uZV91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlLmdpdCIsImNvbGxhYm9yYXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29sbGFib3JhdG9yc3svY29sbGFib3JhdG9yfSIsImNvbW1lbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1lbnRzey9udW1iZXJ9IiwiY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21taXRzey9zaGF9IiwiY29tcGFyZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb21wYXJlL3tiYXNlfS4uLntoZWFkfSIsImNvbnRlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbnRlbnRzL3srcGF0aH0iLCJjb250cmlidXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29udHJpYnV0b3JzIiwiY3JlYXRlZF9hdCI6MTY1MTA4Nzg0MywiZGVmYXVsdF9icmFuY2giOiJtYWluIiwiZGVwbG95bWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZGVwbG95bWVudHMiLCJkZXNjcmlwdGlvbiI6bnVsbCwiZGlzYWJsZWQiOmZhbHNlLCJkb3dubG9hZHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZG93bmxvYWRzIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2V2ZW50cyIsImZvcmsiOmZhbHNlLCJmb3JrcyI6MjAsImZvcmtzX2NvdW50IjoyMCwiZm9ya3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZm9ya3MiLCJmdWxsX25hbWUiOiJzbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJnaXRfY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvY29tbWl0c3svc2hhfSIsImdpdF9yZWZzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9yZWZzey9zaGF9IiwiZ2l0X3RhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RhZ3N7L3NoYX0iLCJnaXRfdXJsIjoiZ2l0Oi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0IiwiaGFzX2Rpc2N1c3Npb25zIjpmYWxzZSwiaGFzX2Rvd25sb2FkcyI6dHJ1ZSwiaGFzX2lzc3VlcyI6dHJ1ZSwiaGFzX3BhZ2VzIjpmYWxzZSwiaGFzX3Byb2plY3RzIjp0cnVlLCJoYXNfd2lraSI6dHJ1ZSwiaG9tZXBhZ2UiOm51bGwsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2hvb2tzIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlIiwiaWQiOjQ4NjMyNTgwOSwiaXNfdGVtcGxhdGUiOmZhbHNlLCJpc3N1ZV9jb21tZW50X3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsImlzc3VlX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9pc3N1ZXMvZXZlbnRzey9udW1iZXJ9IiwiaXNzdWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlc3svbnVtYmVyfSIsImtleXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uva2V5c3sva2V5X2lkfSIsImxhYmVsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9sYWJlbHN7L25hbWV9IiwibGFuZ3VhZ2UiOiJUeXBlU2NyaXB0IiwibGFuZ3VhZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2xhbmd1YWdlcyIsImxpY2Vuc2UiOnsia2V5IjoiYXBhY2hlLTIuMCIsIm5hbWUiOiJBcGFjaGUgTGljZW5zZSAyLjAiLCJub2RlX2lkIjoiTURjNlRHbGpaVzV6WlRJPSIsInNwZHhfaWQiOiJBcGFjaGUtMi4wIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIn0sIm1hc3Rlcl9icmFuY2giOiJtYWluIiwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL21lcmdlcyIsIm1pbGVzdG9uZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbWlsZXN0b25lc3svbnVtYmVyfSIsIm1pcnJvcl91cmwiOm51bGwsIm5hbWUiOiJleGFtcGxlLXBhY2thZ2UiLCJub2RlX2lkIjoiUl9rZ0RPSFB5LU1RIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9ub3RpZmljYXRpb25zez9zaW5jZSxhbGwscGFydGljaXBhdGluZ30iLCJvcGVuX2lzc3VlcyI6NDcsIm9wZW5faXNzdWVzX2NvdW50Ijo0Nywib3JnYW5pemF0aW9uIjoic2xzYS1mcmFtZXdvcmsiLCJvd25lciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzgwNDMxMTg3P3Y9NCIsImVtYWlsIjpudWxsLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9ldmVudHN7L3ByaXZhY3l9IiwiZm9sbG93ZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93ZXJzIiwiZm9sbG93aW5nX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsImdpc3RzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZ2lzdHN7L2dpc3RfaWR9IiwiZ3JhdmF0YXJfaWQiOiIiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yayIsImlkIjo4MDQzMTE4NywibG9naW4iOiJzbHNhLWZyYW1ld29yayIsIm5hbWUiOiJzbHNhLWZyYW1ld29yayIsIm5vZGVfaWQiOiJNREV5T2s5eVoyRnVhWHBoZEdsdmJqZ3dORE14TVRnMyIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9zdWJzY3JpcHRpb25zIiwidHlwZSI6Ik9yZ2FuaXphdGlvbiIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsifSwicHJpdmF0ZSI6ZmFsc2UsInB1bGxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3B1bGxzey9udW1iZXJ9IiwicHVzaGVkX2F0IjoxNjkyNzY3OTgyLCJyZWxlYXNlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6NjgyOSwic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOnNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJzdGFyZ2F6ZXJzIjoxMiwic3RhcmdhemVyc19jb3VudCI6MTIsInN0YXJnYXplcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3N0YXR1c2VzL3tzaGF9Iiwic3Vic2NyaWJlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaWJlcnMiLCJzdWJzY3JpcHRpb25fdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ0YWdzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RhZ3MiLCJ0ZWFtc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC90cmVlc3svc2hhfSIsInVwZGF0ZWRfYXQiOiIyMDIzLTA4LTE0VDA4OjMwOjEzWiIsInVybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ2aXNpYmlsaXR5IjoicHVibGljIiwid2F0Y2hlcnMiOjEyLCJ3YXRjaGVyc19jb3VudCI6MTIsIndlYl9jb21taXRfc2lnbm9mZl9yZXF1aXJlZCI6dHJ1ZX0sInNlbmRlciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzQ5Mjg5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcy9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2lhbmxld2lzIiwiaWQiOjQ5Mjg5LCJsb2dpbiI6Imlhbmxld2lzIiwibm9kZV9pZCI6Ik1EUTZWWE5sY2pRNU1qZzUiLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2lhbmxld2lzL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvaWFubGV3aXMvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9pYW5sZXdpcyJ9fSwiZ2l0aHViX2hlYWRfcmVmIjoiIiwiZ2l0aHViX3JlZiI6InJlZnMvdGFncy92MTQuMiIsImdpdGh1Yl9yZWZfdHlwZSI6InRhZyIsImdpdGh1Yl9yZXBvc2l0b3J5X2lkIjoiNDg2MzI1ODA5IiwiZ2l0aHViX3JlcG9zaXRvcnlfb3duZXIiOiJzbHNhLWZyYW1ld29yayIsImdpdGh1Yl9yZXBvc2l0b3J5X293bmVyX2lkIjoiODA0MzExODciLCJnaXRodWJfcnVuX2F0dGVtcHQiOiIxIiwiZ2l0aHViX3J1bl9pZCI6IjU5NDczNDU1ODMiLCJnaXRodWJfcnVuX251bWJlciI6Ijg2IiwiZ2l0aHViX3NoYTEiOiIyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIiwib3MiOiJ1YnVudHUyMiJ9fSwiYnVpbGRDb25maWciOnsic3RlcHMiOlt7IndvcmtpbmdEaXIiOiIvaG9tZS9ydW5uZXIvd29yay9leGFtcGxlLXBhY2thZ2UvZXhhbXBsZS1wYWNrYWdlL19fUFJPSkVDVF9DSEVDS09VVF9ESVJfXyIsImNvbW1hbmQiOlsiL29wdC9ob3N0ZWR0b29sY2FjaGUvZ28vMS4xOC4xMC94NjQvYmluL2dvIiwibW9kIiwidmVuZG9yIl0sImVudiI6bnVsbH0seyJ3b3JraW5nRGlyIjoiL2hvbWUvcnVubmVyL3dvcmsvZXhhbXBsZS1wYWNrYWdlL2V4YW1wbGUtcGFja2FnZS9fX1BST0pFQ1RfQ0hFQ0tPVVRfRElSX18iLCJjb21tYW5kIjpbIi9vcHQvaG9zdGVkdG9vbGNhY2hlL2dvLzEuMTguMTAveDY0L2Jpbi9nbyIsImJ1aWxkIiwiLW1vZD12ZW5kb3IiLCItdHJpbXBhdGgiLCItdGFncz1uZXRnbyIsIi1vIiwiZ2hhX2dvLWJpbmFyeS1saW51eC1hbWQ2NC12MTQuMiJdLCJlbnYiOlsiR09PUz1saW51eCIsIkdPQVJDSD1hbWQ2NCIsIkdPMTExTU9EVUxFPW9uIiwiQ0dPX0VOQUJMRUQ9MCJdfV0sInZlcnNpb24iOjF9LCJtZXRhZGF0YSI6eyJidWlsZEludm9jYXRpb25JRCI6IjU5NDczNDU1ODMtMSIsImNvbXBsZXRlbmVzcyI6eyJwYXJhbWV0ZXJzIjp0cnVlLCJlbnZpcm9ubWVudCI6ZmFsc2UsIm1hdGVyaWFscyI6ZmFsc2V9LCJyZXByb2R1Y2libGUiOmZhbHNlfSwibWF0ZXJpYWxzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZUByZWZzL3RhZ3MvdjE0LjIiLCJkaWdlc3QiOnsic2hhMSI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMifX0seyJ1cmkiOiJodHRwczovL2dpdGh1Yi5jb20vYWN0aW9ucy92aXJ0dWFsLWVudmlyb25tZW50cy9yZWxlYXNlcy90YWcvdWJ1bnR1MjIvMjAyMzA4MTQuMS4wIn1dfX0=","signatures":[{"keyid":"","sig":"MEUCIGDiJfysR7+hLkBLaELG6xL12SQoQ4F3x7rBfYnpc7wxAiEAzraSgxqo3f799jrEspa+YdSOScR5lS0oBBfKDck2gbc=","cert":"-----BEGIN CERTIFICATE-----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\n0Nrx2h3fEG6T\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.intoto.jsonl new file mode 100644 index 000000000..8f0b1fc4f --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-push-v14.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCma1F3aJyOJ7d1Mq/KdXYKT5bonSwwidPAQCNEs/2s6QIgfMygXDgvUqFniIVJEJb8yo9GALylXuxODvyTzRMnRqo=","cert":"-----BEGIN CERTIFICATE-----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\nBIax\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..99cd0da36 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl new file mode 100644 index 000000000..233d6d983 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_go/v1.9.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl @@ -0,0 +1 @@ +{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJnaGFfZ28tYmluYXJ5LWxpbnV4LWFtZDY0LXdvcmtmbG93X2Rpc3BhdGNoIiwiZGlnZXN0Ijp7InNoYTI1NiI6ImM3M2RkNmEwNDk0NzRhNTk0ZmY5NWVmMDVlODdkNzNkNTQyNTQwNTFjNGI4Mzc3OWE5ODI4MjMyNGZmZGQ3MjYifX1dLCJwcmVkaWNhdGUiOnsiYnVpbGRlciI6eyJpZCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvYnVpbGRlcl9nb19zbHNhMy55bWxAcmVmcy90YWdzL3YxLjkuMCJ9LCJidWlsZFR5cGUiOiJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yL2dvQHYxIiwiaW52b2NhdGlvbiI6eyJjb25maWdTb3VyY2UiOnsidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2VAcmVmcy9oZWFkcy9tYWluIiwiZGlnZXN0Ijp7InNoYTEiOiIyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzIn0sImVudHJ5UG9pbnQiOiIuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbCJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6ImxhdXJlbnRzaW1vbiIsImdpdGh1Yl9hY3Rvcl9pZCI6IjY0NTA1MDk5IiwiZ2l0aHViX2Jhc2VfcmVmIjoiIiwiZ2l0aHViX2V2ZW50X25hbWUiOiJ3b3JrZmxvd19kaXNwYXRjaCIsImdpdGh1Yl9ldmVudF9wYXlsb2FkIjp7ImlucHV0cyI6bnVsbCwib3JnYW5pemF0aW9uIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvODA0MzExODc/dj00IiwiZGVzY3JpcHRpb24iOiJTdXBwbHktY2hhaW4gTGV2ZWxzIGZvciBTb2Z0d2FyZSBBcnRpZmFjdHMiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9vcmdzL3Nsc2EtZnJhbWV3b3JrL2V2ZW50cyIsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9ob29rcyIsImlkIjo4MDQzMTE4NywiaXNzdWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9pc3N1ZXMiLCJsb2dpbiI6InNsc2EtZnJhbWV3b3JrIiwibWVtYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL29yZ3Mvc2xzYS1mcmFtZXdvcmsvbWVtYmVyc3svbWVtYmVyfSIsIm5vZGVfaWQiOiJNREV5T2s5eVoyRnVhWHBoZEdsdmJqZ3dORE14TVRnMyIsInB1YmxpY19tZW1iZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9wdWJsaWNfbWVtYmVyc3svbWVtYmVyfSIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yay9yZXBvcyIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vb3Jncy9zbHNhLWZyYW1ld29yayJ9LCJyZWYiOiJyZWZzL2hlYWRzL21haW4iLCJyZXBvc2l0b3J5Ijp7ImFsbG93X2ZvcmtpbmciOnRydWUsImFyY2hpdmVfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsImFyY2hpdmVkIjpmYWxzZSwiYXNzaWduZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2Fzc2lnbmVlc3svdXNlcn0iLCJibG9ic191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvYmxvYnN7L3NoYX0iLCJicmFuY2hlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9icmFuY2hlc3svYnJhbmNofSIsImNsb25lX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UuZ2l0IiwiY29sbGFib3JhdG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb2xsYWJvcmF0b3Jzey9jb2xsYWJvcmF0b3J9IiwiY29tbWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29tbWVudHN7L251bWJlcn0iLCJjb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbW1pdHN7L3NoYX0iLCJjb21wYXJlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2NvbXBhcmUve2Jhc2V9Li4ue2hlYWR9IiwiY29udGVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvY29udGVudHMveytwYXRofSIsImNvbnRyaWJ1dG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9jb250cmlidXRvcnMiLCJjcmVhdGVkX2F0IjoiMjAyMi0wNC0yN1QxOTozMDo0M1oiLCJkZWZhdWx0X2JyYW5jaCI6Im1haW4iLCJkZXBsb3ltZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9kZXBsb3ltZW50cyIsImRlc2NyaXB0aW9uIjpudWxsLCJkaXNhYmxlZCI6ZmFsc2UsImRvd25sb2Fkc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9kb3dubG9hZHMiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZXZlbnRzIiwiZm9yayI6ZmFsc2UsImZvcmtzIjoyMCwiZm9ya3NfY291bnQiOjIwLCJmb3Jrc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9mb3JrcyIsImZ1bGxfbmFtZSI6InNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsImdpdF9jb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2dpdC9jb21taXRzey9zaGF9IiwiZ2l0X3JlZnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3JlZnN7L3NoYX0iLCJnaXRfdGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9naXQvdGFnc3svc2hhfSIsImdpdF91cmwiOiJnaXQ6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJoYXNfZGlzY3Vzc2lvbnMiOmZhbHNlLCJoYXNfZG93bmxvYWRzIjp0cnVlLCJoYXNfaXNzdWVzIjp0cnVlLCJoYXNfcGFnZXMiOmZhbHNlLCJoYXNfcHJvamVjdHMiOnRydWUsImhhc193aWtpIjp0cnVlLCJob21lcGFnZSI6bnVsbCwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaG9va3MiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJpZCI6NDg2MzI1ODA5LCJpc190ZW1wbGF0ZSI6ZmFsc2UsImlzc3VlX2NvbW1lbnRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaXNzdWVzL2NvbW1lbnRzey9udW1iZXJ9IiwiaXNzdWVfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2lzc3Vlcy9ldmVudHN7L251bWJlcn0iLCJpc3N1ZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvaXNzdWVzey9udW1iZXJ9Iiwia2V5c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9rZXlzey9rZXlfaWR9IiwibGFiZWxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2xhYmVsc3svbmFtZX0iLCJsYW5ndWFnZSI6IlR5cGVTY3JpcHQiLCJsYW5ndWFnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbGFuZ3VhZ2VzIiwibGljZW5zZSI6eyJrZXkiOiJhcGFjaGUtMi4wIiwibmFtZSI6IkFwYWNoZSBMaWNlbnNlIDIuMCIsIm5vZGVfaWQiOiJNRGM2VEdsalpXNXpaVEk9Iiwic3BkeF9pZCI6IkFwYWNoZS0yLjAiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL2xpY2Vuc2VzL2FwYWNoZS0yLjAifSwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL21lcmdlcyIsIm1pbGVzdG9uZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvbWlsZXN0b25lc3svbnVtYmVyfSIsIm1pcnJvcl91cmwiOm51bGwsIm5hbWUiOiJleGFtcGxlLXBhY2thZ2UiLCJub2RlX2lkIjoiUl9rZ0RPSFB5LU1RIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9ub3RpZmljYXRpb25zez9zaW5jZSxhbGwscGFydGljaXBhdGluZ30iLCJvcGVuX2lzc3VlcyI6NDcsIm9wZW5faXNzdWVzX2NvdW50Ijo0Nywib3duZXIiOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS84MDQzMTE4Nz92PTQiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9ldmVudHN7L3ByaXZhY3l9IiwiZm9sbG93ZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93ZXJzIiwiZm9sbG93aW5nX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsImdpc3RzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvZ2lzdHN7L2dpc3RfaWR9IiwiZ3JhdmF0YXJfaWQiOiIiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yayIsImlkIjo4MDQzMTE4NywibG9naW4iOiJzbHNhLWZyYW1ld29yayIsIm5vZGVfaWQiOiJNREV5T2s5eVoyRnVhWHBoZEdsdmJqZ3dORE14TVRnMyIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9zbHNhLWZyYW1ld29yay9zdWJzY3JpcHRpb25zIiwidHlwZSI6Ik9yZ2FuaXphdGlvbiIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvc2xzYS1mcmFtZXdvcmsifSwicHJpdmF0ZSI6ZmFsc2UsInB1bGxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3B1bGxzey9udW1iZXJ9IiwicHVzaGVkX2F0IjoiMjAyMy0wOC0yM1QwNToxMjowMFoiLCJyZWxlYXNlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6NjgyOSwic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOnNsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS5naXQiLCJzdGFyZ2F6ZXJzX2NvdW50IjoxMiwic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdGFyZ2F6ZXJzIiwic3RhdHVzZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2Uvc3RhdHVzZXMve3NoYX0iLCJzdWJzY3JpYmVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9zdWJzY3JpcHRpb24iLCJzdm5fdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZSIsInRhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3Mvc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL3RlYW1zIiwidG9waWNzIjpbXSwidHJlZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UvZ2l0L3RyZWVzey9zaGF9IiwidXBkYXRlZF9hdCI6IjIwMjMtMDgtMTRUMDg6MzA6MTNaIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCJ2aXNpYmlsaXR5IjoicHVibGljIiwid2F0Y2hlcnMiOjEyLCJ3YXRjaGVyc19jb3VudCI6MTIsIndlYl9jb21taXRfc2lnbm9mZl9yZXF1aXJlZCI6dHJ1ZX0sInNlbmRlciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzY0NTA1MDk5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2xhdXJlbnRzaW1vbi9ldmVudHN7L3ByaXZhY3l9IiwiZm9sbG93ZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvbGF1cmVudHNpbW9uL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2xhdXJlbnRzaW1vbi9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9sYXVyZW50c2ltb24vZ2lzdHN7L2dpc3RfaWR9IiwiZ3JhdmF0YXJfaWQiOiIiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9sYXVyZW50c2ltb24iLCJpZCI6NjQ1MDUwOTksImxvZ2luIjoibGF1cmVudHNpbW9uIiwibm9kZV9pZCI6Ik1EUTZWWE5sY2pZME5UQTFNRGs1Iiwib3JnYW5pemF0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2xhdXJlbnRzaW1vbi9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvbGF1cmVudHNpbW9uL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvbGF1cmVudHNpbW9uL3JlcG9zIiwic2l0ZV9hZG1pbiI6ZmFsc2UsInN0YXJyZWRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9sYXVyZW50c2ltb24vc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9sYXVyZW50c2ltb24vc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9sYXVyZW50c2ltb24ifSwid29ya2Zsb3ciOiIuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbCJ9LCJnaXRodWJfaGVhZF9yZWYiOiIiLCJnaXRodWJfcmVmIjoicmVmcy9oZWFkcy9tYWluIiwiZ2l0aHViX3JlZl90eXBlIjoiYnJhbmNoIiwiZ2l0aHViX3JlcG9zaXRvcnlfaWQiOiI0ODYzMjU4MDkiLCJnaXRodWJfcmVwb3NpdG9yeV9vd25lciI6InNsc2EtZnJhbWV3b3JrIiwiZ2l0aHViX3JlcG9zaXRvcnlfb3duZXJfaWQiOiI4MDQzMTE4NyIsImdpdGh1Yl9ydW5fYXR0ZW1wdCI6IjEiLCJnaXRodWJfcnVuX2lkIjoiNTk0NzM0MDY3NyIsImdpdGh1Yl9ydW5fbnVtYmVyIjoiODQiLCJnaXRodWJfc2hhMSI6IjJiY2FhNzQ5NWUxY2JkMTFmYmQ0ZjU5OGQ4NTdiM2E2ZjE4ZGY5MzMiLCJvcyI6InVidW50dTIyIn19LCJidWlsZENvbmZpZyI6eyJzdGVwcyI6W3sid29ya2luZ0RpciI6Ii9ob21lL3J1bm5lci93b3JrL2V4YW1wbGUtcGFja2FnZS9leGFtcGxlLXBhY2thZ2UvX19QUk9KRUNUX0NIRUNLT1VUX0RJUl9fIiwiY29tbWFuZCI6WyIvb3B0L2hvc3RlZHRvb2xjYWNoZS9nby8xLjE4LjEwL3g2NC9iaW4vZ28iLCJtb2QiLCJ2ZW5kb3IiXSwiZW52IjpudWxsfSx7IndvcmtpbmdEaXIiOiIvaG9tZS9ydW5uZXIvd29yay9leGFtcGxlLXBhY2thZ2UvZXhhbXBsZS1wYWNrYWdlL19fUFJPSkVDVF9DSEVDS09VVF9ESVJfXyIsImNvbW1hbmQiOlsiL29wdC9ob3N0ZWR0b29sY2FjaGUvZ28vMS4xOC4xMC94NjQvYmluL2dvIiwiYnVpbGQiLCItbW9kPXZlbmRvciIsIi10cmltcGF0aCIsIi10YWdzPW5ldGdvIiwiLW8iLCJnaGFfZ28tYmluYXJ5LWxpbnV4LWFtZDY0LXdvcmtmbG93X2Rpc3BhdGNoIl0sImVudiI6WyJHT09TPWxpbnV4IiwiR09BUkNIPWFtZDY0IiwiR08xMTFNT0RVTEU9b24iLCJDR09fRU5BQkxFRD0wIl19XSwidmVyc2lvbiI6MX0sIm1ldGFkYXRhIjp7ImJ1aWxkSW52b2NhdGlvbklEIjoiNTk0NzM0MDY3Ny0xIiwiY29tcGxldGVuZXNzIjp7InBhcmFtZXRlcnMiOnRydWUsImVudmlyb25tZW50IjpmYWxzZSwibWF0ZXJpYWxzIjpmYWxzZX0sInJlcHJvZHVjaWJsZSI6ZmFsc2V9LCJtYXRlcmlhbHMiOlt7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlQHJlZnMvaGVhZHMvbWFpbiIsImRpZ2VzdCI6eyJzaGExIjoiMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMyJ9fSx7InVyaSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hY3Rpb25zL3ZpcnR1YWwtZW52aXJvbm1lbnRzL3JlbGVhc2VzL3RhZy91YnVudHUyMi8yMDIzMDgxNC4xLjAifV19fQ==","signatures":[{"keyid":"","sig":"MEQCIFHwQV5t5uH/uDiFH5Ik6YcQlnlIeKDgv/Jaep5BN2Q3AiBUqeoTV4K9EG+Wenkhi0XBh4KlpV3OCKF9Rfh8EskIAg==","cert":"-----BEGIN CERTIFICATE-----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\n5h9RlyK71sBSeiFH8jMrrsWmi3vyMDuOKj27TgCdGFe0jg==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..85d9c19e7 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa new file mode 100644 index 000000000..3da638a14 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414371","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768187","inclusionPromise":{"signedEntryTimestamp":"MEQCIGekUQV9c8uz2FmKzVXtmJnGHfVig7Hfw7NQ3yW1JsCyAiB6jjHe8qLzTrn+5T0yI62e1i/5NTd9LeHbFDUwLT2AcQ=="},"inclusionProof":{"logIndex":"28250940","rootHash":"1jZW8UzqoEwrvlCTJTunPZCtuxVpjR/zIaqaC/LhN20=","treeSize":"28250941","hashes":["MnYcLUMMYWCKr+q+R3V4Z0g8gUubXzDAd52vnocwWfU=","MJ/PmVlMB42H+tmLaU/71htWY8SmbKPu7Q1Ssh0NMj4=","OFUkEOS3Z21lEpLWUUAaTw2gMpkp3oWIf6GAv05eCms=","xuFeB25fqj+ZMcfUl8X95zTYWvFaX9TMpAduFnxYMUU=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250941\n1jZW8UzqoEwrvlCTJTunPZCtuxVpjR/zIaqaC/LhN20=\nTimestamp: 1692768187988040825\n\n— rekor.sigstore.dev wNI9ajBFAiA6QhBR92zHPsVjs0ZMDb6CkiPVQCcH2TRnVEQOMcT3fwIhAOJezDWQj61LGU052NMWysufcspbVbjHMixgOVFHFeQP\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIFieeI8C2xhZ24S622zmnUkGmoeLLjhgyPM2+53MASAMAiB7Ccogs+UQJOsinOSzDCt0p5hYL6JpS9HKq1dJf7kf9w==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..9c5210eae Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..ca978b414 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa new file mode 100644 index 000000000..b814a63f8 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414363","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768185","inclusionPromise":{"signedEntryTimestamp":"MEUCIDznBfI2Sy3TBrWMfREwcXcWek2vNsO9pzFNqTBw/ZzPAiEAwZ4+zxHIgaKBLd3NLha5paOC8ex1K4w652XJt/C3tII="},"inclusionProof":{"logIndex":"28250932","rootHash":"yfbVdes+Yvd7nUeBfhmLf0iLd8opi83ALp54XvozYdc=","treeSize":"28250933","hashes":["qEXp5C+GDrJwDv/Kz4tM8S3pzmf3zftoeZHSgipjilg=","OFUkEOS3Z21lEpLWUUAaTw2gMpkp3oWIf6GAv05eCms=","xuFeB25fqj+ZMcfUl8X95zTYWvFaX9TMpAduFnxYMUU=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250933\nyfbVdes+Yvd7nUeBfhmLf0iLd8opi83ALp54XvozYdc=\nTimestamp: 1692768185779284952\n\n— rekor.sigstore.dev wNI9ajBGAiEAvwp5LqnUek2K3sjou86BbO3G1vDD+P3la2K7Cmb/KtoCIQD41hkCc+T/+bpO0/tIkJsPJUsPypMa4kQwGnJ9wPxm7Q==\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCDGxgOpRvFm0RU3WPNyxcYPH7Ywd6f2rMNQBjb9OC6NwIgPz4mS/NYs4Exl6cSly7OskYXmOhCplTWMwuuHsgqOOs=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.build.slsa b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.build.slsa new file mode 100644 index 000000000..a4f537dc6 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-push-v14.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414349","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768183","inclusionPromise":{"signedEntryTimestamp":"MEUCIHnwpBqTMA4hxi3Hu933Y3aSReaneYkVh96U4ScJ5rT5AiEA6kMUyIHu2QaXMTxgWhhD7Q9iIVEl+BnNpKb7Dr4vGjk="},"inclusionProof":{"logIndex":"28250918","rootHash":"oluw1NC++Q2KiBkw3Ow3ghcEQzdkpk5irwfJ/K+KCu4=","treeSize":"28250920","hashes":["Vew1nMyKWHmewjvPrYwFp4J1g3XgIH//mttGkAJBldU=","zPM6SlfIqadqTCj16KDGOX8D0JPW2U1hTGoN+jkKtoo=","4YFFPTx9B+qDm7DysrRNVfdvIiu7q1WxL0Bh1Yt2iiY=","xuFeB25fqj+ZMcfUl8X95zTYWvFaX9TMpAduFnxYMUU=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250920\noluw1NC++Q2KiBkw3Ow3ghcEQzdkpk5irwfJ/K+KCu4=\nTimestamp: 1692768183682190408\n\n— rekor.sigstore.dev wNI9ajBFAiBl7SPstJ/u/8TA7x53asAZqMVCbonUcurJSAWtnJMeVQIhAIWFL3YI9fOy2r7KE8k0lPcO3Kn3YheL/BPRqCDAJKbC\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIAinCuwl42e6Tr2xDCsd5YjjQVUsnxfG016MkwYcCECoAiB1VkhMwvumon61T9arHfSzudeJYDOr+2y/GheWvOhs1A==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..d8c865bea Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa new file mode 100644 index 000000000..06944e6d7 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_gradle/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414258","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768126","inclusionPromise":{"signedEntryTimestamp":"MEYCIQC2XEGCJ+djjuolPH5BJpg80wyHH18SsuNxrdXG2Ht18AIhAJaai+bLPcxmpOwwwkh1XfWxJYAtM9qBXvA6oRHqc+xP"},"inclusionProof":{"logIndex":"28250827","rootHash":"rXzbQfVgZfOMJdCPCyxiqXEYvQSj+VZ7214KkixR1qI=","treeSize":"28250829","hashes":["g0vSQt9BZffozw+GV60uqENCTLuy3YFkjnXXkVvHHeU=","h8Y4ULDLbp8LxzrwmgsLwtf5TSLoJxUFt5gqdqDqkxQ=","N3suvTo8yDO4c+UCPmytW9X+qbJEWse/+IBAUDrL1no=","UF9jz8Hc3TvVpDMUxtf/iIRt9fNH0Eytkjr8Yh2ZkCs=","a3W+9yE4tPV4SfKu99wFs/HRY3I9UqwGIJllY0L3tYM=","wBuev4o2sG2iCwINLOR8jAFdNhK6dA8kqvxts6lcqq8=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250829\nrXzbQfVgZfOMJdCPCyxiqXEYvQSj+VZ7214KkixR1qI=\nTimestamp: 1692768126276884923\n\n— rekor.sigstore.dev wNI9ajBEAiBoTCmDzFOkiElAjTzyRYSnnu3t0w9XpWKTk3wrTQl08AIgUT2t/K328ghsoIABJPJBp6tvx+Zk12HOzxfWk/kSu9c=\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQDsbIGIvORAL8Hd5bkyMLq9DEsr18H77cLFiy+pof5QxQIgKdZOf3NccySwbjpw6qBrEu+r0aSJsAEAD3iLHCY0B9U=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v13.0.30 new file mode 100644 index 000000000..63e219bb9 Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v13.0.30 differ diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa new file mode 100644 index 000000000..8845dcd6a --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v13.0.30.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414394","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768198","inclusionPromise":{"signedEntryTimestamp":"MEUCIHVhVxGlVot6qBDjZ8mOKHD8sbtzAgGIqWAhL8hycvVrAiEAkyRyWDfjaEUiGEUB0H9e/6MUc2Y6bcRcNHsKhXmTZ/M="},"inclusionProof":{"logIndex":"28250963","rootHash":"Km41dKC1KudCdgkrPx/2DdPMkZpHrQzshqrFpKlwX7s=","treeSize":"28250964","hashes":["fUL13/4MzVTJu/QtF0CF6Cyb8vXjHetaHIw2JbScWqo=","i69qNGqm2bXEx1xlQhCMNm/us2XoDq3Bhjz7K0qWPf4=","BUWnDN/QD5bWIN7lG/Rf+DNmAf64Ashvzzz/6PbNBR4=","BS7PFC9M4md3xV8aeNtJENmZcVqcbo6+0Of8BDPR7jY=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250964\nKm41dKC1KudCdgkrPx/2DdPMkZpHrQzshqrFpKlwX7s=\nTimestamp: 1692768198568293359\n\n— rekor.sigstore.dev wNI9ajBGAiEAxD/S1+AOqIS6C5HRMcGy0yeExmbKeY/zyX0u7+2lb7QCIQC73rdMNvjkmZRvwRzwUmWXxN12karTjbSCuoYejMbCIQ==\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIEq9ZcKy7aWuKx5Jp9uN9FbL6wyt89WNQhHQg2jJRdnpAiEA+dZ2RWqwmuqLGc98vjpgfGaOsy2K0zLgr8VbVQxKtYo=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14 new file mode 100644 index 000000000..d632ba19d Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14 differ diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.2 new file mode 100644 index 000000000..686bb06db Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.2 differ diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa new file mode 100644 index 000000000..5e96dcf6f --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.2.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414428","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768211","inclusionPromise":{"signedEntryTimestamp":"MEYCIQC0dU93f6LOePqHCXQ0k0hyPgS0qYQyu+7ohVFB1r2l/AIhANeUjeicxDyNL85jY6CYt2dW4au4GAPjINvtRFl2k5eq"},"inclusionProof":{"logIndex":"28250997","rootHash":"GEgcbXDM5J3W+eLmpCWGW5nN/KRkfOQ2vRZ5NB9/tmU=","treeSize":"28250999","hashes":["Mm5gZy9T8lkidGADTgLoOmveT699pqf9ItG0+qsjqoo=","oX4fqCs5q/7b8fQ6me0cOc4Lqd07V+kCW4dna1a6his=","XvmxOnNd94dgJeAIPXriwebfADk6SITYReBIVWKEYCo=","OP0t1A4Vxuzb+YLA0adLRviPlRxx5jhtLOAPP2358ZE=","RdPDzgZZIvoiUvfD7SMM58QNvTwseToa1uT6KShU/cM=","BS7PFC9M4md3xV8aeNtJENmZcVqcbo6+0Of8BDPR7jY=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250999\nGEgcbXDM5J3W+eLmpCWGW5nN/KRkfOQ2vRZ5NB9/tmU=\nTimestamp: 1692768211745455850\n\n— rekor.sigstore.dev wNI9ajBGAiEA1Dxjtp3UiIVLb95fuAdFpyT5gnc+d9fMjLnWsu9/hlwCIQDuWijx56UbrN/PrkGbNr+etH4EHXMIvqfiNmMqK0u0kA==\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIDC/6iIRlymaCFhV+j6lc0nJI6EhdJutOgjmweDmrRdFAiAhJUohTmajpZAQ/g4BvgY7c94owWxJL8s1j5GTec4jLA==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.build.slsa b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.build.slsa new file mode 100644 index 000000000..14a61c224 --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-push-v14.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"MIIHpDCCByqgAwIBAgIUL1HtnIg6+VPK1tmi6PKH0U28PuUwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjMwODIzMDUyMzI2WhcNMjMwODIzMDUzMzI2WjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAErvrSlkybTb08Hc3beCwNH7E76bF+p5s117aYbIYgF4xc+9LCtZmuw+pbVeeauNK0oClbHfuuVtyWspxUm+fjd6OCBkkwggZFMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUCtyn6tepu7EZuGE68nIErOMkoScwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8wgY8GA1UdEQEB/wSBhDCBgYZ/aHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci8uZ2l0aHViL3dvcmtmbG93cy9kZWxlZ2F0b3JfbG93cGVybXMtZ2VuZXJpY19zbHNhMy55bWxAcmVmcy90YWdzL3YxLjkuMDA5BgorBgEEAYO/MAEBBCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMBIGCisGAQQBg78wAQIEBHB1c2gwNgYKKwYBBAGDvzABAwQoMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMzBVBgorBgEEAYO/MAEEBEcuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbDAsBgorBgEEAYO/MAEFBB5zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UwGwYKKwYBBAGDvzABBgQNcmVmcy90YWdzL3YxNDA7BgorBgEEAYO/MAEIBC0MK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20wgZAGCisGAQQBg78wAQkEgYEMf2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZGVsZWdhdG9yX2xvd3Blcm1zLWdlbmVyaWNfc2xzYTMueW1sQHJlZnMvdGFncy92MS45LjAwOAYKKwYBBAGDvzABCgQqDCgwN2U2NGI2NTNmMTBhODBiNjUxMGY0NTY4ZjY4NWY4YjdiOWVhODMwMB0GCisGAQQBg78wAQsEDwwNZ2l0aHViLWhvc3RlZDBBBgorBgEEAYO/MAEMBDMMMWh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UwOAYKKwYBBAGDvzABDQQqDCgyYmNhYTc0OTVlMWNiZDExZmJkNGY1OThkODU3YjNhNmYxOGRmOTMzMB0GCisGAQQBg78wAQ4EDwwNcmVmcy90YWdzL3YxNDAZBgorBgEEAYO/MAEPBAsMCTQ4NjMyNTgwOTAxBgorBgEEAYO/MAEQBCMMIWh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yazAYBgorBgEEAYO/MAERBAoMCDgwNDMxMTg3MIGZBgorBgEEAYO/MAESBIGKDIGHaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS8uZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxsLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbEByZWZzL3RhZ3MvdjE0MDgGCisGAQQBg78wARMEKgwoMmJjYWE3NDk1ZTFjYmQxMWZiZDRmNTk4ZDg1N2IzYTZmMThkZjkzMzAUBgorBgEEAYO/MAEUBAYMBHB1c2gwZAYKKwYBBAGDvzABFQRWDFRodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2FjdGlvbnMvcnVucy81OTQ3MzQ1NTAzL2F0dGVtcHRzLzEwFgYKKwYBBAGDvzABFgQIDAZwdWJsaWMwgYsGCisGAQQB1nkCBAIEfQR7AHkAdwDdPTBqxscRMmMZHhyZZzcCokpeuN48rf+HinKALynujgAAAYog2P/qAAAEAwBIMEYCIQDV9s50ds/75YkBuJ0/Gppk4Pj+xkGiFmdlPbJaissrAAIhAMIocB60wGNPm9VplSp1k1P7EaL2twu7yW3UYC8iO/0OMAoGCCqGSM49BAMDA2gAMGUCMCEdFP0csRkK6bTFE1vnXmKzJ5ZSMta73g56LnlGZJz1ytucUDz6kmt0sw8SzJClrgIxAMxVwlD20GasK+oxG8p98k3jh4Mz2Swb+lfCuSirH3W4kmhjMbtp1bV4r0CuGLzY4g=="}]},"tlogEntries":[{"logIndex":"32414418","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768206","inclusionPromise":{"signedEntryTimestamp":"MEUCIQCyLioORyaxjcZc3COAsqtjDTDcTh1KkoL0Uwe8i9bcLgIgIBTZBARsNQB8ZQEUMznLlazckF45OoCXtiMOeq/NTtw="},"inclusionProof":{"logIndex":"28250987","rootHash":"s5dNVzD9OZJV4umcJPtDmK2zc3an3AKz9BnE22GJNw0=","treeSize":"28250988","hashes":["VTr4y8UKEl7fEtYzl3JMWfntdKiTfJvmn2CTKE3/4ls=","Ch/x5b8cBD1aEltYJRbZJPzA5tai4Xn9U5PBfao97BQ=","T2KtA99E9dmW1rTeWFYDHVa9pVRVJ8r/2Yy5tkJRBNM=","RdPDzgZZIvoiUvfD7SMM58QNvTwseToa1uT6KShU/cM=","BS7PFC9M4md3xV8aeNtJENmZcVqcbo6+0Of8BDPR7jY=","GgTJRGfWVEEMOAAFkvCZgni2ya+ZcLLA4vUNtkrrq4Q=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250988\ns5dNVzD9OZJV4umcJPtDmK2zc3an3AKz9BnE22GJNw0=\nTimestamp: 1692768207172330215\n\n— rekor.sigstore.dev wNI9ajBFAiEAtng6yivLtt30bYaB1pB9eGnAUSkDZismFpIWMme9jFcCIAhsZySwXtOpOINTJQBf+ZAdqslJjR7kg1U3R42lTrwI\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIBnkGLJ3gOKOfaAmhSwe982T+UsflL4+nkFhJGiPcf4ZAiBbURZtqqL1zRAHW35Q89NNbfKEfWxzDG08Bpd8ou2hAg==","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-workflow_dispatch new file mode 100644 index 000000000..9c9a6df4c Binary files /dev/null and b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-workflow_dispatch differ diff --git a/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa new file mode 100644 index 000000000..a3569ab5a --- /dev/null +++ b/cli/slsa-verifier/testdata/gha_maven/v1.9.0/binary-linux-amd64-workflow_dispatch.build.slsa @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle+json;version=0.1","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"}]},"tlogEntries":[{"logIndex":"32414280","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"intoto","version":"0.0.2"},"integratedTime":"1692768143","inclusionPromise":{"signedEntryTimestamp":"MEUCIDEmDzkHpi3xiQsu8ct45iA+ha9adLDCsn7WjxCJdip9AiEAnVxxf9KYJ7irC6FMTp1mcElYnHJ3kneQRm5ZzHzwIIQ="},"inclusionProof":{"logIndex":"28250849","rootHash":"7NWivOhnTFdPsmyPy/YXBmCn5hpE8DnIMva0SHjnK0k=","treeSize":"28250852","hashes":["wgrtOC1PTu4mqZ4F/hAE0TjysR/JZfPY3niY551GIZU=","btM/gH63dwqv5BrQtGV9mssraauAFwLQipXhI6vR4lw=","GxLvxJGpPvkb7jkL9nRXBewhgvA443iuHYOiNeOXNOQ=","a3W+9yE4tPV4SfKu99wFs/HRY3I9UqwGIJllY0L3tYM=","wBuev4o2sG2iCwINLOR8jAFdNhK6dA8kqvxts6lcqq8=","uxrc2OHU7OYCcPXjQqTz8sKDQwe9RpZPtcpJ1X/U2C4=","0QhpJIJxj0mAJK/T3Ll52445HXKlMv8zGAJQIhh6JGE=","dPOlTVDFiEuyYBDT/l9yaCSNuCnhJ8SiVvyQ1qtbrvc=","bbIc3pYzFblDLVGUZ0vtuO7b1WO3yErJdHI2yzg8upQ=","a4Z4Ta9UmCDnlfydfdXvdPdDAhLLLQkm9Xsl+8TXVt4=","1HoF1RW6ESY81CiGVsWNBJKrD2tZqlHhdXtt+UZT9Zc=","uLuBRins5nkqq2rqd17R27pQTUF+xetttC6MsmlUzd0=","jRUq4D8O+FI47Wbw96s7yHCu4qzWUxpIVfxQEeprDmc=","rXEsmEJN4PEoTU8US4qVtdIsGB1MCiRlGOepoiC99kM="],"checkpoint":{"envelope":"rekor.sigstore.dev - 2605736670972794746\n28250852\n7NWivOhnTFdPsmyPy/YXBmCn5hpE8DnIMva0SHjnK0k=\nTimestamp: 1692768143926136896\n\n— rekor.sigstore.dev wNI9ajBFAiEA8iseG3Zz3LeXKldjw8/to9xXpgubO/DV9GaGq23YJBYCIC9FFvxF02OCkRK/evOVaNSBIxe3UfiGbxCn5rba7ZY6\n"}},"canonicalizedBody":"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"}]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQDyghcQvlLcJU3cSnJhpSj69gpnfnNArS9nOQsXhF0yXwIgQBzuuMNshxqE8eOChnuhaQQoSJ3Nu9iu2dIoESB+qOc=","keyid":""}]}} \ No newline at end of file diff --git a/cli/slsa-verifier/verify/options.go b/cli/slsa-verifier/verify/options.go index fe12294c7..c21e3fcc4 100644 --- a/cli/slsa-verifier/verify/options.go +++ b/cli/slsa-verifier/verify/options.go @@ -108,10 +108,10 @@ func (o *VerifyNpmOptions) AddFlags(cmd *cobra.Command) { "path to a file containing the attestations") cmd.Flags().StringVar(&o.PackageName, "package-name", "", - "[optional] the package name") + "the package name") cmd.Flags().StringVar(&o.PackageVersion, "package-version", "", - "[optional] the package version") + "the package version") cmd.Flags().BoolVar(&o.PrintProvenance, "print-provenance", false, "[optional] print the verified provenance to stdout") diff --git a/download-artifacts.sh b/download-artifacts.sh new file mode 100644 index 000000000..35dcbb6a0 --- /dev/null +++ b/download-artifacts.sh @@ -0,0 +1,184 @@ +#!/bin/bash +set -euo pipefail + +# USAGE: mkdir -p tmp/v14 tmp/v14.2 tmp/v13.0.30 tmp/dispatch +# cd in each folder, and run `bash ../../download-artifacts.sh run_id builder_tag +# example: bash ../../download-artifacts.sh 5947345583 v1.9.0 +# TODO: get the run id automatically thru GitHub APIs. + +if [ "$#" -ne 2 ]; then + echo "Usage: $0 run_id version" + exit 1 +fi + +# Verify GH_TOKEN is set. +if [[ -z "${GH_TOKEN:-}" ]]; then + echo "GH_TOKEN is unset" + exit 1 +fi + +# Set the gh CLI. +if [[ -z "${GH:-}" ]]; then + GH="gh" +fi + + +unzip_files() { + local zip_path="$1" + local output_path="$2" + + case "${zip_path}" in + + # Ignore some files. + ./slsa-builder-go-linux-amd64*) + echo "Ignoring ${zip_path}" + ;; + + # Container-based artifact and provenance. + ./build-outputs-*.zip | ./slsa-outputs-*.zip) + unzip -o "${zip_path}" -d "${output_path}" + ;; + + # See partern marching https://stackoverflow.com/questions/4554718/how-to-use-patterns-in-a-case-statement. + ./gha_*) + unzip -o "${zip_path}" -d "${output_path}" + ;; + + # Low-perm delegator artifact. + ./*-artifacts.zip) + tmp_dir=$(mktemp -d) + unzip -o "${zip_path}" -d "${tmp_dir}" + cd "${tmp_dir}" + tar xvzf folder.tgz + cd - + cp "${tmp_dir}/artifacts/"* "${output_path}" + rm -rf "${tmp_dir}" + ;; + + # delegator attestations. + ./*-slsa-attestations.zip) + tmp_dir=$(mktemp -d) + unzip -o "${zip_path}" -d "${tmp_dir}" + cd "${tmp_dir}" + tar xvzf folder.tgz + cd - + cp "${tmp_dir}/${zip_path%.*}/"* "${output_path}" + rm -rf "${tmp_dir}" + ;; + + # Maven artifacts. + ./*-target.zip) + tmp_dir=$(mktemp -d) + unzip -o "${zip_path}" -d "${tmp_dir}" + cd "${tmp_dir}" + tar xvzf folder.tgz + cd - + cp "${tmp_dir}/target/test-java-project-"*.jar "${output_path}" + rm -rf "${tmp_dir}" + ;; + + # Gradle artifacts. + ./*-build.zip) + tmp_dir=$(mktemp -d) + unzip -o "${zip_path}" -d "${tmp_dir}" + cd "${tmp_dir}" + tar xvzf folder.tgz + cd - + cp "${tmp_dir}/build/libs/workflow_dispatch-"*.jar "${output_path}" + rm -rf "${tmp_dir}" + ;; + + *) + echo "unexpected file path: ${zip_path}" + exit 1 + ;; + esac + + # Cleanup + rm *sources.jar* *javadoc.jar* folder.tgz original-test-java-project* 2>/dev/null || true + rm "${zip_path}" +} + +copy_files() { + local binary="$1" + local path="$2" + + mkdir -p "${path}" + for fn in $(ls | grep "${binary}"); do + # The prefix is what precedes "binary-linux". + # May be 'gha_container-based-', etc. + prefix=${fn%%binary-linux*} + is_dispatch=$(echo "${fn}" | grep "dispatch" || true) + if [[ "${is_dispatch}" != "" ]]; then + cp "${fn}" "${path}/${fn#"${prefix}"}" + else + f="${fn/amd64/amd64-push}" + cp "${fn}" "${path}/${f#"${prefix}"}" + fi + done; +} + +# Rename jar files and their attestations. +rename_java_files() { + local path="$1" + local name="$2" + v=$(ls | grep gha_delegator-binary-linux-amd64- | grep -v slsa | cut -d- -f5) + if [[ "${v}" == "" ]]; then + return + fi + artifact=$(ls | grep "${path}" | grep -v slsa || true) + if [[ "${artifact}" == "" ]]; then + return + fi + mv "${artifact}" "gha_${name}-binary-linux-amd64-${v}" + mv "${artifact}.build.slsa" "gha_${name}-binary-linux-amd64-${v}.build.slsa" +} + +# Script inputs +run_id="$1" +version="$2" +output_path="." +repo=slsa-framework/example-package + +artifacts=$($GH api \ + -H "Accept: application/vnd.github+json" \ + -H "X-GitHub-Api-Version: 2022-11-28" \ + "/repos/${repo}/actions/runs/${run_id}/artifacts" | + jq -r -c '.artifacts') + +arr=$(echo "$artifacts" | jq -c '.[]') + +for item in ${arr}; do + artifact_id=$(echo "${item}" | jq -r '.id') + artifact_name=$(echo "${item}" | jq -r '.name') + zip_path="${output_path}/${artifact_name}.zip" + $GH api \ + -H "Accept: application/vnd.github+json" \ + -H "X-GitHub-Api-Version: 2022-11-28" \ + "/repos/${repo}/actions/artifacts/${artifact_id}/zip" \ + >"${zip_path}" + echo "Downloaded ${zip_path}" + unzip_files "${zip_path}" "${output_path}" +done + +rename_java_files "test-java-project-" "maven" +rename_java_files "workflow_dispatch-" "gradle" + +# Files downloaded. Now copy them +repo_path="../.." + +# Go builder files. +copy_files "gha_go-binary-linux-amd64-" "${repo_path}/cli/slsa-verifier/testdata/gha_go/${version}" + +# Generic generator. +copy_files "gha_generic-binary-linux-amd64-" "${repo_path}/cli/slsa-verifier/testdata/gha_generic/${version}" +# Container based. +copy_files "gha_container-based-binary-linux-amd64-" "${repo_path}/cli/slsa-verifier/testdata/gha_container-based/${version}" +# TODO: generic container + +# Delegator +copy_files "gha_delegator-binary-linux-amd64-" "${repo_path}/cli/slsa-verifier/testdata/gha_delegator/${version}" +# Maven builder +copy_files "gha_maven-binary-linux-amd64-" "${repo_path}/cli/slsa-verifier/testdata/gha_maven/${version}" +# gradle builder +copy_files "gha_gradle-binary-linux-amd64-" "${repo_path}/cli/slsa-verifier/testdata/gha_gradle/${version}" \ No newline at end of file diff --git a/errors/errors.go b/errors/errors.go index eda57be28..8deeea0d5 100644 --- a/errors/errors.go +++ b/errors/errors.go @@ -9,6 +9,7 @@ var ( ErrorMismatchPackageName = errors.New("package name does not match provenance") ErrorMismatchBuilderID = errors.New("builderID does not match provenance") ErrorInvalidBuilderID = errors.New("builderID is invalid") + ErrorInvalidBuildType = errors.New("buildType is invalid") ErrorMismatchSource = errors.New("source used to generate the binary does not match provenance") ErrorMismatchWorkflowInputs = errors.New("workflow input does not match") ErrorMalformedURI = errors.New("URI is malformed") @@ -40,4 +41,6 @@ var ( ErrorRekorPubKey = errors.New("error retrieving Rekor public keys") ErrorInvalidPackageName = errors.New("invalid package name") ErrorInvalidSubject = errors.New("invalid subject") + ErrorInvalidHash = errors.New("invalid hash") + ErrorNotPresent = errors.New("not present") ) diff --git a/experimental/maven-plugin/README.md b/experimental/maven-plugin/README.md new file mode 100644 index 000000000..bcd7daf10 --- /dev/null +++ b/experimental/maven-plugin/README.md @@ -0,0 +1,65 @@ +# Maven verification plugin + +The Maven verification plugin can be used to verify the provenance of the dependencies of a Java project. + +It is meant to make it easy for project owners and consumers to: + +1. Check how many and which dependencies of a Maven-based project are released with provenance files. +2. Verify the provenance files of the dependencies of a given Maven-based project. + +The plugin wraps the [the slsa verifier](https://github.com/slsa-framework/slsa-verifier) and invokes it for all the dependencies in a `pom.xml`. + +## Prerequisites + +To use the plugin you must have Java and Maven installed. It has currently only been tested on Ubuntu. + +The plugin requires that the slsa-verifier is already installed on the machine. Follow [these steps to install it](https://github.com/slsa-framework/slsa-verifier#installation). + +## Development status + +The plugin is in its early stages and is not ready for production. + +Things that work well are: + +1. Resolving dependencies and checking whether they have provenance files in the remote repository. +2. Running the slsa-verifier against dependencies with provenance files. +3. Outputting the result from the slsa-verifier. + +Things that are unfinished: + +1. What to do with the results from the verifier. Currently we have not taken a stand on what the Maven verification plugin should do with the output from the slsa-verifier. This is a UX decision more than it is a technical decision. + +## Using the Maven Verification Plugin + +### Invoking it directly + +The Maven Verification Plugin can be run from the root of a given project file. A pseudo-workflow looks like this: + +1. `git clone --depth=1 https://github.com/slsa-framework/slsa-verifier` +2. `cd slsa-verifier/experimental/maven-plugin` +3. `mvn clean install` +4. `cd /tmp` +5. `git clone _your_repository_` +6. `cd _your_repository_` +7. `mvn io.github.slsa-framework.slsa-verifier:dependency-plugin:0.0.1:verify` + +The plugin will now go through all the dependencies in the `pom.xml` file and check if they have a provenance statement attached to their release. If a dependency has a SLSA provenance file, the Maven verification plugin will fetch it from the remote repository and invoke the `slsa-verifier` binary against the dependency and the provenance file. + +### Integrating it into your Maven build cycle + +The plugin can also live in your Maven build cycle. If you add it to your own `pom.xml`, the plugin will execute during the validation phase of the Maven build cycle: + +```xml + + io.github.slsa-framework.slsa-verifier + dependency-plugin + 0.0.1 + + + + verify + + + + +``` diff --git a/experimental/maven-plugin/pom.xml b/experimental/maven-plugin/pom.xml new file mode 100644 index 000000000..fbe82eff0 --- /dev/null +++ b/experimental/maven-plugin/pom.xml @@ -0,0 +1,47 @@ + + + 4.0.0 + io.github.slsa-framework + slsa-verification-plugin + maven-plugin + 0.0.1 + + Slsa Verification Mojo + http://maven.apache.org + + + 1.8 + 1.8 + + + + + org.apache.maven + maven-core + 3.2.5 + + + org.apache.maven + maven-plugin-api + 3.6.3 + + + org.apache.maven.plugin-tools + maven-plugin-annotations + 3.6.0 + provided + + + org.apache.maven + maven-project + 2.2.1 + + + org.twdata.maven + mojo-executor + 2.4.0 + + + diff --git a/experimental/maven-plugin/src/main/java/io/github/slsa-framework/SlsaVerificationMojo.java b/experimental/maven-plugin/src/main/java/io/github/slsa-framework/SlsaVerificationMojo.java new file mode 100644 index 000000000..b69c12e18 --- /dev/null +++ b/experimental/maven-plugin/src/main/java/io/github/slsa-framework/SlsaVerificationMojo.java @@ -0,0 +1,151 @@ +// Copyright 2023 SLSA Authors +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package io.github.slsaframework; + +import org.apache.maven.artifact.Artifact; +import org.apache.maven.execution.MavenSession; +import org.apache.maven.plugin.AbstractMojo; +import org.apache.maven.plugin.BuildPluginManager; +import org.apache.maven.plugin.MojoExecutionException; +import org.apache.maven.plugin.MojoFailureException; +import org.apache.maven.plugins.annotations.LifecyclePhase; +import org.apache.maven.plugins.annotations.Component; +import org.apache.maven.plugins.annotations.Mojo; +import org.apache.maven.plugins.annotations.Parameter; +import org.apache.maven.project.MavenProject; + +import static org.twdata.maven.mojoexecutor.MojoExecutor.*; + +import java.io.File; +import java.util.Set; + +/* + SlsaVerificationMojo is a Maven plugin that wraps https://github.com/slsa-framework/slsa-verifier. + At a high level, it does the following: + 1: Install the slsa-verifier. + 2: Loop through all dependencies of a pom.xml. Resolve each dependency. + 3: Check if each dependency also has a provenance file. + 4: Run the slsa-verifier for the dependency if there is a provenance file. + 5: Output the results. + + The plugin is meant to be installed and then run from the root of a given project file. + A pseudo-workflow looks like this: + 1: git clone --depth=1 https://github.com/slsa-framework/slsa-verifier + 2: cd slsa-verifier/experimental/maven-plugin + 3: mvn clean install + 4: cd /tmp + 5: git clone your repository + 6: cd into your repository + 7: mvn io.github.slsa-framework:slsa-verification-plugin:0.0.1:verify +*/ +@Mojo(name = "verify", defaultPhase = LifecyclePhase.VALIDATE) +public class SlsaVerificationMojo extends AbstractMojo { + @Parameter(defaultValue = "${project}", required = true, readonly = true) + private MavenProject project; + + /** + * Custom path of GOHOME, default value is $HOME/go + **/ + @Parameter(property = "slsa.verifier.path", required = true) + private String verifierPath; + + @Component + private MavenSession mavenSession; + + @Component + private BuildPluginManager pluginManager; + + + public void execute() throws MojoExecutionException, MojoFailureException { + // Verify the slsa of each dependency + Set dependencyArtifacts = project.getDependencyArtifacts(); + for (Artifact artifact : dependencyArtifacts ) { + // Retrieve the dependency jar and its slsa file + String artifactStr = artifact.getGroupId() + ":" + artifact.getArtifactId() + ":" + artifact.getVersion(); + try { + // Retrieve the slsa file of the artifact + executeMojo( + plugin( + // NOTE: https://mvnrepository.com/artifact/com.googlecode.maven-download-plugin. + groupId("com.googlecode.maven-download-plugin"), + artifactId("download-maven-plugin"), + version("1.7.0") + ), + goal("artifact"), + configuration( + element(name("outputDirectory"), "${project.build.directory}/slsa"), + element(name("groupId"), artifact.getGroupId()), + element(name("artifactId"), artifact.getArtifactId()), + element(name("version"), artifact.getVersion()), + element(name("type"), "build.slsa"), + element(name("classifier"), "jar") + ), + executionEnvironment( + project, + mavenSession, + pluginManager + ) + ); + + // Retrieve the dependency jar if slsa file does exists for this artifact + executeMojo( + plugin( + groupId("org.apache.maven.plugins"), + artifactId("maven-dependency-plugin"), + version("3.6.0") + ), + goal("copy"), + configuration( + element(name("outputDirectory"), "${project.build.directory}/slsa"), + element(name("artifact"), artifactStr) + ), + executionEnvironment( + project, + mavenSession, + pluginManager + ) + ); + } catch(MojoExecutionException e) { + getLog().info("Skipping SLSA verification for " + artifactStr + ": No SLSA provenance found."); + continue; + } + + // TODO(#665): Harden against script injections. + String arguments = "verify-artifact --provenance-path "; + arguments += "${project.build.directory}/slsa/" + artifact.getArtifactId() + "-" + artifact.getVersion() + "-jar.build.slsa "; + arguments += " --source-uri ./ ${project.build.directory}/slsa/" + artifact.getArtifactId() + "-" + artifact.getVersion() + ".jar"; + // NOTE: This command may throw an exception, indicating that provenance verification failed. + executeMojo( + plugin( + groupId("org.codehaus.mojo"), + artifactId("exec-maven-plugin"), + version("3.1.0") + ), + goal("exec"), + configuration( + element(name("executable"), verifierPath), + element(name("commandlineArgs"), arguments), + element(name("useMavenLogger"), "true") + ), + executionEnvironment( + project, + mavenSession, + pluginManager + ) + ); + } + } + } +} diff --git a/go.mod b/go.mod index cb6302070..d7d11ebb8 100644 --- a/go.mod +++ b/go.mod @@ -1,16 +1,16 @@ module github.com/slsa-framework/slsa-verifier/v2 -go 1.18 +go 1.20 require ( github.com/docker/go v1.5.1-1 github.com/go-openapi/runtime v0.26.0 github.com/google/go-cmp v0.5.9 - github.com/google/trillian v1.5.1 // indirect - github.com/in-toto/in-toto-golang v0.8.0 - github.com/secure-systems-lab/go-securesystemslib v0.5.0 - github.com/sigstore/rekor v1.1.1 - github.com/sigstore/sigstore v1.6.3 + github.com/google/trillian v1.5.2 // indirect + github.com/in-toto/in-toto-golang v0.9.0 + github.com/secure-systems-lab/go-securesystemslib v0.6.0 + github.com/sigstore/rekor v1.2.0 + github.com/sigstore/sigstore v1.6.4 ) require ( @@ -22,7 +22,7 @@ require ( github.com/slsa-framework/slsa-github-generator v1.4.0 github.com/spf13/cobra v1.7.0 golang.org/x/mod v0.10.0 - sigs.k8s.io/release-utils v0.7.3 + sigs.k8s.io/release-utils v0.7.4 ) require ( @@ -32,13 +32,13 @@ require ( github.com/digitorus/pkcs7 v0.0.0-20221212123742-001c36b64ec3 // indirect github.com/digitorus/timestamp v0.0.0-20221019182153-ef3b63b79b31 // indirect github.com/emicklei/go-restful/v3 v3.8.0 // indirect + github.com/gabriel-vasile/mimetype v1.4.2 // indirect github.com/google/gnostic v0.5.7-v3refs // indirect github.com/google/go-github/v50 v50.2.0 // indirect github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect github.com/sigstore/timestamp-authority v1.0.0 // indirect - github.com/transparency-dev/merkle v0.0.1 // indirect - go.step.sm/crypto v0.29.3 // indirect - golang.org/x/tools v0.8.0 // indirect + github.com/transparency-dev/merkle v0.0.2 // indirect + go.step.sm/crypto v0.30.0 // indirect ) require ( @@ -47,8 +47,8 @@ require ( github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper v0.2.0 // indirect github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect github.com/Azure/go-autorest v14.2.0+incompatible // indirect - github.com/Azure/go-autorest/autorest v0.11.28 // indirect - github.com/Azure/go-autorest/autorest/adal v0.9.21 // indirect + github.com/Azure/go-autorest/autorest v0.11.29 // indirect + github.com/Azure/go-autorest/autorest/adal v0.9.22 // indirect github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 // indirect github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 // indirect github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect @@ -67,19 +67,19 @@ require ( github.com/alibabacloud-go/tea-xml v1.1.2 // indirect github.com/aliyun/credentials-go v1.2.3 // indirect github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect - github.com/aws/aws-sdk-go-v2 v1.17.8 // indirect - github.com/aws/aws-sdk-go-v2/config v1.18.21 // indirect - github.com/aws/aws-sdk-go-v2/credentials v1.13.20 // indirect - github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.2 // indirect - github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.32 // indirect - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.26 // indirect - github.com/aws/aws-sdk-go-v2/internal/ini v1.3.33 // indirect + github.com/aws/aws-sdk-go-v2 v1.18.0 // indirect + github.com/aws/aws-sdk-go-v2/config v1.18.23 // indirect + github.com/aws/aws-sdk-go-v2/credentials v1.13.22 // indirect + github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.3 // indirect + github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.33 // indirect + github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.27 // indirect + github.com/aws/aws-sdk-go-v2/internal/ini v1.3.34 // indirect github.com/aws/aws-sdk-go-v2/service/ecr v1.15.0 // indirect github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.12.0 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.26 // indirect - github.com/aws/aws-sdk-go-v2/service/sso v1.12.8 // indirect - github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.8 // indirect - github.com/aws/aws-sdk-go-v2/service/sts v1.18.9 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.27 // indirect + github.com/aws/aws-sdk-go-v2/service/sso v1.12.10 // indirect + github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.10 // indirect + github.com/aws/aws-sdk-go-v2/service/sts v1.18.11 // indirect github.com/aws/smithy-go v1.13.5 // indirect github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220228164355-396b2034c795 // indirect github.com/blang/semver v3.5.1+incompatible // indirect @@ -110,7 +110,7 @@ require ( github.com/go-openapi/validate v0.22.1 // indirect github.com/go-playground/locales v0.14.1 // indirect github.com/go-playground/universal-translator v0.18.1 // indirect - github.com/go-playground/validator/v10 v10.13.0 // indirect + github.com/go-playground/validator/v10 v10.14.0 // indirect github.com/gogo/protobuf v1.3.2 // indirect github.com/golang-jwt/jwt/v4 v4.5.0 // indirect github.com/golang/protobuf v1.5.3 // indirect @@ -128,7 +128,7 @@ require ( github.com/josharian/intern v1.0.0 // indirect github.com/json-iterator/go v1.1.12 // indirect github.com/klauspost/compress v1.16.0 // indirect - github.com/leodido/go-urn v1.2.3 // indirect + github.com/leodido/go-urn v1.2.4 // indirect github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf // indirect github.com/magiconair/properties v1.8.7 // indirect github.com/mailru/easyjson v0.7.7 // indirect @@ -148,7 +148,7 @@ require ( github.com/segmentio/ksuid v1.0.4 // indirect github.com/shibumi/go-pathspec v1.3.0 // indirect github.com/sigstore/fulcio v1.2.0 - github.com/sigstore/protobuf-specs v0.1.1-0.20230503063121-91485b44360d + github.com/sigstore/protobuf-specs v0.1.1-0.20230518173429-5ef54068bb53 github.com/sirupsen/logrus v1.9.0 // indirect github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect github.com/spf13/afero v1.9.3 // indirect @@ -170,18 +170,18 @@ require ( go.uber.org/atomic v1.10.0 // indirect go.uber.org/multierr v1.9.0 // indirect go.uber.org/zap v1.24.0 // indirect - golang.org/x/crypto v0.8.0 // indirect - golang.org/x/exp v0.0.0-20230124195608-d38c7dcee874 // indirect - golang.org/x/net v0.9.0 // indirect + golang.org/x/crypto v0.9.0 // indirect + golang.org/x/exp v0.0.0-20230321023759-10a507213a29 + golang.org/x/net v0.10.0 // indirect golang.org/x/oauth2 v0.7.0 // indirect - golang.org/x/sync v0.1.0 // indirect - golang.org/x/sys v0.7.0 // indirect - golang.org/x/term v0.7.0 // indirect + golang.org/x/sync v0.2.0 // indirect + golang.org/x/sys v0.8.0 // indirect + golang.org/x/term v0.8.0 // indirect golang.org/x/text v0.9.0 // indirect golang.org/x/time v0.3.0 // indirect google.golang.org/appengine v1.6.7 // indirect google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 // indirect - google.golang.org/grpc v1.54.0 // indirect + google.golang.org/grpc v1.55.0 // indirect google.golang.org/protobuf v1.30.0 gopkg.in/inf.v0 v0.9.1 // indirect gopkg.in/ini.v1 v1.67.0 // indirect @@ -191,7 +191,7 @@ require ( k8s.io/api v0.26.1 // indirect k8s.io/apimachinery v0.26.1 // indirect k8s.io/client-go v0.25.4 // indirect - k8s.io/klog/v2 v2.90.0 // indirect + k8s.io/klog/v2 v2.100.1 // indirect k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280 // indirect k8s.io/utils v0.0.0-20230115233650-391b47cb4029 // indirect sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect diff --git a/go.sum b/go.sum index 8781c56f9..46d103367 100644 --- a/go.sum +++ b/go.sum @@ -33,7 +33,7 @@ cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7 cloud.google.com/go/datastore v1.1.0/go.mod h1:umbIZjpQpHh4hmRpGhH4tLFup+FVzqBi1b3c64qFpCk= cloud.google.com/go/firestore v1.1.0/go.mod h1:ulACoGHTpvq5r8rxGJ4ddJZBZqakUQqClKRT5SZwBmk= cloud.google.com/go/iam v0.13.0 h1:+CmB+K0J/33d0zSQ9SlFWUeCCEn5XJA0ZMZ3pHE9u8k= -cloud.google.com/go/kms v1.10.1 h1:7hm1bRqGCA1GBRQUrp831TwJ9TWhP+tvLuP497CQS2g= +cloud.google.com/go/kms v1.10.2 h1:8UePKEypK3SQ6g+4mn/s/VgE5L7XOh+FwGGRUqvY3Hw= cloud.google.com/go/pubsub v1.0.1/go.mod h1:R0Gpsv3s54REJCy4fxDixWD93lHJMoZTyQ2kNxGRt3I= cloud.google.com/go/pubsub v1.1.0/go.mod h1:EwwdRX2sKPjnvnqCa270oGRyludottCI76h+R3AArQw= cloud.google.com/go/pubsub v1.2.0/go.mod h1:jhfEVHT8odbXTkndysNHCcx0awwzvfOlguIAii9o8iA= @@ -58,12 +58,12 @@ github.com/Azure/go-autorest v14.2.0+incompatible/go.mod h1:r+4oMnoxhatjLLJ6zxSW github.com/Azure/go-autorest/autorest v0.11.6/go.mod h1:V6p3pKZx1KKkJubbxnDWrzNhEIfOy/pTGasLqzHIPHs= github.com/Azure/go-autorest/autorest v0.11.8/go.mod h1:V6p3pKZx1KKkJubbxnDWrzNhEIfOy/pTGasLqzHIPHs= github.com/Azure/go-autorest/autorest v0.11.24/go.mod h1:G6kyRlFnTuSbEYkQGawPfsCswgme4iYf6rfSKUDzbCc= -github.com/Azure/go-autorest/autorest v0.11.28 h1:ndAExarwr5Y+GaHE6VCaY1kyS/HwwGGyuimVhWsHOEM= -github.com/Azure/go-autorest/autorest v0.11.28/go.mod h1:MrkzG3Y3AH668QyF9KRk5neJnGgmhQ6krbhR8Q5eMvA= +github.com/Azure/go-autorest/autorest v0.11.29 h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw= +github.com/Azure/go-autorest/autorest v0.11.29/go.mod h1:ZtEzC4Jy2JDrZLxvWs8LrBWEBycl1hbT1eknI8MtfAs= github.com/Azure/go-autorest/autorest/adal v0.9.4/go.mod h1:/3SMAM86bP6wC9Ev35peQDUeqFZBMH07vvUOmg4z/fE= github.com/Azure/go-autorest/autorest/adal v0.9.18/go.mod h1:XVVeme+LZwABT8K5Lc3hA4nAe8LDBVle26gTrguhhPQ= -github.com/Azure/go-autorest/autorest/adal v0.9.21 h1:jjQnVFXPfekaqb8vIsv2G1lxshoW+oGv4MDlhRtnYZk= -github.com/Azure/go-autorest/autorest/adal v0.9.21/go.mod h1:zua7mBUaCc5YnSLKYgGJR/w5ePdMDA6H56upLsHzA9U= +github.com/Azure/go-autorest/autorest/adal v0.9.22 h1:/GblQdIudfEM3AWWZ0mrYJQSd7JS4S/Mbzh6F0ov0Xc= +github.com/Azure/go-autorest/autorest/adal v0.9.22/go.mod h1:XuAbAEUv2Tta//+voMI038TrJBqjKam0me7qR+L8Cmk= github.com/Azure/go-autorest/autorest/azure/auth v0.5.2/go.mod h1:q98IH4qgc3eWM4/WOeR5+YPmBuy8Lq0jNRDwSM0CuFk= github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk= github.com/Azure/go-autorest/autorest/azure/auth v0.5.12/go.mod h1:84w/uV8E37feW2NCJ08uT9VBfjfUHpgLVnG2InYD6cg= @@ -139,29 +139,29 @@ github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj github.com/asaskevich/govalidator v0.0.0-20200907205600-7a23bdc65eef/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw= -github.com/aws/aws-sdk-go v1.44.248 h1:GvkxpgsxqNc03LmhXiaxKpzbyxndnex7V+OThLx4g5M= +github.com/aws/aws-sdk-go v1.44.259 h1:7yDn1dcv4DZFMKpu+2exIH5O6ipNj9qXrKfdMUaIJwY= github.com/aws/aws-sdk-go-v2 v1.7.1/go.mod h1:L5LuPC1ZgDr2xQS7AmIec/Jlc7O/Y1u2KxJyNVab250= github.com/aws/aws-sdk-go-v2 v1.14.0/go.mod h1:ZA3Y8V0LrlWj63MQAnRHgKf/5QB//LSZCPNWlWrNGLU= -github.com/aws/aws-sdk-go-v2 v1.17.8 h1:GMupCNNI7FARX27L7GjCJM8NgivWbRgpjNI/hOQjFS8= -github.com/aws/aws-sdk-go-v2 v1.17.8/go.mod h1:uzbQtefpm44goOPmdKyAlXSNcwlRgF3ePWVW6EtJvvw= +github.com/aws/aws-sdk-go-v2 v1.18.0 h1:882kkTpSFhdgYRKVZ/VCgf7sd0ru57p2JCxz4/oN5RY= +github.com/aws/aws-sdk-go-v2 v1.18.0/go.mod h1:uzbQtefpm44goOPmdKyAlXSNcwlRgF3ePWVW6EtJvvw= github.com/aws/aws-sdk-go-v2/config v1.5.0/go.mod h1:RWlPOAW3E3tbtNAqTwvSW54Of/yP3oiZXMI0xfUdjyA= -github.com/aws/aws-sdk-go-v2/config v1.18.21 h1:ENTXWKwE8b9YXgQCsruGLhvA9bhg+RqAsL9XEMEsa2c= -github.com/aws/aws-sdk-go-v2/config v1.18.21/go.mod h1:+jPQiVPz1diRnjj6VGqWcLK6EzNmQ42l7J3OqGTLsSY= +github.com/aws/aws-sdk-go-v2/config v1.18.23 h1:gc3lPsAnZpwfi2exupmgHfva0JiAY2BWDg5JWYlmA28= +github.com/aws/aws-sdk-go-v2/config v1.18.23/go.mod h1:rx0ruaQ+gk3OrLFHRRx56lA//XxP8K8uPzeNiKNuWVY= github.com/aws/aws-sdk-go-v2/credentials v1.3.1/go.mod h1:r0n73xwsIVagq8RsxmZbGSRQFj9As3je72C2WzUIToc= -github.com/aws/aws-sdk-go-v2/credentials v1.13.20 h1:oZCEFcrMppP/CNiS8myzv9JgOzq2s0d3v3MXYil/mxQ= -github.com/aws/aws-sdk-go-v2/credentials v1.13.20/go.mod h1:xtZnXErtbZ8YGXC3+8WfajpMBn5Ga/3ojZdxHq6iI8o= +github.com/aws/aws-sdk-go-v2/credentials v1.13.22 h1:Hp9rwJS4giQ48xqonRV/s7QcDf/wxF6UY7osRmBabvI= +github.com/aws/aws-sdk-go-v2/credentials v1.13.22/go.mod h1:BfNcm6A9nSd+bzejDcMJ5RE+k6WbkCwWkQil7q4heRk= github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.3.0/go.mod h1:2LAuqPx1I6jNfaGDucWfA2zqQCYCOMCDHiCOciALyNw= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.2 h1:jOzQAesnBFDmz93feqKnsTHsXrlwWORNZMFHMV+WLFU= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.2/go.mod h1:cDh1p6XkSGSwSRIArWRc6+UqAQ7x4alQ0QfpVR6f+co= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.3 h1:jJPgroehGvjrde3XufFIJUZVK5A2L9a3KwSFgKy9n8w= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.3/go.mod h1:4Q0UFP0YJf0NrsEuEYHpM9fTSEVnD16Z3uyEF7J9JGM= github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.5/go.mod h1:2hXc8ooJqF2nAznsbJQIn+7h851/bu8GVC80OVTTqf8= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.32 h1:dpbVNUjczQ8Ae3QKHbpHBpfvaVkRdesxpTOe9pTouhU= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.32/go.mod h1:RudqOgadTWdcS3t/erPQo24pcVEoYyqj/kKW5Vya21I= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.33 h1:kG5eQilShqmJbv11XL1VpyDbaEJzWxd4zRiCG30GSn4= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.33/go.mod h1:7i0PF1ME/2eUPFcjkVIwq+DOygHEoK92t5cDqNgYbIw= github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.3.0/go.mod h1:miRSv9l093jX/t/j+mBCaLqFHo9xKYzJ7DGm1BsGoJM= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.26 h1:QH2kOS3Ht7x+u0gHCh06CXL/h6G8LQJFpZfFBYBNboo= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.26/go.mod h1:vq86l7956VgFr0/FWQ2BWnK07QC3WYsepKzy33qqY5U= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.27 h1:vFQlirhuM8lLlpI7imKOMsjdQLuN9CPi+k44F/OFVsk= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.27/go.mod h1:UrHnn3QV/d0pBZ6QBAEQcqFLf8FAzLmoUfPVIueOvoM= github.com/aws/aws-sdk-go-v2/internal/ini v1.1.1/go.mod h1:Zy8smImhTdOETZqfyn01iNOe0CNggVbPjCajyaz6Gvg= -github.com/aws/aws-sdk-go-v2/internal/ini v1.3.33 h1:HbH1VjUgrCdLJ+4lnnuLI4iVNRvBbBELGaJ5f69ClA8= -github.com/aws/aws-sdk-go-v2/internal/ini v1.3.33/go.mod h1:zG2FcwjQarWaqXSCGpgcr3RSjZ6dHGguZSppUL0XR7Q= +github.com/aws/aws-sdk-go-v2/internal/ini v1.3.34 h1:gGLG7yKaXG02/jBlg210R7VgQIotiQntNhsCFejawx8= +github.com/aws/aws-sdk-go-v2/internal/ini v1.3.34/go.mod h1:Etz2dj6UHYuw+Xw830KfzCfWGMzqvUTCjUj5b76GVDc= github.com/aws/aws-sdk-go-v2/service/ecr v1.4.1/go.mod h1:FglZcyeiBqcbvyinl+n14aT/EWC7S1MIH+Gan2iizt0= github.com/aws/aws-sdk-go-v2/service/ecr v1.15.0 h1:lY2Z2sBP+zSbJ6CvvmnFgPcgknoQ0OJV88AwVetRRFk= github.com/aws/aws-sdk-go-v2/service/ecr v1.15.0/go.mod h1:4zYI85WiYDhFaU1jPFVfkD7HlBcdnITDE3QxDwy4Kus= @@ -169,17 +169,17 @@ github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.4.1/go.mod h1:eD5Eo4drVP2FLTw0 github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.12.0 h1:LsqBpyRofMG6eDs6YGud6FhdGyIyXelAasPOZ6wWLro= github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.12.0/go.mod h1:IArQ3IBR00FkuraKwudKZZU32OxJfdTdwV+W5iZh3Y4= github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.2.1/go.mod h1:zceowr5Z1Nh2WVP8bf/3ikB41IZW59E4yIYbg+pC6mw= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.26 h1:uUt4XctZLhl9wBE1L8lobU3bVN8SNUP7T+olb0bWBO4= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.26/go.mod h1:Bd4C/4PkVGubtNe5iMXu5BNnaBi/9t/UsFspPt4ram8= -github.com/aws/aws-sdk-go-v2/service/kms v1.20.11 h1:4wnkwVxvcSkdby772OPyNPzPoGBLRZ9ThV1OxGRj+o8= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.27 h1:0iKliEXAcCa2qVtRs7Ot5hItA2MsufrphbRFlz1Owxo= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.27/go.mod h1:EOwBD4J4S5qYszS5/3DpkejfuK+Z5/1uzICfPaZLtqw= +github.com/aws/aws-sdk-go-v2/service/kms v1.21.1 h1:Q03Jqh1enA8keCiGZpLetpk58Ll9iGejE5bOErxyGAU= github.com/aws/aws-sdk-go-v2/service/sso v1.3.1/go.mod h1:J3A3RGUvuCZjvSuZEcOpHDnzZP/sKbhDWV2T1EOzFIM= -github.com/aws/aws-sdk-go-v2/service/sso v1.12.8 h1:5cb3D6xb006bPTqEfCNaEA6PPEfBXxxy4NNeX/44kGk= -github.com/aws/aws-sdk-go-v2/service/sso v1.12.8/go.mod h1:GNIveDnP+aE3jujyUSH5aZ/rktsTM5EvtKnCqBZawdw= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.8 h1:NZaj0ngZMzsubWZbrEFSB4rgSQRbFq38Sd6KBxHuOIU= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.8/go.mod h1:44qFP1g7pfd+U+sQHLPalAPKnyfTZjJsYR4xIwsJy5o= +github.com/aws/aws-sdk-go-v2/service/sso v1.12.10 h1:UBQjaMTCKwyUYwiVnUt6toEJwGXsLBI6al083tpjJzY= +github.com/aws/aws-sdk-go-v2/service/sso v1.12.10/go.mod h1:ouy2P4z6sJN70fR3ka3wD3Ro3KezSxU6eKGQI2+2fjI= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.10 h1:PkHIIJs8qvq0e5QybnZoG1K/9QTrLr9OsqCIo59jOBA= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.10/go.mod h1:AFvkxc8xfBe8XA+5St5XIHHrQQtkxqrRincx4hmMHOk= github.com/aws/aws-sdk-go-v2/service/sts v1.6.0/go.mod h1:q7o0j7d7HrJk/vr9uUt3BVRASvcU7gYZB9PUgPiByXg= -github.com/aws/aws-sdk-go-v2/service/sts v1.18.9 h1:Qf1aWwnsNkyAoqDqmdM3nHwN78XQjec27LjM6b9vyfI= -github.com/aws/aws-sdk-go-v2/service/sts v1.18.9/go.mod h1:yyW88BEPXA2fGFyI2KCcZC3dNpiT0CZAHaF+i656/tQ= +github.com/aws/aws-sdk-go-v2/service/sts v1.18.11 h1:uBE+Zj478pfxV98L6SEpvxYiADNjTlMNY714PJLE7uo= +github.com/aws/aws-sdk-go-v2/service/sts v1.18.11/go.mod h1:BgQOMsg8av8jset59jelyPW7NoZcZXLVpDsXunGDrk8= github.com/aws/smithy-go v1.6.0/go.mod h1:SObp3lf9smib00L/v3U2eAKG8FyQ7iLrJnQiAmR5n+E= github.com/aws/smithy-go v1.11.0/go.mod h1:3xHYmszWVx2c0kIwQeEVf9uSm4fYZt67FBJnwub1bgM= github.com/aws/smithy-go v1.13.5 h1:hgz0X/DX0dGqTYpGALqXJoRKRj5oQ7150i5FdTePzO8= @@ -279,6 +279,8 @@ github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4 github.com/fsnotify/fsnotify v1.5.4/go.mod h1:OVB6XrOHzAwXMpEM7uPOzcehqUV2UqJxmVXmkdnm1bU= github.com/fsnotify/fsnotify v1.6.0 h1:n+5WquG0fcWoWp6xPWfHdbskMCQaFnG6PfBrh1Ky4HY= github.com/fsnotify/fsnotify v1.6.0/go.mod h1:sl3t1tCWJFWoRz9R8WJCbQihKKwmorjAbSClcnxKAGw= +github.com/gabriel-vasile/mimetype v1.4.2 h1:w5qFW6JKBz9Y393Y4q372O9A7cUSequkh1Q7OhCmWKU= +github.com/gabriel-vasile/mimetype v1.4.2/go.mod h1:zApsH/mKG4w07erKIaJPFiX0Tsq9BFQgN3qGY5GnNgA= github.com/ghodss/yaml v1.0.0 h1:wQHKEahhL6wmXdzwWG11gIVCkOv05bNOh+Rxn0yngAk= github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= github.com/go-chi/chi v4.1.2+incompatible h1:fGFk2Gmi/YKXk0OmGfBh0WgmN3XB8lVnEyNz34tQRec= @@ -337,10 +339,9 @@ github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/o github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY= github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY= github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY= -github.com/go-playground/validator/v10 v10.13.0 h1:cFRQdfaSMCOSfGCCLB20MHvuoHb/s5G8L5pu2ppK5AQ= -github.com/go-playground/validator/v10 v10.13.0/go.mod h1:dwu7+CG8/CtBiJFZDz4e+5Upb6OLw04gtBYw0mcG/z4= -github.com/go-rod/rod v0.112.8 h1:lYFnHv/lFyjW/Ye0IhyKLeHw/zfhHbSTqawoCi2z/nI= -github.com/go-sql-driver/mysql v1.7.0 h1:ueSltNNllEqE3qcWBTD0iQd3IpL/6U+mJxLkazJ7YPc= +github.com/go-playground/validator/v10 v10.14.0 h1:vgvQWe3XCz3gIeFDm/HnTIbj6UGmg/+t63MyGU2n5js= +github.com/go-playground/validator/v10 v10.14.0/go.mod h1:9iXMNT7sEkjXb0I+enO7QXmzG6QCsPWY4zveKFVRSyU= +github.com/go-rod/rod v0.112.9 h1:uA/yLbB+t0UlqJcLJtK2pZrCNPzd15dOKRUEOnmnt9k= github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY= github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0/go.mod h1:fyg7847qk6SyHyPtNmDHnmrv/HOrqktSC+C9fM+CJOE= github.com/go-test/deep v1.1.0 h1:WOcxcdHcvdgThNXjw0t76K42FXTU7HpNQWHpA2HHNlg= @@ -456,10 +457,10 @@ github.com/google/pprof v0.0.0-20201203190320-1bf35d6f28c2/go.mod h1:kpwsk12EmLe github.com/google/pprof v0.0.0-20201218002935-b9804c9f04c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI= -github.com/google/s2a-go v0.1.2 h1:WVtYAYuYxKeYajAmThMRYWP6K3wXkcqbGHeUgeubUHY= +github.com/google/s2a-go v0.1.3 h1:FAgZmpLl/SXurPEZyCMPBIiiYeTbqfjlbdnCNTAkbGE= github.com/google/tink/go v1.7.0 h1:6Eox8zONGebBFcCBqkVmt60LaWZa6xg1cl/DwAh/J1w= -github.com/google/trillian v1.5.1 h1:2p1l13f0eWd7eOShwarwIxutYYnGzY/5S+xYewQIPkU= -github.com/google/trillian v1.5.1/go.mod h1:EcDttN8nf+EoAiyLigBAp9ebncZI6rhJPyxZ+dQ6HSo= +github.com/google/trillian v1.5.2 h1:roGP6G8aaAch7vP08+oitPkvmZzxjTfIkguozqJ04Ok= +github.com/google/trillian v1.5.2/go.mod h1:H8vOoa2dxd3xCdMzOOwt9kIz/3MSoJhcqLJGG8iRwbg= github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I= @@ -518,8 +519,8 @@ github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1: github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc= github.com/imdario/mergo v0.3.12 h1:b6R2BslTbIEToALKP7LxUvijTsNI9TAe80pLWN2g/HU= github.com/imdario/mergo v0.3.12/go.mod h1:jmQim1M+e3UYxmgPu/WyfjB3N3VflVyUjjjwH0dnCYA= -github.com/in-toto/in-toto-golang v0.8.0 h1:MTVK138TdSUbScuy3XQiRlV5U5a1UkFdz+2gyvF42V0= -github.com/in-toto/in-toto-golang v0.8.0/go.mod h1:u8GkjDht81AcD7GrNAPLZl4jsRF//f306QDHZ5mBIyI= +github.com/in-toto/in-toto-golang v0.9.0 h1:tHny7ac4KgtsfrG6ybU8gVOZux2H8jN05AXJ9EBM1XU= +github.com/in-toto/in-toto-golang v0.9.0/go.mod h1:xsBVrVsHNsB61++S6Dy2vWosKhuA3lUTQd+eF9HdeMo= github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8= github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= @@ -562,11 +563,10 @@ github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= -github.com/leodido/go-urn v1.2.3 h1:6BE2vPT0lqoz3fmOesHZiaiFh7889ssCo2GMvLCfiuA= -github.com/leodido/go-urn v1.2.3/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4= +github.com/leodido/go-urn v1.2.4 h1:XlAE/cm/ms7TE/VMVoduSpNBoyc2dOxHs5MZSwAN63Q= +github.com/leodido/go-urn v1.2.4/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4= github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf h1:ndns1qx/5dL43g16EQkPV/i8+b3l5bYQwLeoSBe7tS8= github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf/go.mod h1:aGkAgvWY/IUcVFfuly53REpfv5edu25oij+qHRFaraA= -github.com/lib/pq v1.10.7 h1:p7ZhMD+KsSRozJr34udlUrhboJwWAgCg34+/ZZNvZZw= github.com/magiconair/properties v1.8.0/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ= github.com/magiconair/properties v1.8.1/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ= github.com/magiconair/properties v1.8.4/go.mod h1:y3VJvCyxH9uVvJTWEGAELF3aiYNyPKd5NZ3oSwXrF60= @@ -656,11 +656,11 @@ github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZN github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI= github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw= github.com/prometheus/client_golang v0.9.3/go.mod h1:/TN21ttK/J9q6uSwhBd54HahCDft0ttaMvbicHlPoso= -github.com/prometheus/client_golang v1.15.0 h1:5fCgGYogn0hFdhyhLbw7hEsWxufKtY9klyvdNfFlFhM= +github.com/prometheus/client_golang v1.15.1 h1:8tXpTmJbyH5lydzFPoxSIJ0J46jdh3tylbvM1xCv0LI= github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo= github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= -github.com/prometheus/client_model v0.3.0 h1:UBgGFHqYdG/TPFD1B1ogZywDqEkwp3fBMvqdiQ7Xew4= +github.com/prometheus/client_model v0.4.0 h1:5lQXD3cAg1OXBf4Wq03gTrXHeaV0TQvGfUooCfx1yqY= github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro= github.com/prometheus/common v0.4.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4= github.com/prometheus/common v0.42.0 h1:EKsfXEYo4JpWMHH5cg+KOUWeuJSov1Id8zGR8eeI1YM= @@ -680,8 +680,8 @@ github.com/ryanuber/go-glob v1.0.0 h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkB github.com/sassoftware/relic v7.2.1+incompatible h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A= github.com/sassoftware/relic v7.2.1+incompatible/go.mod h1:CWfAxv73/iLZ17rbyhIEq3K9hs5w6FpNMdUT//qR+zk= github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod h1:DxrIzT+xaE7yg65j358z/aeFdxmN0P9QXhEzd20vsDc= -github.com/secure-systems-lab/go-securesystemslib v0.5.0 h1:oTiNu0QnulMQgN/hLK124wJD/r2f9ZhIUuKIeBsCBT8= -github.com/secure-systems-lab/go-securesystemslib v0.5.0/go.mod h1:uoCqUC0Ap7jrBSEanxT+SdACYJTVplRXWLkGMuDjXqk= +github.com/secure-systems-lab/go-securesystemslib v0.6.0 h1:T65atpAVCJQK14UA57LMdZGpHi4QYSH/9FZyNGqMYIA= +github.com/secure-systems-lab/go-securesystemslib v0.6.0/go.mod h1:8Mtpo9JKks/qhPG4HGZ2LGMvrPbzuxwfz/f/zLfEWkk= github.com/segmentio/ksuid v1.0.4 h1:sBo2BdShXjmcugAMwjugoGUdUV0pcxY5mW4xKRn3v4c= github.com/segmentio/ksuid v1.0.4/go.mod h1:/XUiZBD3kVx5SmUOl55voK5yeAbBNNIed+2O73XgrPE= github.com/shibumi/go-pathspec v1.3.0 h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI= @@ -691,12 +691,12 @@ github.com/sigstore/cosign/v2 v2.0.2 h1:Ttaj/OkJAy+ummhnHG2F+JSFeZQj8i0P6o8j2RY9 github.com/sigstore/cosign/v2 v2.0.2/go.mod h1:yJXtRmWrumyQA/XPjTTjOufnNckI87mmmVxv9rtEqgE= github.com/sigstore/fulcio v1.2.0 h1:I4H764cDbryKXkPtasUvo8bcix/7xLvkxWYWNp+JtWI= github.com/sigstore/fulcio v1.2.0/go.mod h1:FS7qpBvOEqs0uEh1+hJxzxtJistWN29ybLtAzFNUi0c= -github.com/sigstore/protobuf-specs v0.1.1-0.20230503063121-91485b44360d h1:Zcb01JMzGaofV3qXkNPXl2HySnx0ZwImT3YzQf9W4Uw= -github.com/sigstore/protobuf-specs v0.1.1-0.20230503063121-91485b44360d/go.mod h1:5shUCxf82hGnjUEFVWiktcxwzdtn6EfeeJssxZ5Q5HE= -github.com/sigstore/rekor v1.1.1 h1:JCeSss+qUHnCATmwAZh4zT9k0Frdyq0BjmRwewSfEy4= -github.com/sigstore/rekor v1.1.1/go.mod h1:x/xK+HK08MiuJv+v4OxY/Oo3bhuz1DtJXNJrV7hrzvs= -github.com/sigstore/sigstore v1.6.3 h1:lt/w/fZNnrT4PjjqTYsUXn57fvE1YYfIB3SElQZ1oR4= -github.com/sigstore/sigstore v1.6.3/go.mod h1:BpLOp7N2IECbatk4sXE2toY2krw615NmwAtWs/3SJDw= +github.com/sigstore/protobuf-specs v0.1.1-0.20230518173429-5ef54068bb53 h1:q2rO7GOmez7Im4t1JGKCe9BaepE97yMT6NE5zpB3LaA= +github.com/sigstore/protobuf-specs v0.1.1-0.20230518173429-5ef54068bb53/go.mod h1:5shUCxf82hGnjUEFVWiktcxwzdtn6EfeeJssxZ5Q5HE= +github.com/sigstore/rekor v1.2.0 h1:ahlnoEY3zo8Vc+eZLPobamw6YfBTAbI0lthzUQd6qe4= +github.com/sigstore/rekor v1.2.0/go.mod h1:zcFO54qIg2G1/i0sE/nvmELUOng/n0MPjTszRYByVPo= +github.com/sigstore/sigstore v1.6.4 h1:jH4AzR7qlEH/EWzm+opSpxCfuUcjHL+LJPuQE7h40WE= +github.com/sigstore/sigstore v1.6.4/go.mod h1:pjR64lBxnjoSrAr+Ydye/FV73IfrgtoYlAI11a8xMfA= github.com/sigstore/timestamp-authority v1.0.0 h1:UisIGA9anE6xyWctJaiEmsk1M+txQ6kAPQDCyu+ieQw= github.com/sigstore/timestamp-authority v1.0.0/go.mod h1:DvyJt4w4by/hsutEi+th0MsK2tB3IwCPVr9ACrJAgIA= github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo= @@ -772,8 +772,8 @@ github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399/go.mod h1:LdwHT github.com/tjfoc/gmsm v1.3.2 h1:7JVkAn5bvUJ7HtU08iW6UiD+UTmJTIToHCfeFzkcCxM= github.com/tjfoc/gmsm v1.3.2/go.mod h1:HaUcFuY0auTiaHB9MHFGCPx5IaLhTUd2atbCFBQXn9w= github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U= -github.com/transparency-dev/merkle v0.0.1 h1:T9/9gYB8uZl7VOJIhdwjALeRWlxUxSfDEysjfmx+L9E= -github.com/transparency-dev/merkle v0.0.1/go.mod h1:B8FIw5LTq6DaULoHsVFRzYIUDkl8yuSwCdZnOZGKL/A= +github.com/transparency-dev/merkle v0.0.2 h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4= +github.com/transparency-dev/merkle v0.0.2/go.mod h1:pqSy+OXefQ1EDUVmAJ8MUhHB9TXGuzVAT58PqBoHz1A= github.com/ugorji/go v1.1.4/go.mod h1:uQMGLiO92mf5W77hV/PUCpI3pbzQx3CRekS0kk+RGrc= github.com/urfave/cli v1.22.4/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0= github.com/vbatts/tar-split v0.11.2 h1:Via6XqJr0hceW4wff3QRzD5gAk/tatMw/4ZA7cTlIME= @@ -790,6 +790,7 @@ github.com/xdg-go/stringprep v1.0.3/go.mod h1:W3f5j4i+9rC0kuIEJL0ky1VpHXQU3ocBgk github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q= github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d/go.mod h1:rHwXgn7JulP+udvsHwJoVG1YGAP6VLg4y9I5dyZdqmA= +github.com/ysmood/fetchup v0.2.2 h1:Qn8/q5uDW7szclt4sVXCFJ1TXup3hogz94OaLf6kloo= github.com/ysmood/goob v0.4.0 h1:HsxXhyLBeGzWXnqVKtmT9qM7EuVs/XOgkX7T6r1o1AQ= github.com/ysmood/gson v0.7.3 h1:QFkWbTH8MxyUTKPkVWAENJhxqdBa4lYTQWqZCiLG6kE= github.com/ysmood/leakless v0.8.0 h1:BzLrVoiwxikpgEQR0Lk8NyBN5Cit2b1z+u0mgL4ZJak= @@ -817,8 +818,8 @@ go.opentelemetry.io/otel v1.14.0/go.mod h1:o4buv+dJzx8rohcUeRmWUZhqupFvzWis188Wl go.opentelemetry.io/otel/sdk v1.14.0 h1:PDCppFRDq8A1jL9v6KMI6dYesaq+DFcDZvjsoGvxGzY= go.opentelemetry.io/otel/trace v1.14.0 h1:wp2Mmvj41tDsyAJXiWDWpfNsOiIyd38fy85pyKcFq/M= go.opentelemetry.io/otel/trace v1.14.0/go.mod h1:8avnQLK+CG77yNLUae4ea2JDQ6iT+gozhnZjy/rw9G8= -go.step.sm/crypto v0.29.3 h1:lFCsFQQGic1VZIa0B/87iMCDy67+LW8eEl119GTyeWI= -go.step.sm/crypto v0.29.3/go.mod h1:0lYeIyQMJbFJ27L4BOGaq2gnuTgOShf+Ju/cTsMULq4= +go.step.sm/crypto v0.30.0 h1:EzqPTvW1g6kxEnfIf/exDW+MhHGeEhtoNMhQX7P/UwI= +go.step.sm/crypto v0.30.0/go.mod h1:6jFFgUoafyHvb6rNq3NJrBByof4SCzj1n8ThyXuMVAM= go.uber.org/atomic v1.4.0/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE= go.uber.org/atomic v1.10.0 h1:9qC72Qh0+3MqyJbAn8YU5xVq1frD8bn3JtD2oXtafVQ= go.uber.org/atomic v1.10.0/go.mod h1:LUxbIzbOniOlMKjJjyPfpl4v+PKK2cNJn91OQbhoJI0= @@ -849,8 +850,9 @@ golang.org/x/crypto v0.0.0-20211108221036-ceb1ce70b4fa/go.mod h1:GvvjBRRGRdwPK5y golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= -golang.org/x/crypto v0.8.0 h1:pd9TJtTueMTVQXzk8E2XESSMQDj/U7OUu0PqJqPXQjQ= -golang.org/x/crypto v0.8.0/go.mod h1:mRqEX+O9/h5TFCrQhkgjo2yKi0yYA+9ecGkdQoHrywE= +golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58= +golang.org/x/crypto v0.9.0 h1:LF6fAI+IutBocDJ2OT0Q1g8plpYljMZ4+lty+dsqw3g= +golang.org/x/crypto v0.9.0/go.mod h1:yrmDGqONDYtNj3tH8X9dzUun2m2lzPa9ngI6/RUPGR0= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -861,8 +863,8 @@ golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u0 golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM= golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU= -golang.org/x/exp v0.0.0-20230124195608-d38c7dcee874 h1:kWC3b7j6Fu09SnEBr7P4PuQyM0R6sqyH9R+EjIvT1nQ= -golang.org/x/exp v0.0.0-20230124195608-d38c7dcee874/go.mod h1:CxIveKay+FTh1D0yPZemJVgC/95VzuuOLq5Qi4xnoYc= +golang.org/x/exp v0.0.0-20230321023759-10a507213a29 h1:ooxPy7fPvB4kwsA2h+iBNHkAbp/4JxTSwCmvdjEYmug= +golang.org/x/exp v0.0.0-20230321023759-10a507213a29/go.mod h1:CxIveKay+FTh1D0yPZemJVgC/95VzuuOLq5Qi4xnoYc= golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js= golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0= golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= @@ -935,8 +937,9 @@ golang.org/x/net v0.0.0-20220607020251-c690dde0001d/go.mod h1:XRhObCWvk6IyKnWLug golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.3.0/go.mod h1:MBQ8lrhLObU/6UmLb4fmbmk5OcyYmqtbGd/9yIeKjEE= golang.org/x/net v0.4.0/go.mod h1:MBQ8lrhLObU/6UmLb4fmbmk5OcyYmqtbGd/9yIeKjEE= -golang.org/x/net v0.9.0 h1:aWJ/m6xSmxWBx+V0XRHTlrYrPG56jKsLdTFmsSsCzOM= -golang.org/x/net v0.9.0/go.mod h1:d48xBJpPfHeWQsugry2m+kC02ZBRGRgulfHnEXEuWns= +golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= +golang.org/x/net v0.10.0 h1:X2//UzNDwYmtCLn7To6G58Wr6f5ahEAQgKNzv9Y951M= +golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -962,8 +965,8 @@ golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.1.0 h1:wsuoTGHzEhffawBOhz5CYhcrV4IdKZbEyZjBMuTp12o= -golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.2.0 h1:PUR+T4wwASmuSTYdKjYHI5TD22Wy5ogLU5qZCOLxBrI= +golang.org/x/sync v0.2.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= @@ -1025,13 +1028,15 @@ golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.7.0 h1:3jlCCIQZPdOYu1h8BkNvLz8Kgwtae2cagcG/VamtZRU= -golang.org/x/sys v0.7.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.8.0 h1:EBmGv8NaZBZTWvrbjNoL6HVt+IVy3QDQpJs7VRIw3tU= +golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.3.0/go.mod h1:q750SLmJuPmVoN1blW3UFBPREJfb1KmY3vwxfr+nFDA= -golang.org/x/term v0.7.0 h1:BEvjmm5fURWqcfbSKTdpkDXYBrUS1c0m8agp14W48vQ= -golang.org/x/term v0.7.0/go.mod h1:P32HKFT3hSsZrRxla30E9HqToFYAQPCMs/zFMBUFqPY= +golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= +golang.org/x/term v0.8.0 h1:n5xxQn2i3PC0yLAbjTpNT85q/Kgzcr2gIoX9OrJUols= +golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -1042,6 +1047,7 @@ golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.5.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= +golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.9.0 h1:2sjJmO8cDvYveuX97RDLsxlyUxLl+GHoLxBiRdHllBE= golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= @@ -1109,7 +1115,6 @@ golang.org/x/tools v0.0.0-20210108195828-e2f9c7f1fc8e/go.mod h1:emZCQorbCU4vsT4f golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/tools v0.8.0 h1:vSDcovVPld282ceKgDimkRSC8kpaH1dgyc9UMzlt84Y= -golang.org/x/tools v0.8.0/go.mod h1:JxBZ99ISMI5ViVkT1tr6tdNmXeTrcpVSD3vZ1RsRdN4= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= @@ -1134,7 +1139,7 @@ google.golang.org/api v0.30.0/go.mod h1:QGmEvQ87FHZNiUVJkT14jQNYJ4ZJjdRF23ZXz513 google.golang.org/api v0.35.0/go.mod h1:/XrVsuzM0rZmrsbjJutiuftIzeuTQcEeaYcSk/mQ1dg= google.golang.org/api v0.36.0/go.mod h1:+z5ficQTmoYpPn8LCUNVpK5I7hwkpjbcgqA7I34qYtE= google.golang.org/api v0.40.0/go.mod h1:fYKFpnQN0DsDSKRVRcQSDQNtqWPfM9i+zNPxepjRCQ8= -google.golang.org/api v0.119.0 h1:Dzq+ARD6+8jmd5wknJE1crpuzu1JiovEU6gCp9PkoKA= +google.golang.org/api v0.121.0 h1:8Oopoo8Vavxx6gt+sgs8s8/X60WBAtKQq6JqnkF+xow= google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= @@ -1199,8 +1204,8 @@ google.golang.org/grpc v1.31.1/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc= google.golang.org/grpc v1.34.0/go.mod h1:WotjhfgOW/POjDeRt8vscBtXq+2VjORFy659qA51WJ8= google.golang.org/grpc v1.35.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU= -google.golang.org/grpc v1.54.0 h1:EhTqbhiYeixwWQtAEZAxmV9MGqcjEU2mFx52xCzNyag= -google.golang.org/grpc v1.54.0/go.mod h1:PUSEXI6iWghWaB6lXM4knEgpJNu2qUcKfDtNci3EC2g= +google.golang.org/grpc v1.55.0 h1:3Oj82/tFSCeUrRTg/5E/7d/W5A1tj6Ky1ABAuZuv5ag= +google.golang.org/grpc v1.55.0/go.mod h1:iYEXKGkEBhg1PjZQvoYEVPTDkHo1/bjTnfwTeGONTY8= google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM= @@ -1266,8 +1271,8 @@ k8s.io/apimachinery v0.26.1 h1:8EZ/eGJL+hY/MYCNwhmDzVqq2lPl3N3Bo8rvweJwXUQ= k8s.io/apimachinery v0.26.1/go.mod h1:tnPmbONNJ7ByJNz9+n9kMjNP8ON+1qoAIIC70lztu74= k8s.io/client-go v0.25.4 h1:3RNRDffAkNU56M/a7gUfXaEzdhZlYhoW8dgViGy5fn8= k8s.io/client-go v0.25.4/go.mod h1:8trHCAC83XKY0wsBIpbirZU4NTUpbuhc2JnI7OruGZw= -k8s.io/klog/v2 v2.90.0 h1:VkTxIV/FjRXn1fgNNcKGM8cfmL1Z33ZjXRTVxKCoF5M= -k8s.io/klog/v2 v2.90.0/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0= +k8s.io/klog/v2 v2.100.1 h1:7WCHKK6K8fNhTqfBhISHQ97KrnJNFZMcQvKp7gP/tmg= +k8s.io/klog/v2 v2.100.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0= k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280 h1:+70TFaan3hfJzs+7VK2o+OGxg8HsuBr/5f6tVAjDu6E= k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280/go.mod h1:+Axhij7bCpeqhklhUTe3xmOn6bWxolyZEeyaFpjGtl4= k8s.io/utils v0.0.0-20230115233650-391b47cb4029 h1:L8zDtT4jrxj+TaQYD0k8KNlr556WaVQylDXswKmX+dE= @@ -1277,8 +1282,8 @@ rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo= sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0= -sigs.k8s.io/release-utils v0.7.3 h1:6pS8x6c5RmdUgR9qcg1LO6hjUzuE4Yo9TGZ3DemrZdM= -sigs.k8s.io/release-utils v0.7.3/go.mod h1:n0mVez/1PZYZaZUTJmxewxH3RJ/Lf7JUDh7TG1CASOE= +sigs.k8s.io/release-utils v0.7.4 h1:17LmJrydpUloTCtaoWj95uKlcrUp4h2A9Sa+ZL+lV9w= +sigs.k8s.io/release-utils v0.7.4/go.mod h1:JEt2QPHItd5Pg2UKLAU8PEaSlF4bUjCZimpxFDgymVU= sigs.k8s.io/structured-merge-diff/v4 v4.2.3 h1:PRbqxJClWWYMNV1dhaG4NsibJbArud9kFxnAMREiWFE= sigs.k8s.io/structured-merge-diff/v4 v4.2.3/go.mod h1:qjx8mGObPmV2aSZepjQjbmb2ihdVs8cGKBraizNC69E= sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo= diff --git a/options/options.go b/options/options.go index 7bc9c46de..11ef9fb4a 100644 --- a/options/options.go +++ b/options/options.go @@ -18,7 +18,7 @@ type ProvenanceOpts struct { // ExpectedSourceURI is the expected source URI in the provenance. ExpectedSourceURI string - // ExpectedBuilderID is the expected builder ID. + // ExpectedBuilderID is the expected builder ID that is passed from user and verified ExpectedBuilderID string // ExpectedWorkflowInputs is a map of key=value inputs. @@ -31,6 +31,6 @@ type ProvenanceOpts struct { // BuildOpts are the options for checking the builder. type BuilderOpts struct { - // ExpectedID is the expected builder ID. + // ExpectedBuilderID is the builderID passed in from the user to be verified ExpectedID *string } diff --git a/slsa-verifier-linux-amd64 b/slsa-verifier-linux-amd64 new file mode 100644 index 000000000..ce0136250 --- /dev/null +++ b/slsa-verifier-linux-amd64 @@ -0,0 +1 @@ +hello diff --git a/verifiers/internal/gcb/intoto.go b/verifiers/internal/gcb/intoto.go deleted file mode 100644 index dccb68d6e..000000000 --- a/verifiers/internal/gcb/intoto.go +++ /dev/null @@ -1,74 +0,0 @@ -package gcb - -// NOTE: Copy of github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1 -// This holds an internal copy of in-toto-golang's structs for -// SLSA predicates to handle GCB's incompatibility with the -// published specification. -// Specifically, GCB provenance currently produces a string for -// ProvenancePredicate.Recipe.DefinedInMaterial rather than the SLSA compliant -// signed integer. Because of this, we comment out the field and do not unmarshal -// this in the Go struct. When comparing the envelope with the human-readable -// content, this field is ignored! -// GCB will later add compliant fields in the signed envelope, but NOT in the -// human-readable component. Either disregard comparison between human-readable -// summary and the signed envelope, or use this struct in comparison. - -import "time" - -const ( - // PredicateSLSAProvenance represents a build provenance for an artifact. - PredicateSLSAProvenance = "https://slsa.dev/provenance/v0.1" -) - -// ProvenancePredicate is the provenance predicate definition. -type ProvenancePredicate struct { - Builder ProvenanceBuilder `json:"builder"` - Recipe ProvenanceRecipe `json:"recipe"` - Metadata *ProvenanceMetadata `json:"metadata,omitempty"` - Materials []ProvenanceMaterial `json:"materials,omitempty"` -} - -// ProvenanceBuilder idenfifies the entity that executed the build steps. -type ProvenanceBuilder struct { - ID string `json:"id"` -} - -// ProvenanceRecipe describes the actions performed by the builder. -type ProvenanceRecipe struct { - Type string `json:"type"` - // DefinedInMaterial can be sent as the null pointer to indicate that - // the value is not present. - // DefinedInMaterial *int `json:"definedInMaterial,omitempty"` - EntryPoint string `json:"entryPoint"` - Arguments interface{} `json:"arguments,omitempty"` - Environment interface{} `json:"environment,omitempty"` -} - -// ProvenanceMetadata contains metadata for the built artifact. -type ProvenanceMetadata struct { - // Use pointer to make sure that the abscense of a time is not - // encoded as the Epoch time. - BuildStartedOn *time.Time `json:"buildStartedOn,omitempty"` - BuildFinishedOn *time.Time `json:"buildFinishedOn,omitempty"` - Completeness ProvenanceComplete `json:"completeness"` - Reproducible bool `json:"reproducible"` -} - -// ProvenanceMaterial defines the materials used to build an artifact. -type ProvenanceMaterial struct { - URI string `json:"uri"` - Digest DigestSet `json:"digest,omitempty"` -} - -// ProvenanceComplete indicates whether the claims in build/recipe are complete. -// For in depth information refer to the specifictaion: -// https://github.com/in-toto/attestation/blob/v0.1.0/spec/predicates/provenance.md -type ProvenanceComplete struct { - Arguments bool `json:"arguments"` - Environment bool `json:"environment"` - Materials bool `json:"materials"` -} - -// DigestSet contains a set of digests. It is represented as a map from -// algorithm name to lowercase hex-encoded value. -type DigestSet map[string]string diff --git a/verifiers/internal/gcb/keys/keys.go b/verifiers/internal/gcb/keys/keys.go index 112b0bd85..d6e7998b7 100644 --- a/verifiers/internal/gcb/keys/keys.go +++ b/verifiers/internal/gcb/keys/keys.go @@ -19,8 +19,20 @@ import ( //go:embed materials/* var publicKeys embed.FS -const GlobalPAEKeyID = "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1" -const GlobalPAEPublicKeyName = "global-pae" +const ( + // v1.0 global keys. + // Run command `gcloud kms keys versions get-public-key 1 --keyring attestor --key google-hosted-worker --project verified-builder --location global`. + V10GlobalPAEKeyID = "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1" + + // v0.1 global keys. + // Run command `gcloud kms keys versions get-public-key 1 --keyring attestor --key provenanceSigner --project verified-builder --location global`. + V01GlobalPAEKeyID = "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1" +) + +var globalKeyNames = map[string]string{ + V10GlobalPAEKeyID: "global-pae-google-hosted-worker_1", + V01GlobalPAEKeyID: "global-pae-provenanceSigner_1", +} type PublicKey struct { value []byte @@ -69,18 +81,31 @@ func (p *PublicKey) VerifySignature(digest [32]byte, sig []byte) error { return nil } +func (p *PublicKey) Name() string { + return p.region +} + type GlobalPAEKey struct { publicKey *PublicKey + id string Verifier *dsselib.EnvelopeVerifier } -func NewGlobalPAEKey() (*GlobalPAEKey, error) { - publicKey, err := NewPublicKey(GlobalPAEPublicKeyName) +func NewGlobalPAEKey(id string) (*GlobalPAEKey, error) { + name, ok := globalKeyNames[id] + if !ok { + return nil, fmt.Errorf("%w: unknown key %v", serrors.ErrorInternal, id) + } + + publicKey, err := NewPublicKey(name) if err != nil { - return nil, fmt.Errorf("unable to create public key for Global PAE key: %w", err) + return nil, fmt.Errorf("%w: unable to create public key for Global PAE key %v", err, name) } - globalPaeKey := &GlobalPAEKey{publicKey: publicKey} + globalPaeKey := &GlobalPAEKey{ + publicKey: publicKey, + id: id, + } envVerifier, err := dsselib.NewEnvelopeVerifier(globalPaeKey) if err != nil { return nil, err @@ -104,10 +129,14 @@ func (v *GlobalPAEKey) Verify(_ context.Context, data, sig []byte) error { // KeyID implements dsse.Verifier.KeyID. func (v *GlobalPAEKey) KeyID() (string, error) { - return GlobalPAEKeyID, nil + return v.id, nil } // Public implements dsse.Verifier.Public. func (v *GlobalPAEKey) Public() crypto.PublicKey { return v.publicKey } + +func (v *GlobalPAEKey) Name() string { + return v.publicKey.Name() +} diff --git a/verifiers/internal/gcb/keys/materials/global-pae-google-hosted-worker_1.key b/verifiers/internal/gcb/keys/materials/global-pae-google-hosted-worker_1.key new file mode 100644 index 000000000..5b1fb3ea1 --- /dev/null +++ b/verifiers/internal/gcb/keys/materials/global-pae-google-hosted-worker_1.key @@ -0,0 +1,4 @@ +-----BEGIN PUBLIC KEY----- +MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEg9KII7kzr/30HBluf00y9WwtMFkE +qc3oCcFVH3QJ37IBLUv/MUApbnNHFfD75ayJ/a0F45xa+MLv5zoep+GxsA== +-----END PUBLIC KEY----- diff --git a/verifiers/internal/gcb/keys/materials/global-pae-provenanceSigner_1.key b/verifiers/internal/gcb/keys/materials/global-pae-provenanceSigner_1.key new file mode 100644 index 000000000..764c45abe --- /dev/null +++ b/verifiers/internal/gcb/keys/materials/global-pae-provenanceSigner_1.key @@ -0,0 +1,4 @@ +-----BEGIN PUBLIC KEY----- +MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdMcJUyKbmarf6dydhfmAjgmK6c42 +oCCNRR1se3Bi3VO65KcGk6qyci6/bsu2s4u+dLKWrsUQomEw4v3FtVctoA== +-----END PUBLIC KEY----- diff --git a/verifiers/internal/gcb/provenance.go b/verifiers/internal/gcb/provenance.go index 38feb2911..3d0751553 100644 --- a/verifiers/internal/gcb/provenance.go +++ b/verifiers/internal/gcb/provenance.go @@ -3,50 +3,30 @@ package gcb import ( "crypto/sha256" "encoding/json" - "errors" "fmt" "os" "reflect" - "regexp" "strings" - "github.com/google/go-cmp/cmp" + "golang.org/x/exp/slices" + "github.com/google/go-cmp/cmp" intoto "github.com/in-toto/in-toto-golang/in_toto" dsselib "github.com/secure-systems-lab/go-securesystemslib/dsse" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/options" "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/keys" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/iface" + v01 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/v0.1" + v10 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/v1.0" "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" ) -var GCBBuilderIDs = []string{ - "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", - "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", -} - -var regionalKeyRegex = regexp.MustCompile(`^projects\/verified-builder\/locations\/(.*)\/keyRings\/attestor\/cryptoKeys\/builtByGCB\/cryptoKeyVersions\/1$`) - -var errorSubstitutionError = errors.New("GCB substitution variable error") - -type v01IntotoStatement struct { - intoto.StatementHeader - Predicate ProvenancePredicate `json:"predicate"` -} - -// The GCB provenance contains a human-readable version of the intoto -// statement, but it is not compliant with the standard. It uses `slsaProvenance` -// instead of `predicate`. For backward compatibility, this has not been fixed -// by the GCB team. -type v01GCBIntotoStatement struct { - intoto.StatementHeader - SlsaProvenance ProvenancePredicate `json:"slsaProvenance"` -} - type provenance struct { Build struct { - UnverifiedTextIntotoStatement v01GCBIntotoStatement `json:"intotoStatement"` + UnverifiedTextIntotoStatementV01 v01.GCBIntotoTextStatement `json:"intotoStatement"` + UnverifiedTextIntotoStatementV10 v10.GCBIntotoTextStatement `json:"inTotoSlsaProvenanceV1"` } `json:"build"` Kind string `json:"kind"` ResourceURI string `json:"resourceUri"` @@ -66,9 +46,9 @@ type gloudProvenance struct { } type Provenance struct { - gcloudProv *gloudProvenance - verifiedProvenance *provenance - verifiedIntotoStatement *v01IntotoStatement + gcloudProv *gloudProvenance + verifiedProvenance *provenance + verifiedStatement iface.Provenance } func ProvenanceFromBytes(payload []byte) (*Provenance, error) { @@ -85,8 +65,7 @@ func ProvenanceFromBytes(payload []byte) (*Provenance, error) { func (p *Provenance) isVerified() error { // Check that the signature is verified. - if p.verifiedIntotoStatement == nil || - p.verifiedProvenance == nil { + if p.verifiedStatement == nil || p.verifiedProvenance == nil { return serrors.ErrorNoValidSignature } return nil @@ -96,7 +75,7 @@ func (p *Provenance) GetVerifiedIntotoStatement() ([]byte, error) { if err := p.isVerified(); err != nil { return nil, err } - d, err := json.Marshal(p.verifiedIntotoStatement) + d, err := json.Marshal(p.verifiedStatement) if err != nil { return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) } @@ -166,50 +145,56 @@ func (p *Provenance) VerifyTextProvenance() error { return err } - // Note: there is an additional field `metadata.buildInvocationId` which - // is not part of the specs but is present. This field is currently ignored during comparison. - unverifiedTextIntotoStatement := v01IntotoStatement{ - StatementHeader: p.verifiedProvenance.Build.UnverifiedTextIntotoStatement.StatementHeader, - Predicate: p.verifiedProvenance.Build.UnverifiedTextIntotoStatement.SlsaProvenance, + predicateType, err := p.verifiedStatement.PredicateType() + if err != nil { + return err + } + + var unverifiedTextIntotoStatement interface{} + switch predicateType { + case v10.PredicateSLSAProvenance: + unverifiedTextIntotoStatement = &v10.Provenance{ + StatementHeader: p.verifiedProvenance.Build.UnverifiedTextIntotoStatementV10.StatementHeader, + Pred: p.verifiedProvenance.Build.UnverifiedTextIntotoStatementV10.Pred, + } + case v01.PredicateSLSAProvenance: + // NOTE: there is an additional field `metadata.buildInvocationId` which + // is not part of the specs but is present. This field is currently ignored during comparison. + unverifiedTextIntotoStatement = &v01.Provenance{ + StatementHeader: p.verifiedProvenance.Build.UnverifiedTextIntotoStatementV01.StatementHeader, + Pred: p.verifiedProvenance.Build.UnverifiedTextIntotoStatementV01.SlsaProvenance, + } + default: + return fmt.Errorf("%w: unknown %v type", serrors.ErrorInvalidFormat, predicateType) } // Note: DeepEqual() has problem with time comparisons: https://github.com/onsi/gomega/issues/264 // but this should not affect us since both times are supposed to have the same string and // they are both taken from a string representation. // We do not use cmp.Equal() because it *can* panic and is intended for unit tests only. - if !reflect.DeepEqual(unverifiedTextIntotoStatement, *p.verifiedIntotoStatement) { + if !reflect.DeepEqual(unverifiedTextIntotoStatement, p.verifiedStatement) { return fmt.Errorf("%w: diff '%s'", serrors.ErrorMismatchIntoto, - cmp.Diff(unverifiedTextIntotoStatement, *p.verifiedIntotoStatement)) + cmp.Diff(unverifiedTextIntotoStatement, p.verifiedStatement)) } return nil } -// VerifyIntotoHeaders verifies the headers are intoto format and the expected -// slsa predicate. -func (p *Provenance) VerifyIntotoHeaders() error { - if err := p.isVerified(); err != nil { +func (p *Provenance) validateBuilderID(id string) error { + predicateType, err := p.verifiedStatement.PredicateType() + if err != nil { return err } - - statement := p.verifiedIntotoStatement - // https://in-toto.io/Statement/v0.1 - if statement.StatementHeader.Type != intoto.StatementInTotoV01 { - return fmt.Errorf("%w: expected statement header type '%s', got '%s'", - serrors.ErrorInvalidDssePayload, intoto.StatementInTotoV01, statement.StatementHeader.Type) - } - - // https://slsa.dev/provenance/v0.1 - if statement.StatementHeader.PredicateType != PredicateSLSAProvenance { - return fmt.Errorf("%w: expected statement predicate type '%s', got '%s'", - serrors.ErrorInvalidDssePayload, PredicateSLSAProvenance, statement.StatementHeader.PredicateType) + var builders []string + switch predicateType { + case v01.PredicateSLSAProvenance: + builders = v01.BuilderIDs + case v10.PredicateSLSAProvenance: + builders = v10.BuilderIDs + default: + return fmt.Errorf("%w: unknown predicate type: %v", serrors.ErrorInvalidDssePayload, predicateType) } - - return nil -} - -func isValidBuilderID(id string) error { - for _, b := range GCBBuilderIDs { + for _, b := range builders { if id == b { return nil } @@ -217,18 +202,20 @@ func isValidBuilderID(id string) error { return serrors.ErrorInvalidBuilderID } -func validateRecipeType(builderID utils.TrustedBuilderID, recipeType string) error { +func validatebuildTypeV01(builderID utils.TrustedBuilderID, buildType string) error { var err error v := builderID.Version() switch v { + // NOTE: buildType is called recipeType in v0.1 specification. + // Builders with version <= v0.3 use v0.1 specification. case "v0.2": // In this version, the recipe type should be the same as // the builder ID. - if builderID.String() == recipeType { + if builderID.String() == buildType { return nil } err = fmt.Errorf("%w: expected '%s', got '%s'", - serrors.ErrorInvalidRecipe, builderID.String(), recipeType) + serrors.ErrorInvalidRecipe, builderID.String(), buildType) case "v0.3": // In this version, two recipe types are allowed, depending how the @@ -239,12 +226,12 @@ func validateRecipeType(builderID utils.TrustedBuilderID, recipeType string) err "https://cloudbuild.googleapis.com/CloudBuildSteps@", } for _, r := range recipes { - if strings.HasPrefix(recipeType, r) { + if strings.HasPrefix(buildType, r) { return nil } } err = fmt.Errorf("%w: expected on of '%s', got '%s'", - serrors.ErrorInvalidRecipe, strings.Join(recipes, ","), recipeType) + serrors.ErrorInvalidRecipe, strings.Join(recipes, ","), buildType) default: err = fmt.Errorf("%w: version '%s'", serrors.ErrorInvalidBuilderID, v) @@ -253,6 +240,26 @@ func validateRecipeType(builderID utils.TrustedBuilderID, recipeType string) err return err } +func validatebuildTypeV10(builderID utils.TrustedBuilderID, buildType string) error { + if buildType != v10.BuildType { + return fmt.Errorf("%w: %v", serrors.ErrorInvalidBuildType, buildType) + } + return nil +} + +func validateBuildType(builderID utils.TrustedBuilderID, buildType string) error { + // v0.1 provenance. + if slices.Contains(v01.BuilderIDs, builderID.String()) { + return validatebuildTypeV01(builderID, buildType) + } + + // v1.0 provenance. + if slices.Contains(v10.BuilderIDs, builderID.String()) { + return validatebuildTypeV10(builderID, buildType) + } + return fmt.Errorf("%w: %v", serrors.ErrorInvalidBuilderID, builderID.String()) +} + // VerifyBuilder verifies the builder in the DSSE payload: // - in the recipe type // - the recipe argument type @@ -262,15 +269,32 @@ func (p *Provenance) VerifyBuilder(builderOpts *options.BuilderOpts) (*utils.Tru return nil, err } - statement := p.verifiedIntotoStatement - predicateBuilderID := statement.Predicate.Builder.ID + statement := p.verifiedStatement + predicateBuilderID, err := statement.BuilderID() + if err != nil { + return nil, err + } // Sanity check the builderID. - if err := isValidBuilderID(predicateBuilderID); err != nil { + if err := p.validateBuilderID(predicateBuilderID); err != nil { + return nil, err + } + + predicateType, err := statement.PredicateType() + if err != nil { return nil, err } - provBuilderID, err := utils.TrustedBuilderIDNew(predicateBuilderID, true) + var provBuilderID *utils.TrustedBuilderID + switch predicateType { + case v01.PredicateSLSAProvenance: + provBuilderID, err = utils.TrustedBuilderIDNew(predicateBuilderID, true) + case v10.PredicateSLSAProvenance: + // v1.0 has no builder version. + provBuilderID, err = utils.TrustedBuilderIDNew(predicateBuilderID, false) + default: + return nil, fmt.Errorf("%w: unknown predicate type %v", serrors.ErrorInvalidFormat, predicateType) + } if err != nil { return nil, err } @@ -282,27 +306,46 @@ func (p *Provenance) VerifyBuilder(builderOpts *options.BuilderOpts) (*utils.Tru } } - // Valiate the recipe type. - if err := validateRecipeType(*provBuilderID, statement.Predicate.Recipe.Type); err != nil { + buildType, err := statement.BuildType() + if err != nil { return nil, err } - - // Validate the recipe argument type. - expectedType := "type.googleapis.com/google.devtools.cloudbuild.v1.Build" - args, ok := statement.Predicate.Recipe.Arguments.(map[string]interface{}) - if !ok { - return nil, fmt.Errorf("%w: recipe arguments is not a map", serrors.ErrorInvalidDssePayload) + // Validate the build type. + if err := validateBuildType(*provBuilderID, buildType); err != nil { + return nil, err } - ts, err := getAsString(args, "@type") + + // Validate the recipe argument type for v0.2 provenance only. + predicate, err := statement.Predicate() if err != nil { return nil, err } + switch v := predicate.(type) { + case v10.ProvenancePredicate: + if predicateType != v10.PredicateSLSAProvenance { + return nil, fmt.Errorf("%w: expected %q, got %q", serrors.ErrorInvalidFormat, v10.PredicateSLSAProvenance, predicateType) + } + case v01.ProvenancePredicate: + if predicateType != v01.PredicateSLSAProvenance { + return nil, fmt.Errorf("%w: expected %q, got %q", serrors.ErrorInvalidFormat, v01.PredicateSLSAProvenance, predicateType) + } + expectedType := "type.googleapis.com/google.devtools.cloudbuild.v1.Build" + args, ok := v.Recipe.Arguments.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: recipe arguments is not a map", serrors.ErrorInvalidDssePayload) + } + ts, err := getAsString(args, "@type") + if err != nil { + return nil, err + } - if ts != expectedType { - return nil, fmt.Errorf("%w: expected '%s', got '%s'", serrors.ErrorMismatchBuilderID, - expectedType, ts) + if ts != expectedType { + return nil, fmt.Errorf("%w: expected '%s', got '%s'", serrors.ErrorMismatchBuilderID, + expectedType, ts) + } + default: + return nil, fmt.Errorf("%w: unknown type %v", serrors.ErrorInvalidFormat, v) } - return provBuilderID, nil } @@ -324,8 +367,11 @@ func (p *Provenance) VerifySubjectDigest(expectedHash string) error { return err } - statement := p.verifiedIntotoStatement - for _, subject := range statement.StatementHeader.Subject { + subjects, err := p.verifiedStatement.Subjects() + if err != nil { + return err + } + for _, subject := range subjects { digestSet := subject.Digest hash, exists := digestSet["sha256"] if !exists { @@ -340,18 +386,61 @@ func (p *Provenance) VerifySubjectDigest(expectedHash string) error { return fmt.Errorf("expected hash '%s' not found: %w", expectedHash, serrors.ErrorMismatchHash) } +func verifySourceURIV01(builderID utils.TrustedBuilderID, provenanceURI, expectedSourceURI string) error { + var err error + v := builderID.Version() + switch v { + case "v0.2": + // In v0.2, it uses format + // `https://github.com/laurentsimon/gcb-tests/commit/01ce393d04eb6df2a7b2b3e95d4126e687afb7ae`. + // The latter case is a versioned GCS source which looks like + // `"gs://damith-sds_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz#1665165361152729"`. + if !strings.HasPrefix(provenanceURI, expectedSourceURI+"/commit/") && + !strings.HasPrefix(provenanceURI, expectedSourceURI+"#") { + return fmt.Errorf("%w: expected '%s', got '%s'", + serrors.ErrorMismatchSource, expectedSourceURI, provenanceURI) + } + case "v0.3": + // In v0.3, it uses the standard intoto and has the commit sha in its own `digest.sha1` field. + // The latter case is a versioned GCS source which looks like + // `"gs://damith-sds_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz#1665165361152729"`. + if provenanceURI != expectedSourceURI && + !strings.HasPrefix(provenanceURI, expectedSourceURI+"#") { + return fmt.Errorf("%w: expected '%s', got '%s'", + serrors.ErrorMismatchSource, expectedSourceURI, provenanceURI) + } + default: + err = fmt.Errorf("%w: version '%s'", + serrors.ErrorInvalidBuilderID, v) + } + + return err +} + +func verifySourceURIV10(builderID utils.TrustedBuilderID, provenanceURI, expectedSourceURI string) error { + parts := strings.Split(provenanceURI, "@") + if len(parts) != 2 { + return fmt.Errorf("%w: no version found in '%v'", + serrors.ErrorInvalidFormat, provenanceURI) + } + if parts[0] != expectedSourceURI { + return fmt.Errorf("%w: expected '%s', got '%s'", + serrors.ErrorMismatchSource, expectedSourceURI, parts[0]) + } + return nil +} + // Verify source URI in provenance statement. func (p *Provenance) VerifySourceURI(expectedSourceURI string, builderID utils.TrustedBuilderID) error { if err := p.isVerified(); err != nil { return err } - statement := p.verifiedIntotoStatement - materials := statement.Predicate.Materials - if len(materials) == 0 { - return fmt.Errorf("%w: no materials", serrors.ErrorInvalidDssePayload) + statement := p.verifiedStatement + uri, err := statement.SourceURI() + if err != nil { + return err } - uri := materials[0].URI // NOTE: the material URI did not contain 'git+' for GCB versions <= v0.3. // A change occurred sometimes in v0.3 witout version bump. // Versions >= 0.3 contain the prefix (https://github.com/slsa-framework/slsa-verifier/pull/519). @@ -370,36 +459,35 @@ func (p *Provenance) VerifySourceURI(expectedSourceURI string, builderID utils.T `https://cloud.google.com/build/docs/automating-builds/github/build-repos-from-github`) } - var err error - v := builderID.Version() - switch v { - case "v0.2": - // In v0.2, it uses format - // `https://github.com/laurentsimon/gcb-tests/commit/01ce393d04eb6df2a7b2b3e95d4126e687afb7ae`. - if !strings.HasPrefix(uri, expectedSourceURI+"/commit/") && - !strings.HasPrefix(uri, expectedSourceURI+"#") { - return fmt.Errorf("%w: expected '%s', got '%s'", - serrors.ErrorMismatchSource, expectedSourceURI, uri) - } - // In v0.3, it uses the standard intoto and has the commit sha in its own - // `digest.sha1` field. - case "v0.3": - // The latter case is a versioned GCS source. - if uri != expectedSourceURI && - !strings.HasPrefix(uri, expectedSourceURI+"#") { - return fmt.Errorf("%w: expected '%s', got '%s'", - serrors.ErrorMismatchSource, expectedSourceURI, uri) - } - default: - err = fmt.Errorf("%w: version '%s'", - serrors.ErrorInvalidBuilderID, v) + predicateType, err := statement.PredicateType() + if err != nil { + return err } - return err + switch predicateType { + case v10.PredicateSLSAProvenance: + return verifySourceURIV10(builderID, uri, expectedSourceURI) + case v01.PredicateSLSAProvenance: + return verifySourceURIV01(builderID, uri, expectedSourceURI) + default: + return fmt.Errorf("%w: unknown predicate type: %v", serrors.ErrorInvalidFormat, predicateType) + } } func (p *Provenance) VerifyBranch(branch string) error { - return fmt.Errorf("%w: GCB branch verification", serrors.ErrorNotSupported) + if err := p.isVerified(); err != nil { + return err + } + + provBranch, err := p.verifiedStatement.SourceBranch() + if err != nil { + return err + } + if provBranch != branch { + return fmt.Errorf("%w: expected branch %q, got %q", + serrors.ErrorNotSupported, branch, provBranch) + } + return nil } func (p *Provenance) VerifyTag(expectedTag string) error { @@ -428,44 +516,7 @@ func (p *Provenance) getTag() (string, error) { return "", err } - statement := p.verifiedIntotoStatement - provenanceTag, err := getSubstitutionsField(statement, "TAG_NAME") - if err != nil { - return "", err - } - - return provenanceTag, nil -} - -func getSubstitutionsField(statement *v01IntotoStatement, name string) (string, error) { - arguments := statement.Predicate.Recipe.Arguments - - argsMap, ok := arguments.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: cannot cast arguments as map", errorSubstitutionError) - } - - substitutions, ok := argsMap["substitutions"] - if !ok { - return "", fmt.Errorf("%w: no 'substitutions' field", errorSubstitutionError) - } - - m, ok := substitutions.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: cannot convert substitutions to a map", errorSubstitutionError) - } - - value, ok := m[name] - if !ok { - return "", fmt.Errorf("%w: no entry '%v' in substitution map", errorSubstitutionError, name) - } - - valueStr, ok := value.(string) - if !ok { - return "", fmt.Errorf("%w: value '%v' is not a string", errorSubstitutionError, value) - } - - return valueStr, nil + return p.verifiedStatement.SourceTag() } // verifySignatures iterates over all the signatures in the DSSE and verifies them. @@ -491,12 +542,14 @@ func (p *Provenance) verifySignatures(prov *provenance) error { var errs []error for _, sig := range prov.Envelope.Signatures { - var region string - if sig.KeyID == keys.GlobalPAEKeyID { + var keyName string + + // Global PAE keys. + if sig.KeyID == keys.V10GlobalPAEKeyID || sig.KeyID == keys.V01GlobalPAEKeyID { + // Global key for v1.0 or v0.1. // If the signature is signed with the global PAE key, use a DSSE verifier // to verify the DSSE/PAE-encoded signature. - region = keys.GlobalPAEPublicKeyName - globalPaeKey, err := keys.NewGlobalPAEKey() + globalPaeKey, err := keys.NewGlobalPAEKey(sig.KeyID) if err != nil { errs = append(errs, err) continue @@ -504,14 +557,16 @@ func (p *Provenance) verifySignatures(prov *provenance) error { err = globalPaeKey.VerifyPAESignature(&prov.Envelope) if err != nil { - errs = append(errs, err) + errs = append(errs, fmt.Errorf("%w: key %q", err, globalPaeKey.Name())) continue } - } else if match := regionalKeyRegex.FindStringSubmatch(sig.KeyID); len(match) == 2 { + // Success. + keyName = globalPaeKey.Name() + } else if match := v01.RegionalKeyRegex.FindStringSubmatch(sig.KeyID); len(match) == 2 { + // Regional key for v0.1. // If the signature is signed with a regional key, verify the legacy // signing which is over the envelope (not PAE-encoded). - region = match[1] - pubKey, err := keys.NewPublicKey(region) + pubKey, err := keys.NewPublicKey(match[1]) if err != nil { errs = append(errs, err) continue @@ -530,17 +585,30 @@ func (p *Provenance) verifySignatures(prov *provenance) error { errs = append(errs, err) continue } + // Success. + keyName = match[1] } else { continue } - var statement v01IntotoStatement - if err := json.Unmarshal(payload, &statement); err != nil { - return fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + // Success. + var stmt iface.Provenance + if sig.KeyID == keys.V10GlobalPAEKeyID { + // v1.0 provenance. + stmt, err = v10.New(payload) + } else { + // v0.1 provenance. + // kkeys.V01GlobalPAEKeyID or regional key. + stmt, err = v01.New(payload) } - p.verifiedIntotoStatement = &statement + if err != nil { + errs = append(errs, err) + continue + } + + p.verifiedStatement = stmt p.verifiedProvenance = prov - fmt.Fprintf(os.Stderr, "Verification succeeded with region key '%s'\n", region) + fmt.Fprintf(os.Stderr, "Verification succeeded with key %q\n", keyName) return nil } diff --git a/verifiers/internal/gcb/provenance_test.go b/verifiers/internal/gcb/provenance_test.go index d35e7bbe0..70f98b238 100644 --- a/verifiers/internal/gcb/provenance_test.go +++ b/verifiers/internal/gcb/provenance_test.go @@ -12,88 +12,56 @@ import ( serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/options" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/iface" + v01 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/v0.1" + v10 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/v1.0" "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" ) +const ( + versionV01 = "v0.1" + versionV10 = "v1.0" +) + +type pNewFunc func(payload []byte) (iface.Provenance, error) + // This function sets the statement of the provenance, as if // it had been verified. This is necessary because individual functions // expect this statement to be populated; and this is done only // after the signature is verified. -func setStatement(gcb *Provenance) error { - var statement v01IntotoStatement +func setStatement(gcb *Provenance, version string) error { payload, err := utils.PayloadFromEnvelope(&gcb.gcloudProv.ProvenanceSummary.Provenance[0].Envelope) if err != nil { return fmt.Errorf("payloadFromEnvelope: %w", err) } - if err := json.Unmarshal(payload, &statement); err != nil { - return fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + var pfunc pNewFunc + switch version { + case versionV01: + pfunc = v01.New + case versionV10: + pfunc = v10.New + default: + return fmt.Errorf("%w: version %q", serrors.ErrorInvalidFormat, version) + } + stmt, err := pfunc(payload) + if err != nil { + return fmt.Errorf("creating provenance: %w", err) } - gcb.verifiedIntotoStatement = &statement + gcb.verifiedStatement = stmt gcb.verifiedProvenance = &gcb.gcloudProv.ProvenanceSummary.Provenance[0] return nil } -func Test_VerifyIntotoHeaders(t *testing.T) { - t.Parallel() - tests := []struct { - name string - path string - expected error - }{ - { - name: "valid gcb provenance", - path: "./testdata/gcloud-container-github.json", - }, - { - name: "valid gcb provenance gcs", - path: "./testdata/gcloud-container-gcs.json", - }, - { - name: "invalid intoto header", - path: "./testdata/gcloud-container-invalid-intotoheader.json", - expected: serrors.ErrorInvalidDssePayload, - }, - { - name: "invalid provenance header", - path: "./testdata/gcloud-container-invalid-slsaheader.json", - expected: serrors.ErrorInvalidDssePayload, - }, - } - for _, tt := range tests { - tt := tt // Re-initializing variable so it is not changed while executing the closure below - t.Run(tt.name, func(t *testing.T) { - t.Parallel() - - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - - prov, err := ProvenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) - } - - if err := setStatement(prov); err != nil { - panic(fmt.Errorf("setStatement: %w", err)) - } - - err = prov.VerifyIntotoHeaders() - if !cmp.Equal(err, tt.expected, cmpopts.EquateErrors()) { - t.Errorf(cmp.Diff(err, tt.expected, cmpopts.EquateErrors())) - } - }) - } -} - func Test_VerifyBuilder(t *testing.T) { t.Parallel() tests := []struct { name string path string builderID string + version string expected error }{ + // v0.1 provenance. { name: "valid gcb provenance", path: "./testdata/gcloud-container-github.json", @@ -199,6 +167,26 @@ func Test_VerifyBuilder(t *testing.T) { builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorke", expected: serrors.ErrorMismatchBuilderID, }, + // v1.0 provenance. + { + name: "v1.0 correct single provenance", + path: "./testdata/v1.0-gcloud-container-github-single.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + version: versionV10, + }, + { + name: "v1.0 correct includes v0.1 provenance", + path: "./testdata/v1.0-gcloud-container-github.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + version: versionV10, + }, + { + name: "v1.0 includes v0.1 provenance - incorrect builder", + path: "./testdata/v1.0-gcloud-container-github.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorke", + version: versionV10, + expected: serrors.ErrorMismatchBuilderID, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -215,7 +203,10 @@ func Test_VerifyBuilder(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } @@ -243,55 +234,73 @@ func Test_VerifyBuilder(t *testing.T) { } } -func Test_validateRecipeType(t *testing.T) { +func Test_validateBuildType(t *testing.T) { t.Parallel() tests := []struct { - name string - builderID string - recipeType string - expected error + name string + builderID string + buildType string + expected error }{ - // v0.2 builder. + // v0.1 provenance - v0.2 builder { - name: "valid v0.2 recipe type", - builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", - recipeType: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", + name: "valid v0.2 recipe type", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", + buildType: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", }, { - name: "invalid v0.2 recipe type CloudBuildYaml", - builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", - recipeType: "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1", - expected: serrors.ErrorInvalidRecipe, + name: "invalid v0.2 recipe type CloudBuildYaml", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", + buildType: "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1", + expected: serrors.ErrorInvalidRecipe, }, { - name: "invalid v0.2 recipe type CloudBuildSteps", - builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", - recipeType: "https://cloudbuild.googleapis.com/CloudBuildSteps@v0.1", - expected: serrors.ErrorInvalidRecipe, + name: "invalid v0.2 recipe type CloudBuildSteps", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", + buildType: "https://cloudbuild.googleapis.com/CloudBuildSteps@v0.1", + expected: serrors.ErrorInvalidRecipe, }, - // v0.3 builder. + // v0.1 provenance - v0.3 builder. { - name: "valid v0.3 recipe type CloudBuildYaml", - builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", - recipeType: "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1", + name: "valid v0.3 recipe type CloudBuildYaml", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", + buildType: "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1", }, { - name: "valid v0.3 recipe type CloudBuildSteps", - builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", - recipeType: "https://cloudbuild.googleapis.com/CloudBuildSteps@v0.1", + name: "valid v0.3 recipe type CloudBuildSteps", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", + buildType: "https://cloudbuild.googleapis.com/CloudBuildSteps@v0.1", }, { - name: "invalid v0.3 recipe type GoogleHostedWorker", - builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", - recipeType: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", - expected: serrors.ErrorInvalidRecipe, + name: "invalid v0.3 recipe type GoogleHostedWorker", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", + buildType: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", + expected: serrors.ErrorInvalidRecipe, }, - // No version. + // v0.1 provenance - No version. { - name: "invalid builder version", - builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.1", - recipeType: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.1", - expected: serrors.ErrorInvalidBuilderID, + name: "invalid builder version", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.1", + buildType: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.1", + expected: serrors.ErrorInvalidBuilderID, + }, + // v1.0 provenance - version + { + name: "unexpected version", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker@v1", + buildType: "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + expected: serrors.ErrorInvalidBuilderID, + }, + { + name: "correct v1.0", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + buildType: "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + }, + { + name: "incorrect buildType v1.0", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + buildType: "https://cloud.google.com/build/gcb-buildtypes/google-worker/v0", + expected: serrors.ErrorInvalidBuildType, }, } for _, tt := range tests { @@ -299,11 +308,12 @@ func Test_validateRecipeType(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - builderID, err := utils.TrustedBuilderIDNew(tt.builderID, true) + // Use `false` for v1.0 provenance. + builderID, err := utils.TrustedBuilderIDNew(tt.builderID, false) if err != nil { panic(fmt.Errorf("BuilderIDNew: %w", err)) } - err = validateRecipeType(*builderID, tt.recipeType) + err = validateBuildType(*builderID, tt.buildType) if !cmp.Equal(err, tt.expected, cmpopts.EquateErrors()) { t.Errorf(cmp.Diff(err, tt.expected, cmpopts.EquateErrors())) } @@ -318,9 +328,11 @@ func Test_VerifySourceURI(t *testing.T) { path string builderID string source string + version string expected error }{ - // v0.1 + // v0.1 provenance. + // v0.1 builder. { name: "v0.1 invalid builder id", path: "./testdata/gcloud-container-github.json", @@ -328,7 +340,7 @@ func Test_VerifySourceURI(t *testing.T) { source: "https://github.com/laurentsimon/gcb-tests", expected: serrors.ErrorInvalidBuilderID, }, - // v0.2 + // v0.2 builder. { name: "v0.2 valid gcb provenance", path: "./testdata/gcloud-container-github.json", @@ -365,7 +377,7 @@ func Test_VerifySourceURI(t *testing.T) { source: "https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e", expected: serrors.ErrorMismatchSource, }, - // v0.2 GCS source + // v0.2 builder with GCS source { name: "v0.2 valid match gcb gcs provenance", path: "./testdata/gcloud-container-gcs.json", @@ -421,7 +433,7 @@ func Test_VerifySourceURI(t *testing.T) { source: "gs://damith-sds_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz#2665165361152729", expected: serrors.ErrorMismatchSource, }, - // v0.3 + // v0.3 builder. { name: "v0.3 valid gcb provenance", path: "./testdata/gcloud-container-github-v03.json", @@ -469,6 +481,77 @@ func Test_VerifySourceURI(t *testing.T) { source: "https://github.com/laurentsimon/gcb-tests/commit/01ce393d04eb6df2a7b2b3e95d4126e687afb7ae", expected: serrors.ErrorMismatchSource, }, + // v1.0 provenance. + { + name: "valid v1.0-format provenance", + path: "./testdata/v1.0-gcloud-container-github.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://github.com/khalkie/gcb-prod-prov", + version: versionV10, + }, + { + name: "invalid v1.0-format provenance resolvdeDeps != repository", + path: "./testdata/v1.0-gcloud-container-github-sourcediff.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://github.com/khalkie/gcb-prod-prov", + version: versionV10, + expected: serrors.ErrorMismatchSource, + }, + { + name: "valid v1.0-format provenance no git+", + path: "./testdata/v1.0-gcloud-container-github-nogit.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://github.com/khalkie/gcb-prod-prov", + version: versionV10, + }, + { + name: "valid v1.0-format provenance - with ref", + path: "./testdata/v1.0-gcloud-container-github.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://github.com/khalkie/gcb-prod-prov@refs/heads/main", + version: versionV10, + expected: serrors.ErrorMismatchSource, + }, + { + name: "inline v1.0-format provenance - base64 data", + path: "./testdata/v1.0-gcloud-container-github-inline.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "eyJzdGVwcyI6W3sibmFtZSI6InVidW50dSIsImVudiI6WyJCQVI9JFBST0pFQ1RfSUQiXSwic2NyaXB0IjoiZWNobyAkQkFSIn0seyJuYW1lIjoiZ2NyLmlvL2Nsb3VkLWJ1aWxkZXJzL2djbG91ZCIsImFyZ3MiOlsidG9vbHMvbXlTY3JpcHQuc2giLCItLWZvbyJdLCJlbnRyeXBvaW50IjoiYmFzaCJ9LHsibmFtZSI6InVidW50dSIsImFyZ3MiOlsiZWNobyIsIkhlbGxvIHdvcmxkIl19XSwic3Vic3RpdHV0aW9ucyI6eyJQUk9KRUNUX0lEIjoiMTIzNDUiLCJUUklHR0VSX0JVSUxEX0NPTkZJR19QQVRIIjoiIiwiX1VTRVJfU1VCIjoidXNlci1zdWItdmFsdWUifX0=", + version: versionV10, + expected: serrors.ErrorMismatchSource, + }, + { + name: "inline v1.0-format provenance - uri data", + path: "./testdata/v1.0-gcloud-container-github-inline.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://github.com/khalkie/gcb-prod-prov", + version: versionV10, + expected: serrors.ErrorMismatchSource, + }, + { + + name: "v1.0-format provenance gitlab public", + path: "./testdata/v1.0-gcloud-container-gitlab.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://gitlab.com/proctorprober/khalk-slsav1", + version: versionV10, + }, + { + + name: "v1.0-format provenance gitlab enterprise", + path: "./testdata/v1.0-gcloud-container-gitlabent.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://gle-us-central1.gcb-test.com/proctorprober/khalk-slsav1", + version: versionV10, + }, + { + + name: "v1.0-format provenance bitbucket with port", + path: "./testdata/v1.0-gcloud-container-bb.json", + builderID: "https://cloudbuild.googleapis.com/GoogleHostedWorker", + source: "https://bbs.gcb-test.com:8443/staging-qual-us-west1-push2", + version: versionV10, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -485,11 +568,15 @@ func Test_VerifySourceURI(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } - builderID, err := utils.TrustedBuilderIDNew(tt.builderID, true) + // Use `false` for v1.0 provenance. + builderID, err := utils.TrustedBuilderIDNew(tt.builderID, false) if err != nil { panic(fmt.Errorf("BuilderIDNew: %w", err)) } @@ -508,6 +595,7 @@ func Test_VerifySignature(t *testing.T) { path string expected error }{ + // v0.1 provenance. { name: "valid gcb provenance", path: "./testdata/gcloud-container-github.json", @@ -578,6 +666,30 @@ func Test_VerifySignature(t *testing.T) { name: "signature multiple global pae valid", path: "./testdata/gcloud-container-multiple-signatures-global-pae-valid.json", }, + // v1.0 provenance. + { + name: "signature global v1.0 pae valid", + path: "./testdata/v1.0-gcloud-container-github-single.json", + }, + { + name: "signature global v1.0 pae invalid", + path: "./testdata/v1.0-gcloud-container-github-single-invalid-sig.json", + expected: serrors.ErrorNoValidSignature, + }, + // v1.0 and v0.2 provenance together. + { + name: "signature global v1.0 and v0.1 pae invalid", + path: "./testdata/v1.0-gcloud-container-github-both-invalid-sig.json", + expected: serrors.ErrorNoValidSignature, + }, + { + name: "signature global v1.0 pae valid only", + path: "./testdata/v1.0-gcloud-container-github-v1.0-valid.json", + }, + { + name: "signature global v0.1 pae valid only", + path: "./testdata/v1.0-gcloud-container-github-v0.1-valid.json", + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -594,9 +706,6 @@ func Test_VerifySignature(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { - panic(fmt.Errorf("setStatement: %w", err)) - } err = prov.VerifySignature() if !cmp.Equal(err, tt.expected, cmpopts.EquateErrors()) { t.Errorf(cmp.Diff(err, tt.expected, cmpopts.EquateErrors())) @@ -622,6 +731,12 @@ func Test_ProvenanceFromBytes(t *testing.T) { path: "./testdata/gcloud-container-empty-provenance.json", expected: serrors.ErrorInvalidDssePayload, }, + // v1.0 provenance. + { + name: "invalid signature none - v0.1 and v1.0", + path: "./testdata/v1.0-gcloud-container-github-nosigs.json", + expected: serrors.ErrorInvalidDssePayload, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -647,8 +762,10 @@ func Test_VerifySubjectDigest(t *testing.T) { name string path string hash string + version string expected error }{ + // v0.1 provenance. { name: "valid gcb provenance", path: "./testdata/gcloud-container-github.json", @@ -660,6 +777,20 @@ func Test_VerifySubjectDigest(t *testing.T) { hash: "0a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", expected: serrors.ErrorMismatchHash, }, + // v1.0 provenance. + { + name: "valid subject", + path: "./testdata/v1.0-gcloud-container-github.json", + hash: "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + version: versionV10, + }, + { + name: "mismatch hash", + path: "./testdata/v1.0-gcloud-container-github.json", + hash: "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e4", + version: versionV10, + expected: serrors.ErrorMismatchHash, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -676,7 +807,10 @@ func Test_VerifySubjectDigest(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } @@ -694,8 +828,10 @@ func Test_VerifySummary(t *testing.T) { name string path string hash string + version string expected error }{ + // v0.1 provenance. { name: "valid gcb provenance", path: "./testdata/gcloud-container-github.json", @@ -718,6 +854,20 @@ func Test_VerifySummary(t *testing.T) { hash: "1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", expected: serrors.ErrorMismatchHash, }, + // v1.0 provenance. + { + name: "v1.0 valid gcb provenance", + path: "./testdata/v1.0-gcloud-container-github.json", + hash: "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + version: versionV10, + }, + { + name: "v1.0 mismatch digest", + path: "./testdata/v1.0-gcloud-container-github.json", + hash: "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e4", + version: versionV10, + expected: serrors.ErrorMismatchHash, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -734,7 +884,10 @@ func Test_VerifySummary(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } @@ -755,8 +908,10 @@ func Test_VerifyMetadata(t *testing.T) { name string path string hash string + version string expected error }{ + // v0.1 provenance. { name: "valid gcb provenance", path: "./testdata/gcloud-container-github.json", @@ -774,6 +929,27 @@ func Test_VerifyMetadata(t *testing.T) { hash: "1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", expected: serrors.ErrorInvalidFormat, }, + // v1.0 provenance. + { + name: "v1.0 valid gcb provenance", + path: "./testdata/v1.0-gcloud-container-github.json", + hash: "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + version: versionV10, + }, + { + name: "v1.0 mismatch hash", + path: "./testdata/v1.0-gcloud-container-github.json", + hash: "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e4", + version: versionV10, + expected: serrors.ErrorMismatchHash, + }, + { + name: "v1.0 invalid kind", + path: "./testdata/v1.0-gcloud-container-github-invalid-kind.json", + hash: "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e4", + version: versionV10, + expected: serrors.ErrorInvalidFormat, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -790,7 +966,10 @@ func Test_VerifyMetadata(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } @@ -810,9 +989,11 @@ func Test_VerifyTextProvenance(t *testing.T) { tests := []struct { name string path string + version string alter bool expected error }{ + // v0.1 provenance. { name: "valid gcb provenance", path: "./testdata/gcloud-container-github.json", @@ -827,6 +1008,19 @@ func Test_VerifyTextProvenance(t *testing.T) { alter: true, expected: serrors.ErrorMismatchIntoto, }, + // v1.0 provenance. + { + name: "v1.0 valid gcb provenance", + path: "./testdata/v1.0-gcloud-container-github.json", + version: versionV10, + }, + { + name: "v1.0 mismatch everything", + path: "./testdata/v1.0-gcloud-container-github.json", + alter: true, + version: versionV10, + expected: serrors.ErrorMismatchIntoto, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -843,7 +1037,10 @@ func Test_VerifyTextProvenance(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } @@ -856,10 +1053,19 @@ func Test_VerifyTextProvenance(t *testing.T) { } // Alter fields. - cpy, err := json.Marshal(prov.verifiedProvenance.Build.UnverifiedTextIntotoStatement) - if err != nil { - panic(err) + var cpy []byte + if tt.version == versionV01 { + cpy, err = json.Marshal(prov.verifiedProvenance.Build.UnverifiedTextIntotoStatementV01) + if err != nil { + panic(err) + } + } else { + cpy, err = json.Marshal(prov.verifiedProvenance.Build.UnverifiedTextIntotoStatementV10) + if err != nil { + panic(err) + } } + chars := map[byte]bool{',': true, ':': true, '[': true, ']': true, '{': true, '}': true, '"': true} patch := []byte(strings.Clone(string(cpy))) i := 0 @@ -893,13 +1099,24 @@ func Test_VerifyTextProvenance(t *testing.T) { patch[i] += 1 } - if err = json.Unmarshal(patch, &prov.verifiedProvenance.Build.UnverifiedTextIntotoStatement); err != nil { - // If we updated a character that makes a non-string field invalid, like Time, unmarshaling will fail, - // so we ignore the error. - i += 1 - patch = []byte(strings.Clone(string(cpy))) - continue + if tt.version == versionV01 { + if err = json.Unmarshal(patch, &prov.verifiedProvenance.Build.UnverifiedTextIntotoStatementV01); err != nil { + // If we updated a character that makes a non-string field invalid, like Time, unmarshaling will fail, + // so we ignore the error. + i += 1 + patch = []byte(strings.Clone(string(cpy))) + continue + } + } else { + if err = json.Unmarshal(patch, &prov.verifiedProvenance.Build.UnverifiedTextIntotoStatementV10); err != nil { + // If we updated a character that makes a non-string field invalid, like Time, unmarshaling will fail, + // so we ignore the error. + i += 1 + patch = []byte(strings.Clone(string(cpy))) + continue + } } + err = prov.VerifyTextProvenance() if !cmp.Equal(err, tt.expected, cmpopts.EquateErrors()) { t.Errorf(cmp.Diff(err, tt.expected, cmpopts.EquateErrors())) @@ -934,14 +1151,24 @@ func Test_VerifyBranch(t *testing.T) { name string path string branch string + version string expected error }{ + // v0.1 provenance. { name: "valid gcb provenance", path: "./testdata/gcloud-container-github.json", branch: "master", expected: serrors.ErrorNotSupported, }, + // v1.0 provenance. + { + name: "v1.0 valid gcb provenance", + path: "./testdata/v1.0-gcloud-container-github.json", + version: versionV10, + branch: "master", + expected: serrors.ErrorNotSupported, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -958,7 +1185,10 @@ func Test_VerifyBranch(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } @@ -970,84 +1200,16 @@ func Test_VerifyBranch(t *testing.T) { } } -func Test_getSubstitutionsField(t *testing.T) { - t.Parallel() - tests := []struct { - name string - path string - field string - value string - err error - }{ - { - name: "match tag", - path: "./testdata/gcloud-container-tag.json", - field: "TAG_NAME", - value: "v33.0.4", - }, - { - name: "match repo name", - path: "./testdata/gcloud-container-tag.json", - field: "REPO_NAME", - value: "example-package", - }, - { - name: "no substitutions field", - path: "./testdata/gcloud-container-github.json", - field: "TAG_NAME", - err: errorSubstitutionError, - }, - { - name: "tag not present", - path: "./testdata/gcloud-container-tag-notpresent.json", - field: "TAG_NAME", - err: errorSubstitutionError, - }, - { - name: "tag not string", - path: "./testdata/gcloud-container-tag-notstring.json", - field: "TAG_NAME", - err: errorSubstitutionError, - }, - } - for _, tt := range tests { - tt := tt // Re-initializing variable so it is not changed while executing the closure below - t.Run(tt.name, func(t *testing.T) { - t.Parallel() - - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - - prov, err := ProvenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) - } - - if err := setStatement(prov); err != nil { - panic(fmt.Errorf("setStatement: %w", err)) - } - - value, err := getSubstitutionsField(prov.verifiedIntotoStatement, tt.field) - if !cmp.Equal(err, tt.err, cmpopts.EquateErrors()) { - t.Errorf(cmp.Diff(err, tt.err, cmpopts.EquateErrors())) - } - if err != nil && !cmp.Equal(value, tt.value) { - t.Errorf(cmp.Diff(value, tt.value)) - } - }) - } -} - func Test_VerifyTag(t *testing.T) { t.Parallel() tests := []struct { - name string - path string - tag string - err error + name string + path string + tag string + version string + err error }{ + // v0.1 provenance. { name: "match tag", path: "./testdata/gcloud-container-tag.json", @@ -1086,6 +1248,41 @@ func Test_VerifyTag(t *testing.T) { path: "./testdata/gcloud-container-tag-notstring.json", err: serrors.ErrorMismatchTag, }, + // v1.0 provenance. + { + name: "v1.0 match tag", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33.0.4", + version: versionV10, + }, + { + name: "v1.0 no match major only", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33", + version: versionV10, + err: serrors.ErrorMismatchTag, + }, + { + name: "v1.0 no match major and minor only", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33.0", + version: versionV10, + err: serrors.ErrorMismatchTag, + }, + { + name: "v1.0 no match major", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v34.0.4", + version: versionV10, + err: serrors.ErrorMismatchTag, + }, + { + name: "v1.0 tag not present", + path: "./testdata/v1.0-gcloud-container-github.json", + tag: "v34.0.4", + version: versionV10, + err: serrors.ErrorMismatchTag, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -1102,7 +1299,10 @@ func Test_VerifyTag(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } @@ -1117,11 +1317,13 @@ func Test_VerifyTag(t *testing.T) { func Test_VerifyVersionedTag(t *testing.T) { t.Parallel() tests := []struct { - name string - path string - tag string - err error + name string + path string + tag string + version string + err error }{ + // v1.0 provenance. { name: "match tag", path: "./testdata/gcloud-container-tag.json", @@ -1200,6 +1402,87 @@ func Test_VerifyVersionedTag(t *testing.T) { path: "./testdata/gcloud-container-tag-notstring.json", err: serrors.ErrorMismatchVersionedTag, }, + // v1.0 provenance. + { + name: "match tag", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33.0.4", + version: versionV10, + }, + { + name: "match minor", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33.0", + version: versionV10, + }, + { + name: "no match minor", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33.1", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "no match minor with patch", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33.1.0", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "match major", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v33", + version: versionV10, + }, + { + name: "no match major greater", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v34", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "no match major greater with minor", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v34.0", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "no match major greater with minor and patch", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v34.0.4", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "no match major lower", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v32", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "no match major lower with minor", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v32.0", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "no match major lower with minor and patch", + path: "./testdata/v1.0-gcloud-container-github-tag.json", + tag: "v32.0.4", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, + { + name: "tag not present", + path: "./testdata/v1.0-gcloud-container-github.json", + err: serrors.ErrorMismatchVersionedTag, + version: versionV10, + }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below @@ -1216,7 +1499,10 @@ func Test_VerifyVersionedTag(t *testing.T) { panic(fmt.Errorf("ProvenanceFromBytes: %w", err)) } - if err := setStatement(prov); err != nil { + if tt.version == "" { + tt.version = versionV01 + } + if err := setStatement(prov, tt.version); err != nil { panic(fmt.Errorf("setStatement: %w", err)) } diff --git a/verifiers/internal/gcb/slsaprovenance/common/common.go b/verifiers/internal/gcb/slsaprovenance/common/common.go new file mode 100644 index 000000000..515d0fea4 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/common/common.go @@ -0,0 +1,22 @@ +package common + +import ( + "fmt" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" +) + +// GetAsString returns the value in the given map as a string. +func GetAsString(m map[string]any, field string) (string, error) { + value, ok := m[field] + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, + fmt.Sprintf("type for %s", field)) + } + + i, ok := value.(string) + if !ok { + return "", fmt.Errorf("%w: %s '%s'", serrors.ErrorInvalidDssePayload, "type string", field) + } + return i, nil +} diff --git a/verifiers/internal/gcb/slsaprovenance/common/error.go b/verifiers/internal/gcb/slsaprovenance/common/error.go new file mode 100644 index 000000000..9cdade162 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/common/error.go @@ -0,0 +1,5 @@ +package common + +import "errors" + +var ErrSubstitution = errors.New("GCB substitution variable error") diff --git a/verifiers/internal/gcb/slsaprovenance/common/statement.go b/verifiers/internal/gcb/slsaprovenance/common/statement.go new file mode 100644 index 000000000..571bf13e5 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/common/statement.go @@ -0,0 +1,28 @@ +package common + +import ( + "fmt" + + intoto "github.com/in-toto/in-toto-golang/in_toto" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" +) + +var intotoStatements = map[string]bool{ + intoto.StatementInTotoV01: true, + "https://in-toto.io/Statement/v1": true, +} + +func ValidateStatementTypes(statementType, predicateType, expectedPredicateType string) error { + // Validate the intoto type. + if _, exists := intotoStatements[statementType]; !exists { + return fmt.Errorf("%w: expected statement header type on of '%v', got '%s'", + serrors.ErrorInvalidDssePayload, intotoStatements, statementType) + } + + // Validate the predicate type. + if predicateType != expectedPredicateType { + return fmt.Errorf("%w: expected statement predicate type '%s', got '%s'", + serrors.ErrorInvalidDssePayload, expectedPredicateType, predicateType) + } + return nil +} diff --git a/verifiers/internal/gcb/slsaprovenance/iface/provenance.go b/verifiers/internal/gcb/slsaprovenance/iface/provenance.go new file mode 100644 index 000000000..bae4429be --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/iface/provenance.go @@ -0,0 +1,38 @@ +package iface + +import ( + intoto "github.com/in-toto/in-toto-golang/in_toto" +) + +// Provenance represents provenance for a predicate type and build type. +type Provenance interface { + // Predicate returns the predicate. + Predicate() (interface{}, error) + + // PredicateType returns the predicate type. + PredicateType() (string, error) + + // Header returns the statement header. + Header() (intoto.StatementHeader, error) + + // BuilderID returns the builder id in the predicate. + BuilderID() (string, error) + + // BuildType returns the buildType. + BuildType() (string, error) + + // SourceURI is the full URI (including tag). + SourceURI() (string, error) + + // SourceTag is the tag of the source. + SourceTag() (string, error) + + // SourceBranch is the branch of the source. + SourceBranch() (string, error) + + // Subject is the list of intoto subjects in the provenance. + Subjects() ([]intoto.Subject, error) + + // Get system pararmeters. + GetSystemParameters() (map[string]any, error) +} diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/provenance.go b/verifiers/internal/gcb/slsaprovenance/v0.1/provenance.go new file mode 100644 index 000000000..b82f139b6 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/provenance.go @@ -0,0 +1,210 @@ +package v01 + +// NOTE: Copy of github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1 +// This holds an internal copy of in-toto-golang's structs for +// SLSA predicates to handle GCB's incompatibility with the +// published specification. +// Specifically, GCB provenance currently produces a string for +// ProvenancePredicate.Recipe.DefinedInMaterial rather than the SLSA compliant +// signed integer. Because of this, we comment out the field and do not unmarshal +// this in the Go struct. When comparing the envelope with the human-readable +// content, this field is ignored! +// GCB will later add compliant fields in the signed envelope, but NOT in the +// human-readable component. Either disregard comparison between human-readable +// summary and the signed envelope, or use this struct in comparison. + +import ( + "encoding/json" + "fmt" + "regexp" + "time" + + intoto "github.com/in-toto/in-toto-golang/in_toto" + intotov01 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/iface" +) + +const ( + // PredicateSLSAProvenance represents a build provenance for an artifact. + PredicateSLSAProvenance = intotov01.PredicateSLSAProvenance +) + +var RegionalKeyRegex = regexp.MustCompile(`^projects\/verified-builder\/locations\/(.*)\/keyRings\/attestor\/cryptoKeys\/builtByGCB\/cryptoKeyVersions\/1$`) + +var BuilderIDs = []string{ + "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2", + "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3", +} + +// ProvenancePredicate is the provenance predicate definition. +type ProvenancePredicate struct { + Builder ProvenanceBuilder `json:"builder"` + Recipe ProvenanceRecipe `json:"recipe"` + Metadata *ProvenanceMetadata `json:"metadata,omitempty"` + Materials []ProvenanceMaterial `json:"materials,omitempty"` +} + +// ProvenanceBuilder idenfifies the entity that executed the build steps. +type ProvenanceBuilder struct { + ID string `json:"id"` +} + +// ProvenanceRecipe describes the actions performed by the builder. +type ProvenanceRecipe struct { + Type string `json:"type"` + // DefinedInMaterial can be sent as the null pointer to indicate that + // the value is not present. + // DefinedInMaterial *int `json:"definedInMaterial,omitempty"` + EntryPoint string `json:"entryPoint"` + Arguments interface{} `json:"arguments,omitempty"` + Environment interface{} `json:"environment,omitempty"` +} + +// ProvenanceMetadata contains metadata for the built artifact. +type ProvenanceMetadata struct { + // Use pointer to make sure that the abscense of a time is not + // encoded as the Epoch time. + BuildStartedOn *time.Time `json:"buildStartedOn,omitempty"` + BuildFinishedOn *time.Time `json:"buildFinishedOn,omitempty"` + Completeness ProvenanceComplete `json:"completeness"` + Reproducible bool `json:"reproducible"` +} + +// ProvenanceMaterial defines the materials used to build an artifact. +type ProvenanceMaterial struct { + URI string `json:"uri"` + Digest DigestSet `json:"digest,omitempty"` +} + +// ProvenanceComplete indicates whether the claims in build/recipe are complete. +// For in depth information refer to the specifictaion: +// https://github.com/in-toto/attestation/blob/v0.1.0/spec/predicates/provenance.md +type ProvenanceComplete struct { + Arguments bool `json:"arguments"` + Environment bool `json:"environment"` + Materials bool `json:"materials"` +} + +// DigestSet contains a set of digests. It is represented as a map from +// algorithm name to lowercase hex-encoded value. +type DigestSet map[string]string + +// The GCB provenance contains a human-readable version of the intoto +// statement, but it is not compliant with the standard. It uses `slsaProvenance` +// instead of `predicate`. For backward compatibility, this has not been fixed +// by the GCB team. +type GCBIntotoTextStatement struct { + intoto.StatementHeader + SlsaProvenance ProvenancePredicate `json:"slsaProvenance"` +} + +// Provenance is GCB provenance. +type Provenance struct { + intoto.StatementHeader + Pred ProvenancePredicate `json:"predicate"` +} + +func New(payload []byte) (iface.Provenance, error) { + var provenance Provenance + if err := json.Unmarshal(payload, &provenance); err != nil { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + } + + if err := common.ValidateStatementTypes(provenance.StatementHeader.Type, provenance.StatementHeader.PredicateType, PredicateSLSAProvenance); err != nil { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + } + + return &provenance, nil +} + +// SourceTag implements Provenance.SourceTag. +func (p *Provenance) SourceTag() (string, error) { + sysParams, err := p.GetSystemParameters() + if err != nil { + return "", err + } + return getSubstitutionsField(sysParams, "TAG_NAME") +} + +func getSubstitutionsField(sysParams map[string]any, name string) (string, error) { + value, ok := sysParams[name] + if !ok { + return "", fmt.Errorf("%w: no entry %q in substitution map", common.ErrSubstitution, name) + } + valueStr, ok := value.(string) + if !ok { + return "", fmt.Errorf("%w: value %q is not a string", common.ErrSubstitution, value) + } + return valueStr, nil +} + +// SourceBranch implements Provenance.SourceBranch. +func (p *Provenance) SourceBranch() (string, error) { + return "", fmt.Errorf("%w: branch verification", serrors.ErrorNotSupported) +} + +func (p *Provenance) Predicate() (interface{}, error) { + return p.Pred, nil +} + +func (p *Provenance) PredicateType() (string, error) { + return p.StatementHeader.PredicateType, nil +} + +func (p *Provenance) Header() (intoto.StatementHeader, error) { + return p.StatementHeader, nil +} + +// BuilderID implements Statement.BuilderID. +func (p *Provenance) BuilderID() (string, error) { + return p.Pred.Builder.ID, nil +} + +// BuildType implements Statement.BuildType. +func (p *Provenance) BuildType() (string, error) { + return p.Pred.Recipe.Type, nil +} + +// BuildType implements Statement.GetSystemParameters. +func (p *Provenance) GetSystemParameters() (map[string]any, error) { + arguments := p.Pred.Recipe.Arguments + argsMap, ok := arguments.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: cannot cast arguments as map", common.ErrSubstitution) + } + + substitutions, ok := argsMap["substitutions"] + if !ok { + return nil, fmt.Errorf("%w: no 'substitutions' field", common.ErrSubstitution) + } + + m, ok := substitutions.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: cannot convert substitutions to a map", common.ErrSubstitution) + } + return m, nil +} + +// SourceURI implements Statement.SourceURI. +func (p *Provenance) SourceURI() (string, error) { + if len(p.Pred.Materials) == 0 { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no material") + } + uri := p.Pred.Materials[0].URI + if uri == "" { + return "", fmt.Errorf("%w: empty uri", serrors.ErrorMalformedURI) + } + + return uri, nil +} + +// Subjects implements Statement.Subjects. +func (p *Provenance) Subjects() ([]intoto.Subject, error) { + subj := p.StatementHeader.Subject + if len(subj) == 0 { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no subjects") + } + return subj, nil +} diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/provenance_test.go b/verifiers/internal/gcb/slsaprovenance/v0.1/provenance_test.go new file mode 100644 index 000000000..7a29a0218 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/provenance_test.go @@ -0,0 +1,119 @@ +package v01 + +import ( + "encoding/json" + "fmt" + "os" + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/common" +) + +func Test_New(t *testing.T) { + t.Parallel() + tests := []struct { + name string + path string + expected error + }{ + { + name: "valid gcb provenance", + path: "./testdata/gcloud-container-github.json", + }, + { + name: "valid gcb provenance gcs", + path: "./testdata/gcloud-container-gcs.json", + }, + { + name: "invalid intoto header", + path: "./testdata/gcloud-container-invalid-intotoheader.json", + expected: serrors.ErrorInvalidDssePayload, + }, + { + name: "invalid provenance header", + path: "./testdata/gcloud-container-invalid-slsaheader.json", + expected: serrors.ErrorInvalidDssePayload, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + content, err := os.ReadFile(tt.path) + if err != nil { + panic(fmt.Errorf("os.ReadFile: %w", err)) + } + fmt.Println(string(content)) + _, err = New(content) + if !cmp.Equal(err, tt.expected, cmpopts.EquateErrors()) { + t.Errorf(cmp.Diff(err, tt.expected, cmpopts.EquateErrors())) + } + }) + } +} + +func Test_getSubstitutionsField(t *testing.T) { + t.Parallel() + tests := []struct { + name string + path string + field string + value string + err error + }{ + { + name: "match tag", + path: "./testdata/substitution.json", + field: "TAG_NAME", + value: "v33.0.4", + }, + { + name: "match repo name", + path: "./testdata/substitution.json", + field: "REPO_NAME", + value: "gcb-tests", + }, + { + name: "tag not present", + path: "./testdata/substitution.json", + field: "DOES_NOT_EXIST", + err: common.ErrSubstitution, + }, + { + name: "tag not string", + path: "./testdata/substitution-int.json", + field: "TAG_NAME", + err: common.ErrSubstitution, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + content, err := os.ReadFile(tt.path) + if err != nil { + panic(fmt.Errorf("os.ReadFile: %w", err)) + } + + var internalParemeters map[string]any + err = json.Unmarshal(content, &internalParemeters) + if err != nil { + panic(fmt.Errorf("os.ReadFile: %w", err)) + } + + value, err := getSubstitutionsField(internalParemeters, tt.field) + if !cmp.Equal(err, tt.err, cmpopts.EquateErrors()) { + t.Errorf(cmp.Diff(err, tt.err, cmpopts.EquateErrors())) + } + if err == nil && !cmp.Equal(value, tt.value) { + t.Errorf(cmp.Diff(value, tt.value)) + } + }) + } +} diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-gcs.json b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-gcs.json new file mode 100644 index 000000000..2709bee7b --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-gcs.json @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.1","predicate":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3"},"materials":[{"digest":{"md5":"6e9c2c03099262d534519d106fe04b08"},"uri":"gs://damith-sds_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz#1665165361152729"}],"metadata":{"buildFinishedOn":"2022-10-07T17:57:16.595464Z","buildInvocationId":"565456b1-0394-4c71-8c18-79f9057483df","buildStartedOn":"2022-10-07T17:56:01.814040892Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"565456b1-0394-4c71-8c18-79f9057483df","name":"projects/171719165453/locations/us-central1/builds/565456b1-0394-4c71-8c18-79f9057483df","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"requestedVerifyOption":"VERIFIED"},"sourceProvenance":{"fileHashes":{"gs://damith-sds_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz#1665165361152729":{"fileHash":[{"type":"MD5","value":"bpwsAwmSYtU0UZ0Qb+BLCA=="}]}},"resolvedStorageSource":{"bucket":"damith-sds_cloudbuild","generation":"1665165361152729","object":"source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz"}},"steps":[{"args":["-c","docker build -t us-central1-docker.pkg.dev/damith-sds/containers/java-guestbook-backend:quickstart .\ndocker push us-central1-docker.pkg.dev/damith-sds/containers/java-guestbook-backend:quickstart\n"],"entrypoint":"/bin/bash","id":"Build and Push Container Image: Backend","name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-10-07T17:56:08.614390837Z","startTime":"2022-10-07T17:56:08.610302991Z"},"status":"SUCCESS","timing":{"endTime":"2022-10-07T17:57:15.136042514Z","startTime":"2022-10-07T17:56:08.610302991Z"}}],"substitutions":{"_BACKEND_IMAGE":"us-central1-docker.pkg.dev/damith-sds/containers/java-guestbook-backend:quickstart"}},"definedInMaterial":"-1","type":"https://cloudbuild.googleapis.com/CloudBuildSteps@v0.1"}},"predicateType":"https://slsa.dev/provenance/v0.1","slsaProvenance":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3"},"materials":[{"digest":{"md5":"6e9c2c03099262d534519d106fe04b08"},"uri":"gs://damith-sds_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz#1665165361152729"}],"metadata":{"buildFinishedOn":"2022-10-07T17:57:16.595464Z","buildInvocationId":"565456b1-0394-4c71-8c18-79f9057483df","buildStartedOn":"2022-10-07T17:56:01.814040892Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"565456b1-0394-4c71-8c18-79f9057483df","name":"projects/171719165453/locations/us-central1/builds/565456b1-0394-4c71-8c18-79f9057483df","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"requestedVerifyOption":"VERIFIED"},"sourceProvenance":{"fileHashes":{"gs://damith-sds_cloudbuild/source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz#1665165361152729":{"fileHash":[{"type":"MD5","value":"bpwsAwmSYtU0UZ0Qb+BLCA=="}]}},"resolvedStorageSource":{"bucket":"damith-sds_cloudbuild","generation":"1665165361152729","object":"source/1665165360.279777-955d1904741e4bbeb3461080299e929a.tgz"}},"steps":[{"args":["-c","docker build -t us-central1-docker.pkg.dev/damith-sds/containers/java-guestbook-backend:quickstart .\ndocker push us-central1-docker.pkg.dev/damith-sds/containers/java-guestbook-backend:quickstart\n"],"entrypoint":"/bin/bash","id":"Build and Push Container Image: Backend","name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-10-07T17:56:08.614390837Z","startTime":"2022-10-07T17:56:08.610302991Z"},"status":"SUCCESS","timing":{"endTime":"2022-10-07T17:57:15.136042514Z","startTime":"2022-10-07T17:56:08.610302991Z"}}],"substitutions":{"_BACKEND_IMAGE":"us-central1-docker.pkg.dev/damith-sds/containers/java-guestbook-backend:quickstart"}},"definedInMaterial":"-1","type":"https://cloudbuild.googleapis.com/CloudBuildSteps@v0.1"}},"subject":[{"digest":{"sha256":"9dcfacc497b61c4d2ff5708e644c060726781fae514dc8ba71c49dced675bcbe"},"name":"https://us-central1-docker.pkg.dev/damith-sds/containers/java-guestbook-backend:quickstart"}]} \ No newline at end of file diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-github.json b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-github.json new file mode 100644 index 000000000..ebd6d9c3b --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-github.json @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.1","predicate":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"},"materials":[{"uri":"https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"}],"metadata":{"buildFinishedOn":"2022-08-15T22:43:34.366498Z","buildInvocationId":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","buildStartedOn":"2022-08-15T22:43:18.700638187Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"substitutionOption":"ALLOW_LOOSE"},"sourceProvenance":{},"steps":[{"args":["build","-t","us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14","."],"name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-08-15T22:43:21.662016533Z","startTime":"2022-08-15T22:43:21.657262492Z"},"status":"SUCCESS","timing":{"endTime":"2022-08-15T22:43:27.056377441Z","startTime":"2022-08-15T22:43:21.657262492Z"}}]},"entryPoint":"cloudbuild.yaml","type":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"}},"predicateType":"https://slsa.dev/provenance/v0.1","slsaProvenance":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"},"materials":[{"uri":"https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"}],"metadata":{"buildFinishedOn":"2022-08-15T22:43:34.366498Z","buildInvocationId":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","buildStartedOn":"2022-08-15T22:43:18.700638187Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"substitutionOption":"ALLOW_LOOSE"},"sourceProvenance":{},"steps":[{"args":["build","-t","us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14","."],"name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-08-15T22:43:21.662016533Z","startTime":"2022-08-15T22:43:21.657262492Z"},"status":"SUCCESS","timing":{"endTime":"2022-08-15T22:43:27.056377441Z","startTime":"2022-08-15T22:43:21.657262492Z"}}]},"entryPoint":"cloudbuild.yaml","type":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"}},"subject":[{"digest":{"sha256":"1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd"},"name":"https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14"}]} \ No newline at end of file diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-invalid-intotoheader.json b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-invalid-intotoheader.json new file mode 100644 index 000000000..b00fbed1f --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-invalid-intotoheader.json @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.2","predicate":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"},"materials":[{"uri":"https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"}],"metadata":{"buildFinishedOn":"2022-08-15T22:43:34.366498Z","buildInvocationId":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","buildStartedOn":"2022-08-15T22:43:18.700638187Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"substitutionOption":"ALLOW_LOOSE"},"sourceProvenance":{},"steps":[{"args":["build","-t","us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14","."],"name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-08-15T22:43:21.662016533Z","startTime":"2022-08-15T22:43:21.657262492Z"},"status":"SUCCESS","timing":{"endTime":"2022-08-15T22:43:27.056377441Z","startTime":"2022-08-15T22:43:21.657262492Z"}}]},"entryPoint":"cloudbuild.yaml","type":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"}},"predicateType":"https://slsa.dev/provenance/v0.1","slsaProvenance":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"},"materials":[{"uri":"https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"}],"metadata":{"buildFinishedOn":"2022-08-15T22:43:34.366498Z","buildInvocationId":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","buildStartedOn":"2022-08-15T22:43:18.700638187Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"substitutionOption":"ALLOW_LOOSE"},"sourceProvenance":{},"steps":[{"args":["build","-t","us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14","."],"name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-08-15T22:43:21.662016533Z","startTime":"2022-08-15T22:43:21.657262492Z"},"status":"SUCCESS","timing":{"endTime":"2022-08-15T22:43:27.056377441Z","startTime":"2022-08-15T22:43:21.657262492Z"}}]},"entryPoint":"cloudbuild.yaml","type":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"}},"subject":[{"digest":{"sha256":"1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd"},"name":"https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14"}]} \ No newline at end of file diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-invalid-slsaheader.json b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-invalid-slsaheader.json new file mode 100644 index 000000000..5b56bcb08 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/gcloud-container-invalid-slsaheader.json @@ -0,0 +1 @@ +{"_type":"https://in-toto.io/Statement/v0.1","predicate":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"},"materials":[{"uri":"https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"}],"metadata":{"buildFinishedOn":"2022-08-15T22:43:34.366498Z","buildInvocationId":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","buildStartedOn":"2022-08-15T22:43:18.700638187Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"substitutionOption":"ALLOW_LOOSE"},"sourceProvenance":{},"steps":[{"args":["build","-t","us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14","."],"name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-08-15T22:43:21.662016533Z","startTime":"2022-08-15T22:43:21.657262492Z"},"status":"SUCCESS","timing":{"endTime":"2022-08-15T22:43:27.056377441Z","startTime":"2022-08-15T22:43:21.657262492Z"}}]},"entryPoint":"cloudbuild.yaml","type":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"}},"predicateType":"https://slsa.dev/provenance/v0.2","slsaProvenance":{"builder":{"id":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"},"materials":[{"uri":"https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"}],"metadata":{"buildFinishedOn":"2022-08-15T22:43:34.366498Z","buildInvocationId":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","buildStartedOn":"2022-08-15T22:43:18.700638187Z"},"recipe":{"arguments":{"@type":"type.googleapis.com/google.devtools.cloudbuild.v1.Build","id":"b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b","options":{"dynamicSubstitutions":true,"logging":"LEGACY","pool":{},"substitutionOption":"ALLOW_LOOSE"},"sourceProvenance":{},"steps":[{"args":["build","-t","us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14","."],"name":"gcr.io/cloud-builders/docker","pullTiming":{"endTime":"2022-08-15T22:43:21.662016533Z","startTime":"2022-08-15T22:43:21.657262492Z"},"status":"SUCCESS","timing":{"endTime":"2022-08-15T22:43:27.056377441Z","startTime":"2022-08-15T22:43:21.657262492Z"}}]},"entryPoint":"cloudbuild.yaml","type":"https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2"}},"subject":[{"digest":{"sha256":"1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd"},"name":"https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14"}]} \ No newline at end of file diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/substitution-int.json b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/substitution-int.json new file mode 100644 index 000000000..fe6edaa25 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/substitution-int.json @@ -0,0 +1,10 @@ +{ + "COMMIT_SHA": "01ce393d04eb6df2a7b2b3e95d4126e687afb7ae", + "REF_NAME": "v39", + "REPO_NAME": "gcb-tests", + "REVISION_ID": "01ce393d04eb6df2a7b2b3e95d4126e687afb7ae", + "SHORT_SHA": "01ce393", + "TAG_NAME": 123, + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "Tag" +} \ No newline at end of file diff --git a/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/substitution.json b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/substitution.json new file mode 100644 index 000000000..11ec4ec90 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v0.1/testdata/substitution.json @@ -0,0 +1,10 @@ +{ + "COMMIT_SHA": "01ce393d04eb6df2a7b2b3e95d4126e687afb7ae", + "REF_NAME": "v33.0.4", + "REPO_NAME": "gcb-tests", + "REVISION_ID": "01ce393d04eb6df2a7b2b3e95d4126e687afb7ae", + "SHORT_SHA": "01ce393", + "TAG_NAME": "v33.0.4", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "Tag" +} \ No newline at end of file diff --git a/verifiers/internal/gcb/slsaprovenance/v1.0/provenance.go b/verifiers/internal/gcb/slsaprovenance/v1.0/provenance.go new file mode 100644 index 000000000..52c81a9e9 --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v1.0/provenance.go @@ -0,0 +1,198 @@ +package v10 + +// NOTE: Copy of github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1 +// This holds an internal copy of in-toto-golang's structs for +// SLSA predicates to handle GCB's incompatibility with the +// published specification. +// Specifically, GCB provenance currently produces a string for +// ProvenancePredicate.Recipe.DefinedInMaterial rather than the SLSA compliant +// signed integer. Because of this, we comment out the field and do not unmarshal +// this in the Go struct. When comparing the envelope with the human-readable +// content, this field is ignored! +// GCB will later add compliant fields in the signed envelope, but NOT in the +// human-readable component. Either disregard comparison between human-readable +// summary and the signed envelope, or use this struct in comparison. + +import ( + "encoding/json" + "fmt" + + intoto "github.com/in-toto/in-toto-golang/in_toto" + intotov1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/iface" +) + +const ( + // PredicateSLSAProvenance represents a build provenance for an artifact. + PredicateSLSAProvenance = intotov1.PredicateSLSAProvenance + BuildType = "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1" +) + +var BuilderIDs = []string{ + "https://cloudbuild.googleapis.com/GoogleHostedWorker", +} + +// ProvenancePredicate is the provenance predicate definition. +type ProvenancePredicate intotov1.ProvenancePredicate + +// GCBIntotoTextStatement if for code compatibility with v0.1 code. +type GCBIntotoTextStatement Provenance + +// Provenance is GCB provenance. +type Provenance struct { + intoto.StatementHeader + Pred ProvenancePredicate `json:"predicate"` +} + +func New(payload []byte) (iface.Provenance, error) { + var provenance Provenance + if err := json.Unmarshal(payload, &provenance); err != nil { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + } + + if err := common.ValidateStatementTypes(provenance.StatementHeader.Type, provenance.StatementHeader.PredicateType, PredicateSLSAProvenance); err != nil { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + } + return &provenance, nil +} + +func (p *Provenance) Predicate() (interface{}, error) { + return p.Pred, nil +} + +func (p *Provenance) PredicateType() (string, error) { + return p.StatementHeader.PredicateType, nil +} + +func (p *Provenance) Header() (intoto.StatementHeader, error) { + return p.StatementHeader, nil +} + +// BuilderID implements Statement.BuilderID. +func (p *Provenance) BuilderID() (string, error) { + return p.Pred.RunDetails.Builder.ID, nil +} + +// BuildType implements Statement.BuildType. +func (p *Provenance) BuildType() (string, error) { + return p.Pred.BuildDefinition.BuildType, nil +} + +// GetSystemParameters implements Provenance.GetSystemParameters. +func (p *Provenance) GetSystemParameters() (map[string]any, error) { + sysParams, ok := p.Pred.BuildDefinition.InternalParameters.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: system parameters type", serrors.ErrorInvalidDssePayload) + } + + return sysParams, nil +} + +// SourceTag implements Provenance.SourceTag. +func (p *Provenance) SourceTag() (string, error) { + sysParams, err := p.GetSystemParameters() + if err != nil { + return "", err + } + subsTagName, err := getSubstitutionsField(sysParams, "TAG_NAME") + if err != nil { + return "", err + } + + extParams, err := p.externalParameters() + if err != nil { + return "", err + } + + subsTag := "refs/tags/" + subsTagName + configTag, err := configSourceField(extParams, "ref") + if err != nil { + return "", err + } + if subsTag != configTag { + return "", fmt.Errorf("%w: %q != %q", serrors.ErrorInvalidDssePayload, subsTag, configTag) + } + return subsTagName, nil +} + +func getSubstitutionsField(sysParams map[string]any, name string) (string, error) { + substitutions, ok := sysParams["systemSubstitutions"] + if !ok { + return "", fmt.Errorf("%w: substitution entry %q not found", common.ErrSubstitution, "systemSubstitutions") + } + substitutionsMap, ok := substitutions.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: no entry '%v' in substitution map", common.ErrSubstitution, "systemSubstitutions") + } + value, ok := substitutionsMap[name] + if !ok { + return "", fmt.Errorf("%w: no entry '%v' in substitution map", common.ErrSubstitution, name) + } + valueStr, ok := value.(string) + if !ok { + return "", fmt.Errorf("%w: value '%v' is not a string", common.ErrSubstitution, value) + } + return valueStr, nil +} + +// SourceBranch implements Provenance.SourceBranch. +func (p *Provenance) SourceBranch() (string, error) { + // NOTE: for the implementation, verify consistency between + // repository.ref and substitution's BRANCH. See SourceTag(). + return "", fmt.Errorf("%w: branch verification", serrors.ErrorNotSupported) +} + +func (p *Provenance) externalParameters() (map[string]any, error) { + extParams, ok := p.Pred.BuildDefinition.ExternalParameters.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: system parameters type", serrors.ErrorInvalidDssePayload) + } + return extParams, nil +} + +// SourceURI implements Provenance.SourceURI. +func (p *Provenance) SourceURI() (string, error) { + extParams, err := p.externalParameters() + if err != nil { + return "", err + } + + ref, err := configSourceField(extParams, "ref") + if err != nil { + return "", err + } + repository, err := configSourceField(extParams, "repository") + if err != nil { + return "", err + } + return fmt.Sprintf("%v@%v", repository, ref), nil +} + +func configSourceField(extParams map[string]any, field string) (string, error) { + // We use externalParameters.buildConfigSource. + buildConfigSource, ok := extParams["buildConfigSource"] + if !ok { + return "", fmt.Errorf("%w: buildConfigSource", serrors.ErrorNotPresent) + } + + configSource, ok := buildConfigSource.(map[string]any) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type buildConfigSource") + } + field, err := common.GetAsString(configSource, field) + if err != nil { + return "", err + } + return field, nil +} + +// Subjects implements Statement.Subjects. +func (p *Provenance) Subjects() ([]intoto.Subject, error) { + subj := p.StatementHeader.Subject + if len(subj) == 0 { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no subjects") + } + return subj, nil +} diff --git a/verifiers/internal/gcb/slsaprovenance/v1.0/provenance_test.go b/verifiers/internal/gcb/slsaprovenance/v1.0/provenance_test.go new file mode 100644 index 000000000..d2b9ddbea --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v1.0/provenance_test.go @@ -0,0 +1,68 @@ +package v10 + +import ( + "encoding/json" + "fmt" + "os" + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gcb/slsaprovenance/common" +) + +func Test_getSubstitutionsField(t *testing.T) { + t.Parallel() + tests := []struct { + name string + field string + path string + value string + err error + }{ + { + name: "v1.0 match branch", + path: "./testdata/internalParameters.json", + field: "BRANCH_NAME", + value: "main", + }, + { + name: "v1.0 tag not present", + path: "./testdata/internalParameters.json", + field: "TAG_NAME", + err: common.ErrSubstitution, + }, + { + name: "v1.0 match repo name", + path: "./testdata/internalParameters.json", + field: "REPO_NAME", + value: "gcb-prod-prov", + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + content, err := os.ReadFile(tt.path) + if err != nil { + panic(fmt.Errorf("os.ReadFile: %w", err)) + } + + var internalParemeters map[string]any + err = json.Unmarshal(content, &internalParemeters) + if err != nil { + panic(fmt.Errorf("os.ReadFile: %w", err)) + } + + value, err := getSubstitutionsField(internalParemeters, tt.field) + if !cmp.Equal(err, tt.err, cmpopts.EquateErrors()) { + t.Errorf(cmp.Diff(err, tt.err, cmpopts.EquateErrors())) + } + if err == nil && !cmp.Equal(value, tt.value) { + t.Errorf(cmp.Diff(value, tt.value)) + } + }) + } +} diff --git a/verifiers/internal/gcb/slsaprovenance/v1.0/testdata/internalParameters.json b/verifiers/internal/gcb/slsaprovenance/v1.0/testdata/internalParameters.json new file mode 100644 index 000000000..4cd71c88d --- /dev/null +++ b/verifiers/internal/gcb/slsaprovenance/v1.0/testdata/internalParameters.json @@ -0,0 +1,17 @@ +{ + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/gcloud-container-invalid-intotoheader.json b/verifiers/internal/gcb/testdata/gcloud-container-invalid-intotoheader.json deleted file mode 100644 index bd2a38ebb..000000000 --- a/verifiers/internal/gcb/testdata/gcloud-container-invalid-intotoheader.json +++ /dev/null @@ -1,94 +0,0 @@ -{ - "image_summary": { - "digest": "sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", - "fully_qualified_digest": "us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", - "registry": "us-west2-docker.pkg.dev", - "repository": "quickstart-docker-repo" - }, - "provenance_summary": { - "provenance": [ - { - "build": { - "intotoStatement": { - "_type": "https://in-toto.io/Statement/v0.1", - "predicateType": "https://slsa.dev/provenance/v0.1", - "slsaProvenance": { - "builder": { - "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2" - }, - "materials": [ - { - "uri": "https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e" - } - ], - "metadata": { - "buildFinishedOn": "2022-08-15T22:43:34.366498Z", - "buildInvocationId": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b", - "buildStartedOn": "2022-08-15T22:43:18.700638187Z" - }, - "recipe": { - "arguments": { - "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", - "id": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b", - "options": { - "dynamicSubstitutions": true, - "logging": "LEGACY", - "pool": {}, - "substitutionOption": "ALLOW_LOOSE" - }, - "sourceProvenance": {}, - "steps": [ - { - "args": [ - "build", - "-t", - "us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14", - "." - ], - "name": "gcr.io/cloud-builders/docker", - "pullTiming": { - "endTime": "2022-08-15T22:43:21.662016533Z", - "startTime": "2022-08-15T22:43:21.657262492Z" - }, - "status": "SUCCESS", - "timing": { - "endTime": "2022-08-15T22:43:27.056377441Z", - "startTime": "2022-08-15T22:43:21.657262492Z" - } - } - ] - }, - "entryPoint": "cloudbuild.yaml", - "type": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2" - } - }, - "subject": [ - { - "digest": { - "sha256": "1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd" - }, - "name": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14" - } - ] - } - }, - "createTime": "2022-08-15T22:43:35.649016Z", - "envelope": { - "payload": "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjIiLAogICJwcmVkaWNhdGUiOiB7CiAgICAiYnVpbGRlciI6IHsKICAgICAgImlkIjogImh0dHBzOi8vY2xvdWRidWlsZC5nb29nbGVhcGlzLmNvbS9Hb29nbGVIb3N0ZWRXb3JrZXJAdjAuMiIKICAgIH0sCiAgICAibWF0ZXJpYWxzIjogWwogICAgICB7CiAgICAgICAgInVyaSI6ICJodHRwczovL2dpdGh1Yi5jb20vbGF1cmVudHNpbW9uL2djYi10ZXN0cy9jb21taXQvZmJiYjk4NzY1ZTg1YWQ0NjQzMDJkYzU5Nzc5NjgxMDRkMzZlNDU1ZSIKICAgICAgfQogICAgXSwKICAgICJtZXRhZGF0YSI6IHsKICAgICAgImJ1aWxkRmluaXNoZWRPbiI6ICIyMDIyLTA4LTE1VDIyOjQzOjM0LjM2NjQ5OFoiLAogICAgICAiYnVpbGRJbnZvY2F0aW9uSWQiOiAiYjZlMDUyYTctNWFhNC00MWJmLWE1NmItOWJjNGU0ZjMwNThiIiwKICAgICAgImJ1aWxkU3RhcnRlZE9uIjogIjIwMjItMDgtMTVUMjI6NDM6MTguNzAwNjM4MTg3WiIKICAgIH0sCiAgICAicmVjaXBlIjogewogICAgICAiYXJndW1lbnRzIjogewogICAgICAgICJAdHlwZSI6ICJ0eXBlLmdvb2dsZWFwaXMuY29tL2dvb2dsZS5kZXZ0b29scy5jbG91ZGJ1aWxkLnYxLkJ1aWxkIiwKICAgICAgICAiaWQiOiAiYjZlMDUyYTctNWFhNC00MWJmLWE1NmItOWJjNGU0ZjMwNThiIiwKICAgICAgICAib3B0aW9ucyI6IHsKICAgICAgICAgICJkeW5hbWljU3Vic3RpdHV0aW9ucyI6IHRydWUsCiAgICAgICAgICAibG9nZ2luZyI6ICJMRUdBQ1kiLAogICAgICAgICAgInBvb2wiOiB7fSwKICAgICAgICAgICJzdWJzdGl0dXRpb25PcHRpb24iOiAiQUxMT1dfTE9PU0UiCiAgICAgICAgfSwKICAgICAgICAic291cmNlUHJvdmVuYW5jZSI6IHt9LAogICAgICAgICJzdGVwcyI6IFsKICAgICAgICAgIHsKICAgICAgICAgICAgImFyZ3MiOiBbCiAgICAgICAgICAgICAgImJ1aWxkIiwKICAgICAgICAgICAgICAiLXQiLAogICAgICAgICAgICAgICJ1cy13ZXN0Mi1kb2NrZXIucGtnLmRldi9nb3NzdC1zY2FyZS1zYW5kYm94L3F1aWNrc3RhcnQtZG9ja2VyLXJlcG8vcXVpY2tzdGFydC1pbWFnZTp2MTQiLAogICAgICAgICAgICAgICIuIgogICAgICAgICAgICBdLAogICAgICAgICAgICAibmFtZSI6ICJnY3IuaW8vY2xvdWQtYnVpbGRlcnMvZG9ja2VyIiwKICAgICAgICAgICAgInB1bGxUaW1pbmciOiB7CiAgICAgICAgICAgICAgImVuZFRpbWUiOiAiMjAyMi0wOC0xNVQyMjo0MzoyMS42NjIwMTY1MzNaIiwKICAgICAgICAgICAgICAic3RhcnRUaW1lIjogIjIwMjItMDgtMTVUMjI6NDM6MjEuNjU3MjYyNDkyWiIKICAgICAgICAgICAgfSwKICAgICAgICAgICAgInN0YXR1cyI6ICJTVUNDRVNTIiwKICAgICAgICAgICAgInRpbWluZyI6IHsKICAgICAgICAgICAgICAiZW5kVGltZSI6ICIyMDIyLTA4LTE1VDIyOjQzOjI3LjA1NjM3NzQ0MVoiLAogICAgICAgICAgICAgICJzdGFydFRpbWUiOiAiMjAyMi0wOC0xNVQyMjo0MzoyMS42NTcyNjI0OTJaIgogICAgICAgICAgICB9CiAgICAgICAgICB9CiAgICAgICAgXQogICAgICB9LAogICAgICAiZW50cnlQb2ludCI6ICJjbG91ZGJ1aWxkLnlhbWwiLAogICAgICAidHlwZSI6ICJodHRwczovL2Nsb3VkYnVpbGQuZ29vZ2xlYXBpcy5jb20vR29vZ2xlSG9zdGVkV29ya2VyQHYwLjIiCiAgICB9CiAgfSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMSIsCiAgInNsc2FQcm92ZW5hbmNlIjogewogICAgImJ1aWxkZXIiOiB7CiAgICAgICJpZCI6ICJodHRwczovL2Nsb3VkYnVpbGQuZ29vZ2xlYXBpcy5jb20vR29vZ2xlSG9zdGVkV29ya2VyQHYwLjIiCiAgICB9LAogICAgIm1hdGVyaWFscyI6IFsKICAgICAgewogICAgICAgICJ1cmkiOiAiaHR0cHM6Ly9naXRodWIuY29tL2xhdXJlbnRzaW1vbi9nY2ItdGVzdHMvY29tbWl0L2ZiYmI5ODc2NWU4NWFkNDY0MzAyZGM1OTc3OTY4MTA0ZDM2ZTQ1NWUiCiAgICAgIH0KICAgIF0sCiAgICAibWV0YWRhdGEiOiB7CiAgICAgICJidWlsZEZpbmlzaGVkT24iOiAiMjAyMi0wOC0xNVQyMjo0MzozNC4zNjY0OThaIiwKICAgICAgImJ1aWxkSW52b2NhdGlvbklkIjogImI2ZTA1MmE3LTVhYTQtNDFiZi1hNTZiLTliYzRlNGYzMDU4YiIsCiAgICAgICJidWlsZFN0YXJ0ZWRPbiI6ICIyMDIyLTA4LTE1VDIyOjQzOjE4LjcwMDYzODE4N1oiCiAgICB9LAogICAgInJlY2lwZSI6IHsKICAgICAgImFyZ3VtZW50cyI6IHsKICAgICAgICAiQHR5cGUiOiAidHlwZS5nb29nbGVhcGlzLmNvbS9nb29nbGUuZGV2dG9vbHMuY2xvdWRidWlsZC52MS5CdWlsZCIsCiAgICAgICAgImlkIjogImI2ZTA1MmE3LTVhYTQtNDFiZi1hNTZiLTliYzRlNGYzMDU4YiIsCiAgICAgICAgIm9wdGlvbnMiOiB7CiAgICAgICAgICAiZHluYW1pY1N1YnN0aXR1dGlvbnMiOiB0cnVlLAogICAgICAgICAgImxvZ2dpbmciOiAiTEVHQUNZIiwKICAgICAgICAgICJwb29sIjoge30sCiAgICAgICAgICAic3Vic3RpdHV0aW9uT3B0aW9uIjogIkFMTE9XX0xPT1NFIgogICAgICAgIH0sCiAgICAgICAgInNvdXJjZVByb3ZlbmFuY2UiOiB7fSwKICAgICAgICAic3RlcHMiOiBbCiAgICAgICAgICB7CiAgICAgICAgICAgICJhcmdzIjogWwogICAgICAgICAgICAgICJidWlsZCIsCiAgICAgICAgICAgICAgIi10IiwKICAgICAgICAgICAgICAidXMtd2VzdDItZG9ja2VyLnBrZy5kZXYvZ29zc3Qtc2NhcmUtc2FuZGJveC9xdWlja3N0YXJ0LWRvY2tlci1yZXBvL3F1aWNrc3RhcnQtaW1hZ2U6djE0IiwKICAgICAgICAgICAgICAiLiIKICAgICAgICAgICAgXSwKICAgICAgICAgICAgIm5hbWUiOiAiZ2NyLmlvL2Nsb3VkLWJ1aWxkZXJzL2RvY2tlciIsCiAgICAgICAgICAgICJwdWxsVGltaW5nIjogewogICAgICAgICAgICAgICJlbmRUaW1lIjogIjIwMjItMDgtMTVUMjI6NDM6MjEuNjYyMDE2NTMzWiIsCiAgICAgICAgICAgICAgInN0YXJ0VGltZSI6ICIyMDIyLTA4LTE1VDIyOjQzOjIxLjY1NzI2MjQ5MloiCiAgICAgICAgICAgIH0sCiAgICAgICAgICAgICJzdGF0dXMiOiAiU1VDQ0VTUyIsCiAgICAgICAgICAgICJ0aW1pbmciOiB7CiAgICAgICAgICAgICAgImVuZFRpbWUiOiAiMjAyMi0wOC0xNVQyMjo0MzoyNy4wNTYzNzc0NDFaIiwKICAgICAgICAgICAgICAic3RhcnRUaW1lIjogIjIwMjItMDgtMTVUMjI6NDM6MjEuNjU3MjYyNDkyWiIKICAgICAgICAgICAgfQogICAgICAgICAgfQogICAgICAgIF0KICAgICAgfSwKICAgICAgImVudHJ5UG9pbnQiOiAiY2xvdWRidWlsZC55YW1sIiwKICAgICAgInR5cGUiOiAiaHR0cHM6Ly9jbG91ZGJ1aWxkLmdvb2dsZWFwaXMuY29tL0dvb2dsZUhvc3RlZFdvcmtlckB2MC4yIgogICAgfQogIH0sCiAgInN1YmplY3QiOiBbCiAgICB7CiAgICAgICJkaWdlc3QiOiB7CiAgICAgICAgInNoYTI1NiI6ICIxYTAzM2IwMDJmODllZDJiOGVhNzMzMTYyNDk3ZmI3MGYxYTQwNDlhN2Y4NjAyZDZhMzM2ODJiNGFkOTkyMWZkIgogICAgICB9LAogICAgICAibmFtZSI6ICJodHRwczovL3VzLXdlc3QyLWRvY2tlci5wa2cuZGV2L2dvc3N0LXNjYXJlLXNhbmRib3gvcXVpY2tzdGFydC1kb2NrZXItcmVwby9xdWlja3N0YXJ0LWltYWdlOnYxNCIKICAgIH0KICBdCn0K", - "payloadType": "application/vnd.in-toto+json", - "signatures": [ - { - "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", - "sig": "MEYCIQD-0xUsdkYnsmKnQL_ndEvXknLfn82zsG-hGyYUd4aYsAIhAP4KSCxN2VPNc-dvfrQIGduMUNmAiHxLttdezqdrSf3F" - } - ] - }, - "kind": "BUILD", - "name": "projects/gosst-scare-sandbox/occurrences/8ce06798-f94d-4772-a224-04e473163790", - "noteName": "projects/verified-builder/notes/intoto_b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b", - "resourceUri": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", - "updateTime": "2022-08-15T22:43:35.649016Z" - } - ] - } -} \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/gcloud-container-invalid-slsaheader.json b/verifiers/internal/gcb/testdata/gcloud-container-invalid-slsaheader.json deleted file mode 100644 index ad783b4b9..000000000 --- a/verifiers/internal/gcb/testdata/gcloud-container-invalid-slsaheader.json +++ /dev/null @@ -1,94 +0,0 @@ -{ - "image_summary": { - "digest": "sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", - "fully_qualified_digest": "us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", - "registry": "us-west2-docker.pkg.dev", - "repository": "quickstart-docker-repo" - }, - "provenance_summary": { - "provenance": [ - { - "build": { - "intotoStatement": { - "_type": "https://in-toto.io/Statement/v0.1", - "predicateType": "https://slsa.dev/provenance/v0.1", - "slsaProvenance": { - "builder": { - "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2" - }, - "materials": [ - { - "uri": "https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e" - } - ], - "metadata": { - "buildFinishedOn": "2022-08-15T22:43:34.366498Z", - "buildInvocationId": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b", - "buildStartedOn": "2022-08-15T22:43:18.700638187Z" - }, - "recipe": { - "arguments": { - "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", - "id": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b", - "options": { - "dynamicSubstitutions": true, - "logging": "LEGACY", - "pool": {}, - "substitutionOption": "ALLOW_LOOSE" - }, - "sourceProvenance": {}, - "steps": [ - { - "args": [ - "build", - "-t", - "us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14", - "." - ], - "name": "gcr.io/cloud-builders/docker", - "pullTiming": { - "endTime": "2022-08-15T22:43:21.662016533Z", - "startTime": "2022-08-15T22:43:21.657262492Z" - }, - "status": "SUCCESS", - "timing": { - "endTime": "2022-08-15T22:43:27.056377441Z", - "startTime": "2022-08-15T22:43:21.657262492Z" - } - } - ] - }, - "entryPoint": "cloudbuild.yaml", - "type": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.2" - } - }, - "subject": [ - { - "digest": { - "sha256": "1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd" - }, - "name": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14" - } - ] - } - }, - "createTime": "2022-08-15T22:43:35.649016Z", - "envelope": { - "payload": "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", - "payloadType": "application/vnd.in-toto+json", - "signatures": [ - { - "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", - "sig": "MEYCIQD-0xUsdkYnsmKnQL_ndEvXknLfn82zsG-hGyYUd4aYsAIhAP4KSCxN2VPNc-dvfrQIGduMUNmAiHxLttdezqdrSf3F" - } - ] - }, - "kind": "BUILD", - "name": "projects/gosst-scare-sandbox/occurrences/8ce06798-f94d-4772-a224-04e473163790", - "noteName": "projects/verified-builder/notes/intoto_b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b", - "resourceUri": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd", - "updateTime": "2022-08-15T22:43:35.649016Z" - } - ] - } - } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-bb.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-bb.json new file mode 100644 index 000000000..88c9175be --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-bb.json @@ -0,0 +1,219 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "push.cloudbuild.yaml", + "ref": "refs/heads/master", + "repository": "https://bbs.gcb-test.com:8443/staging-qual-us-west1-push2" + }, + "sourceToBuild": { + "dir": "/", + "ref": "refs/heads/master", + "repository": "https://bbs.gcb-test.com:8443/staging-qual-us-west1-push2" + }, + "substitutions": { + "_USER_SUB": "user-sub-value" + } + }, + "internalParameters": { + "systemSubstitutions": { + "PROJECT_ID": "12345", + "TRIGGER_BUILD_CONFIG_PATH": "push.cloudbuild.yaml" + }, + "triggerUri": "/projects/projectId/triggers/buildTriggerId" + }, + "resolvedDependencies": [ + { + "uri": "git+https://bbs.gcb-test.com:8443/staging-qual-us-west1-push2@refs/heads/master", + "digest": { + "sha1": "7e367b929999f1c8c34b4d90ed9bf1338a274102" + } + }, + { + "uri": "docker.io/library/ubuntu@sha256:6e494387c901caf429c1bf77bd92fb82b33a68c0e19f6d1aa6a3ac8d27a7049d", + "digest": { + "sha256": "6e494387c901caf429c1bf77bd92fb82b33a68c0e19f6d1aa6a3ac8d27a7049d" + } + }, + { + "uri": "gcr.io/cloud-builders/gcloud@sha256:0533d95ee0c912e70963723ecbdc60395ec2517eb4b2af402a197934871c6428", + "digest": { + "sha256": "0533d95ee0c912e70963723ecbdc60395ec2517eb4b2af402a197934871c6428" + } + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "metadata": { + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/projectId/locations/us-west1/builds/buildId", + "startedOn": "1970-01-01T00:02:03Z", + "finishedOn": "1970-01-01T00:07:36Z" + }, + "byproducts": [ + {} + ] + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen:latest" + } + ] + } + }, + "createTime": "2023-08-02T16:26:46.104567Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIQDLTNYFWzD40LIK9_gb0iCS6GDTSCo4DZPLvCj9fDKwlAIgIr8NPNRAg6QTCmBJm1BjdRAA2Bz1trlTn9IZy9s3LuE=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/766c1b35-773f-41b0-ab5e-bf7f0aa297e3", + "noteName": "projects/argo-qa/notes/intoto_slsa_v1_14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-02T16:26:46.104567Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "f5ebb9038a13d099ac8732efaa3706c608b76b1f" + }, + "uri": "git+https://gitlab.com/proctorprober/khalk-slsav1" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-02T16:26:42.945317Z", + "buildInvocationId": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "buildStartedOn": "2023-08-02T16:26:36.121285869Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "name": "projects/265426041527/locations/us-west1/builds/14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-02T16:26:39.294709402Z", + "startTime": "2023-08-02T16:26:39.289815365Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-02T16:26:40.213306225Z", + "startTime": "2023-08-02T16:26:39.289815365Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "testbranch", + "COMMIT_SHA": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "REF_NAME": "testbranch", + "REPO_FULL_NAME": "proctorprober/khalk-slsav1", + "REPO_NAME": "khalk-slsav1", + "REVISION_ID": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "SHORT_SHA": "f5ebb90", + "TRIGGER_BUILD_CONFIG_PATH": "build/cloudbuild.yaml", + "TRIGGER_NAME": "khalk-gle-trigger", + "_TRIGGER_SUB": "here!" + } + }, + "entryPoint": "build/cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen:latest" + } + ] + } + }, + "createTime": "2023-08-02T16:26:44.890980Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEQCIAfHx9D98m2MwAkS_0Fq6ZLzHq6hI618tfh4XoF2-yx2AiAYKnKXwRKY3xHvcHDXU89_1VX9rEjZILAwoFT82FCeWw==" + }, + { + "keyid": "projects/argo-qa/locations/us-west1/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIB8AfLymB3pTGxhLVUFZyVQuo_rJ7m92f3pZnawA4bqwAiA-BS6TNMOt_wT3Bil4V503z19MUUt45cqOfuJPOOyCnw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/9fd0b377-b629-4f63-9bed-f386e70f82ae", + "noteName": "projects/argo-qa/notes/intoto_14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-02T16:26:44.890980Z" + } + ] + } +} \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-both-invalid-sig.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-both-invalid-sig.json new file mode 100644 index 000000000..d5305286f --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-both-invalid-sig.json @@ -0,0 +1,215 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-inline.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-inline.json new file mode 100644 index 000000000..54bafe191 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-inline.json @@ -0,0 +1,215 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } +} \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-invalid-kind.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-invalid-kind.json new file mode 100644 index 000000000..98e202718 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-invalid-kind.json @@ -0,0 +1,108 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILDN", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + } + ] + } +} \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-nogit.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-nogit.json new file mode 100644 index 000000000..a8a056506 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-nogit.json @@ -0,0 +1,215 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-nosigs.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-nosigs.json new file mode 100644 index 000000000..96895f037 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-nosigs.json @@ -0,0 +1,198 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json" + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json" + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-single-invalid-sig.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-single-invalid-sig.json new file mode 100644 index 000000000..e08e57ed3 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-single-invalid-sig.json @@ -0,0 +1,108 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoiaHR0cHM6Ly91cy1jZW50cmFsMS1kb2NrZXIucGtnLmRldi9hcmdvLWxvY2FsLWtoYWxrL2toYWxrLWRvY2tlci1hci9wcm9kLXByb3YtaW1hZ2UiLCJkaWdlc3QiOnsic2hhMjU2IjoiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyJ9fSx7Im5hbWUiOiJodHRwczovL3VzLWNlbnRyYWwxLWRvY2tlci5wa2cuZGV2L2FyZ28tbG9jYWwta2hhbGsva2hhbGstZG9ja2VyLWFyL3Byb2QtcHJvdi1pbWFnZTpsYXRlc3QiLCJkaWdlc3QiOnsic2hhMjU2IjoiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyJ9fV0sInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjEiLCJwcmVkaWNhdGUiOnsiYnVpbGREZWZpbml0aW9uIjp7ImJ1aWxkVHlwZSI6Imh0dHBzOi8vY2xvdWQuZ29vZ2xlLmNvbS9idWlsZC9nY2ItYnVpbGR0eXBlcy9nb29nbGUtd29ya2VyL3YxIiwiZXh0ZXJuYWxQYXJhbWV0ZXJzIjp7ImJ1aWxkQ29uZmlnU291cmNlIjp7InBhdGgiOiJjbG91ZGJ1aWxkLnlhbWwiLCJyZWYiOiJyZWZzL2hlYWRzL21haW4iLCJyZXBvc2l0b3J5IjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9raGFsa2llL2djYi1wcm9kLXByb3YifSwic3Vic3RpdHV0aW9ucyI6e319LCJpbnRlcm5hbFBhcmFtZXRlcnMiOnsic3lzdGVtU3Vic3RpdHV0aW9ucyI6eyJCUkFOQ0hfTkFNRSI6Im1haW4iLCJCVUlMRF9JRCI6IjljMTFkMjU1LTA0NjktNGE2YS1iN2QwLWQ1MTBjNjY5N2M1NCIsIkNPTU1JVF9TSEEiOiIyY2UzZjkwZmFjZGI1MWFlYjk1MGQ1YmM2NDFlOTgxYmU2MWZkZjQ4IiwiTE9DQVRJT04iOiJ1cy13ZXN0MiIsIlBST0pFQ1RfTlVNQkVSIjoiMjY1NDI2MDQxNTI3IiwiUkVGX05BTUUiOiJtYWluIiwiUkVQT19GVUxMX05BTUUiOiJraGFsa2llL2djYi1wcm9kLXByb3YiLCJSRVBPX05BTUUiOiJnY2ItcHJvZC1wcm92IiwiUkVWSVNJT05fSUQiOiIyY2UzZjkwZmFjZGI1MWFlYjk1MGQ1YmM2NDFlOTgxYmU2MWZkZjQ4IiwiU0hPUlRfU0hBIjoiMmNlM2Y5MCIsIlRSSUdHRVJfQlVJTERfQ09ORklHX1BBVEgiOiJjbG91ZGJ1aWxkLnlhbWwiLCJUUklHR0VSX05BTUUiOiJzYW1wbGUtdHJpZ2dlci0xIn0sInRyaWdnZXJVcmkiOiJwcm9qZWN0cy8wL2xvY2F0aW9ucy8vdHJpZ2dlcnMvMTVlNTc5NTgtMTliMy00YTUyLWEwNTItNjkwNjI0NDA4OGNlIn0sInJlc29sdmVkRGVwZW5kZW5jaWVzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL2toYWxraWUvZ2NiLXByb2QtcHJvdkByZWZzL2hlYWRzL21haW4iLCJkaWdlc3QiOnsiZ2l0Q29tbWl0IjoiMmNlM2Y5MGZhY2RiNTFhZWI5NTBkNWJjNjQxZTk4MWJlNjFmZGY0OCJ9fSx7InVyaSI6Imdjci5pby9jbG91ZC1idWlsZGVycy9kb2NrZXJAc2hhMjU2OmQwNDhhZjI1YTZmODk0NWZhNzdlM2FhNjc5ZTQ5YThmOGE4MDExZjAwNTBhYWIwMzY0MDM0ZTU4ZjQ0NWE0MzQiLCJkaWdlc3QiOnsic2hhMjU2IjoiZDA0OGFmMjVhNmY4OTQ1ZmE3N2UzYWE2NzllNDlhOGY4YTgwMTFmMDA1MGFhYjAzNjQwMzRlNThmNDQ1YTQzNCJ9fV19LCJydW5EZXRhaWxzIjp7ImJ1aWxkZXIiOnsiaWQiOiJodHRwczovL2Nsb3VkYnVpbGQuZ29vZ2xlYXBpcy5jb20vR29vZ2xlSG9zdGVkV29ya2VyIn0sIm1ldGFkYXRhIjp7Imludm9jYXRpb25JZCI6Imh0dHBzOi8vY2xvdWRidWlsZC5nb29nbGVhcGlzLmNvbS92MS9wcm9qZWN0cy9hcmdvLWxvY2FsLWtoYWxrL2xvY2F0aW9ucy91cy13ZXN0Mi9idWlsZHMvOWMxMWQyNTUtMDQ2OS00YTZhLWI3ZDAtZDUxMGM2Njk3YzU0Iiwic3RhcnRlZE9uIjoiMjAyMy0wOC0wOFQxODo0MDoyMS4wMTYxNDA1MDVaIiwiZmluaXNoZWRPbiI6IjIwMjMtMDgtMDhUMTg6NDA6MjkuMDU1MDM0WiJ9LCJieXByb2R1Y3RzIjpbe31dfX18", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-single.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-single.json new file mode 100644 index 000000000..7102e4088 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-single.json @@ -0,0 +1,108 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + } + ] + } +} \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-sourcediff.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-sourcediff.json new file mode 100644 index 000000000..b2ec4c657 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-sourcediff.json @@ -0,0 +1,215 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov-different" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-tag.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-tag.json new file mode 100644 index 000000000..46199c77c --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-tag.json @@ -0,0 +1,216 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/tags/v33.0.4", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "TAG_NAME": "v33.0.4", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YxIiwKICAicHJlZGljYXRlIjogewogICAgImJ1aWxkRGVmaW5pdGlvbiI6IHsKICAgICAgImJ1aWxkVHlwZSI6ICJodHRwczovL2Nsb3VkLmdvb2dsZS5jb20vYnVpbGQvZ2NiLWJ1aWxkdHlwZXMvZ29vZ2xlLXdvcmtlci92MSIsCiAgICAgICJleHRlcm5hbFBhcmFtZXRlcnMiOiB7CiAgICAgICAgImJ1aWxkQ29uZmlnU291cmNlIjogewogICAgICAgICAgInBhdGgiOiAiY2xvdWRidWlsZC55YW1sIiwKICAgICAgICAgICJyZWYiOiAicmVmcy90YWdzL3YzMy4wLjQiLAogICAgICAgICAgInJlcG9zaXRvcnkiOiAiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9raGFsa2llL2djYi1wcm9kLXByb3YiCiAgICAgICAgfSwKICAgICAgICAic3Vic3RpdHV0aW9ucyI6IHt9CiAgICAgIH0sCiAgICAgICJpbnRlcm5hbFBhcmFtZXRlcnMiOiB7CiAgICAgICAgInN5c3RlbVN1YnN0aXR1dGlvbnMiOiB7CiAgICAgICAgICAiQlJBTkNIX05BTUUiOiAibWFpbiIsCiAgICAgICAgICAiVEFHX05BTUUiOiAidjMzLjAuNCIsCiAgICAgICAgICAiQlVJTERfSUQiOiAiOWMxMWQyNTUtMDQ2OS00YTZhLWI3ZDAtZDUxMGM2Njk3YzU0IiwKICAgICAgICAgICJDT01NSVRfU0hBIjogIjJjZTNmOTBmYWNkYjUxYWViOTUwZDViYzY0MWU5ODFiZTYxZmRmNDgiLAogICAgICAgICAgIkxPQ0FUSU9OIjogInVzLXdlc3QyIiwKICAgICAgICAgICJQUk9KRUNUX05VTUJFUiI6ICIyNjU0MjYwNDE1MjciLAogICAgICAgICAgIlJFRl9OQU1FIjogIm1haW4iLAogICAgICAgICAgIlJFUE9fRlVMTF9OQU1FIjogImtoYWxraWUvZ2NiLXByb2QtcHJvdiIsCiAgICAgICAgICAiUkVQT19OQU1FIjogImdjYi1wcm9kLXByb3YiLAogICAgICAgICAgIlJFVklTSU9OX0lEIjogIjJjZTNmOTBmYWNkYjUxYWViOTUwZDViYzY0MWU5ODFiZTYxZmRmNDgiLAogICAgICAgICAgIlNIT1JUX1NIQSI6ICIyY2UzZjkwIiwKICAgICAgICAgICJUUklHR0VSX0JVSUxEX0NPTkZJR19QQVRIIjogImNsb3VkYnVpbGQueWFtbCIsCiAgICAgICAgICAiVFJJR0dFUl9OQU1FIjogInNhbXBsZS10cmlnZ2VyLTEiCiAgICAgICAgfSwKICAgICAgICAidHJpZ2dlclVyaSI6ICJwcm9qZWN0cy8wL2xvY2F0aW9ucy8vdHJpZ2dlcnMvMTVlNTc5NTgtMTliMy00YTUyLWEwNTItNjkwNjI0NDA4OGNlIgogICAgICB9LAogICAgICAicmVzb2x2ZWREZXBlbmRlbmNpZXMiOiBbCiAgICAgICAgewogICAgICAgICAgImRpZ2VzdCI6IHsKICAgICAgICAgICAgImdpdENvbW1pdCI6ICIyY2UzZjkwZmFjZGI1MWFlYjk1MGQ1YmM2NDFlOTgxYmU2MWZkZjQ4IgogICAgICAgICAgfSwKICAgICAgICAgICJ1cmkiOiAiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9raGFsa2llL2djYi1wcm9kLXByb3ZAcmVmcy9oZWFkcy9tYWluIgogICAgICAgIH0sCiAgICAgICAgewogICAgICAgICAgImRpZ2VzdCI6IHsKICAgICAgICAgICAgInNoYTI1NiI6ICJkMDQ4YWYyNWE2Zjg5NDVmYTc3ZTNhYTY3OWU0OWE4ZjhhODAxMWYwMDUwYWFiMDM2NDAzNGU1OGY0NDVhNDM0IgogICAgICAgICAgfSwKICAgICAgICAgICJ1cmkiOiAiZ2NyLmlvL2Nsb3VkLWJ1aWxkZXJzL2RvY2tlckBzaGEyNTY6ZDA0OGFmMjVhNmY4OTQ1ZmE3N2UzYWE2NzllNDlhOGY4YTgwMTFmMDA1MGFhYjAzNjQwMzRlNThmNDQ1YTQzNCIKICAgICAgICB9CiAgICAgIF0KICAgIH0sCiAgICAicnVuRGV0YWlscyI6IHsKICAgICAgImJ1aWxkZXIiOiB7CiAgICAgICAgImlkIjogImh0dHBzOi8vY2xvdWRidWlsZC5nb29nbGVhcGlzLmNvbS9Hb29nbGVIb3N0ZWRXb3JrZXIiCiAgICAgIH0sCiAgICAgICJieXByb2R1Y3RzIjogWwogICAgICAgIHt9CiAgICAgIF0sCiAgICAgICJtZXRhZGF0YSI6IHsKICAgICAgICAiZmluaXNoZWRPbiI6ICIyMDIzLTA4LTA4VDE4OjQwOjI5LjA1NTAzNFoiLAogICAgICAgICJpbnZvY2F0aW9uSWQiOiAiaHR0cHM6Ly9jbG91ZGJ1aWxkLmdvb2dsZWFwaXMuY29tL3YxL3Byb2plY3RzL2FyZ28tbG9jYWwta2hhbGsvbG9jYXRpb25zL3VzLXdlc3QyL2J1aWxkcy85YzExZDI1NS0wNDY5LTRhNmEtYjdkMC1kNTEwYzY2OTdjNTQiLAogICAgICAgICJzdGFydGVkT24iOiAiMjAyMy0wOC0wOFQxODo0MDoyMS4wMTYxNDA1MDVaIgogICAgICB9CiAgICB9CiAgfSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjEiLAogICJzdWJqZWN0IjogWwogICAgewogICAgICAiZGlnZXN0IjogewogICAgICAgICJzaGEyNTYiOiAiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyIKICAgICAgfSwKICAgICAgIm5hbWUiOiAiaHR0cHM6Ly91cy1jZW50cmFsMS1kb2NrZXIucGtnLmRldi9hcmdvLWxvY2FsLWtoYWxrL2toYWxrLWRvY2tlci1hci9wcm9kLXByb3YtaW1hZ2UiCiAgICB9LAogICAgewogICAgICAiZGlnZXN0IjogewogICAgICAgICJzaGEyNTYiOiAiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyIKICAgICAgfSwKICAgICAgIm5hbWUiOiAiaHR0cHM6Ly91cy1jZW50cmFsMS1kb2NrZXIucGtnLmRldi9hcmdvLWxvY2FsLWtoYWxrL2toYWxrLWRvY2tlci1hci9wcm9kLXByb3YtaW1hZ2U6bGF0ZXN0IgogICAgfQogIF0KfQo=", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-v0.1-valid.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-v0.1-valid.json new file mode 100644 index 000000000..a40d11be9 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-v0.1-valid.json @@ -0,0 +1,215 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoiaHR0cHM6Ly91cy1jZW50cmFsMS1kb2NrZXIucGtnLmRldi9hcmdvLWxvY2FsLWtoYWxrL2toYWxrLWRvY2tlci1hci9wcm9kLXByb3YtaW1hZ2UiLCJkaWdlc3QiOnsic2hhMjU2IjoiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyJ9fSx7Im5hbWUiOiJodHRwczovL3VzLWNlbnRyYWwxLWRvY2tlci5wa2cuZGV2L2FyZ28tbG9jYWwta2hhbGsva2hhbGstZG9ja2VyLWFyL3Byb2QtcHJvdi1pbWFnZTpsYXRlc3QiLCJkaWdlc3QiOnsic2hhMjU2IjoiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyJ9fV0sInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjEiLCJwcmVkaWNhdGUiOnsiYnVpbGREZWZpbml0aW9uIjp7ImJ1aWxkVHlwZSI6Imh0dHBzOi8vY2xvdWQuZ29vZ2xlLmNvbS9idWlsZC9nY2ItYnVpbGR0eXBlcy9nb29nbGUtd29ya2VyL3YxIiwiZXh0ZXJuYWxQYXJhbWV0ZXJzIjp7ImJ1aWxkQ29uZmlnU291cmNlIjp7InBhdGgiOiJjbG91ZGJ1aWxkLnlhbWwiLCJyZWYiOiJyZWZzL2hlYWRzL21haW4iLCJyZXBvc2l0b3J5IjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9raGFsa2llL2djYi1wcm9kLXByb3YifSwic3Vic3RpdHV0aW9ucyI6e319LCJpbnRlcm5hbFBhcmFtZXRlcnMiOnsic3lzdGVtU3Vic3RpdHV0aW9ucyI6eyJCUkFOQ0hfTkFNRSI6Im1haW4iLCJCVUlMRF9JRCI6IjljMTFkMjU1LTA0NjktNGE2YS1iN2QwLWQ1MTBjNjY5N2M1NCIsIkNPTU1JVF9TSEEiOiIyY2UzZjkwZmFjZGI1MWFlYjk1MGQ1YmM2NDFlOTgxYmU2MWZkZjQ4IiwiTE9DQVRJT04iOiJ1cy13ZXN0MiIsIlBST0pFQ1RfTlVNQkVSIjoiMjY1NDI2MDQxNTI3IiwiUkVGX05BTUUiOiJtYWluIiwiUkVQT19GVUxMX05BTUUiOiJraGFsa2llL2djYi1wcm9kLXByb3YiLCJSRVBPX05BTUUiOiJnY2ItcHJvZC1wcm92IiwiUkVWSVNJT05fSUQiOiIyY2UzZjkwZmFjZGI1MWFlYjk1MGQ1YmM2NDFlOTgxYmU2MWZkZjQ4IiwiU0hPUlRfU0hBIjoiMmNlM2Y5MCIsIlRSSUdHRVJfQlVJTERfQ09ORklHX1BBVEgiOiJjbG91ZGJ1aWxkLnlhbWwiLCJUUklHR0VSX05BTUUiOiJzYW1wbGUtdHJpZ2dlci0xIn0sInRyaWdnZXJVcmkiOiJwcm9qZWN0cy8wL2xvY2F0aW9ucy8vdHJpZ2dlcnMvMTVlNTc5NTgtMTliMy00YTUyLWEwNTItNjkwNjI0NDA4OGNlIn0sInJlc29sdmVkRGVwZW5kZW5jaWVzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL2toYWxraWUvZ2NiLXByb2QtcHJvdkByZWZzL2hlYWRzL21haW4iLCJkaWdlc3QiOnsiZ2l0Q29tbWl0IjoiMmNlM2Y5MGZhY2RiNTFhZWI5NTBkNWJjNjQxZTk4MWJlNjFmZGY0OCJ9fSx7InVyaSI6Imdjci5pby9jbG91ZC1idWlsZGVycy9kb2NrZXJAc2hhMjU2OmQwNDhhZjI1YTZmODk0NWZhNzdlM2FhNjc5ZTQ5YThmOGE4MDExZjAwNTBhYWIwMzY0MDM0ZTU4ZjQ0NWE0MzQiLCJkaWdlc3QiOnsic2hhMjU2IjoiZDA0OGFmMjVhNmY4OTQ1ZmE3N2UzYWE2NzllNDlhOGY4YTgwMTFmMDA1MGFhYjAzNjQwMzRlNThmNDQ1YTQzNCJ9fV19LCJydW5EZXRhaWxzIjp7ImJ1aWxkZXIiOnsiaWQiOiJodHRwczovL2Nsb3VkYnVpbGQuZ29vZ2xlYXBpcy5jb20vR29vZ2xlSG9zdGVkV29ya2VyIn0sIm1ldGFkYXRhIjp7Imludm9jYXRpb25JZCI6Imh0dHBzOi8vY2xvdWRidWlsZC5nb29nbGVhcGlzLmNvbS92MS9wcm9qZWN0cy9hcmdvLWxvY2FsLWtoYWxrL2xvY2F0aW9ucy91cy13ZXN0Mi9idWlsZHMvOWMxMWQyNTUtMDQ2OS00YTZhLWI3ZDAtZDUxMGM2Njk3YzU0Iiwic3RhcnRlZE9uIjoiMjAyMy0wOC0wOFQxODo0MDoyMS4wMTYxNDA1MDVaIiwiZmluaXNoZWRPbiI6IjIwMjMtMDgtMDhUMTg6NDA6MjkuMDU1MDM0WiJ9LCJieXByb2R1Y3RzIjpbe31dfX18", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-v1.0-valid.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-v1.0-valid.json new file mode 100644 index 000000000..896df706b --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github-v1.0-valid.json @@ -0,0 +1,215 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoiaHR0cHM6Ly91cy1jZW50cmFsMS1kb2NrZXIucGtnLmRldi9hcmdvLWxvY2FsLWtoYWxrL2toYWxrLWRvY2tlci1hci9wcm9kLXByb3YtaW1hZ2UiLCJkaWdlc3QiOnsic2hhMjU2IjoiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyJ9fSx7Im5hbWUiOiJodHRwczovL3VzLWNlbnRyYWwxLWRvY2tlci5wa2cuZGV2L2FyZ28tbG9jYWwta2hhbGsva2hhbGstZG9ja2VyLWFyL3Byb2QtcHJvdi1pbWFnZTpsYXRlc3QiLCJkaWdlc3QiOnsic2hhMjU2IjoiN2U5YjZlN2JhMjg0MmM5MWNmNDlmM2UyMTRkMDRhN2E0OTZmODIxNDM1NmY0MWQ4MWE2ZTZkY2FkMTFmMTFlMyJ9fV0sInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjEiLCJwcmVkaWNhdGUiOnsiYnVpbGREZWZpbml0aW9uIjp7ImJ1aWxkVHlwZSI6Imh0dHBzOi8vY2xvdWQuZ29vZ2xlLmNvbS9idWlsZC9nY2ItYnVpbGR0eXBlcy9nb29nbGUtd29ya2VyL3YxIiwiZXh0ZXJuYWxQYXJhbWV0ZXJzIjp7ImJ1aWxkQ29uZmlnU291cmNlIjp7InBhdGgiOiJjbG91ZGJ1aWxkLnlhbWwiLCJyZWYiOiJyZWZzL2hlYWRzL21haW4iLCJyZXBvc2l0b3J5IjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9raGFsa2llL2djYi1wcm9kLXByb3YifSwic3Vic3RpdHV0aW9ucyI6e319LCJpbnRlcm5hbFBhcmFtZXRlcnMiOnsic3lzdGVtU3Vic3RpdHV0aW9ucyI6eyJCUkFOQ0hfTkFNRSI6Im1haW4iLCJCVUlMRF9JRCI6IjljMTFkMjU1LTA0NjktNGE2YS1iN2QwLWQ1MTBjNjY5N2M1NCIsIkNPTU1JVF9TSEEiOiIyY2UzZjkwZmFjZGI1MWFlYjk1MGQ1YmM2NDFlOTgxYmU2MWZkZjQ4IiwiTE9DQVRJT04iOiJ1cy13ZXN0MiIsIlBST0pFQ1RfTlVNQkVSIjoiMjY1NDI2MDQxNTI3IiwiUkVGX05BTUUiOiJtYWluIiwiUkVQT19GVUxMX05BTUUiOiJraGFsa2llL2djYi1wcm9kLXByb3YiLCJSRVBPX05BTUUiOiJnY2ItcHJvZC1wcm92IiwiUkVWSVNJT05fSUQiOiIyY2UzZjkwZmFjZGI1MWFlYjk1MGQ1YmM2NDFlOTgxYmU2MWZkZjQ4IiwiU0hPUlRfU0hBIjoiMmNlM2Y5MCIsIlRSSUdHRVJfQlVJTERfQ09ORklHX1BBVEgiOiJjbG91ZGJ1aWxkLnlhbWwiLCJUUklHR0VSX05BTUUiOiJzYW1wbGUtdHJpZ2dlci0xIn0sInRyaWdnZXJVcmkiOiJwcm9qZWN0cy8wL2xvY2F0aW9ucy8vdHJpZ2dlcnMvMTVlNTc5NTgtMTliMy00YTUyLWEwNTItNjkwNjI0NDA4OGNlIn0sInJlc29sdmVkRGVwZW5kZW5jaWVzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL2toYWxraWUvZ2NiLXByb2QtcHJvdkByZWZzL2hlYWRzL21haW4iLCJkaWdlc3QiOnsiZ2l0Q29tbWl0IjoiMmNlM2Y5MGZhY2RiNTFhZWI5NTBkNWJjNjQxZTk4MWJlNjFmZGY0OCJ9fSx7InVyaSI6Imdjci5pby9jbG91ZC1idWlsZGVycy9kb2NrZXJAc2hhMjU2OmQwNDhhZjI1YTZmODk0NWZhNzdlM2FhNjc5ZTQ5YThmOGE4MDExZjAwNTBhYWIwMzY0MDM0ZTU4ZjQ0NWE0MzQiLCJkaWdlc3QiOnsic2hhMjU2IjoiZDA0OGFmMjVhNmY4OTQ1ZmE3N2UzYWE2NzllNDlhOGY4YTgwMTFmMDA1MGFhYjAzNjQwMzRlNThmNDQ1YTQzNCJ9fV19LCJydW5EZXRhaWxzIjp7ImJ1aWxkZXIiOnsiaWQiOiJodHRwczovL2Nsb3VkYnVpbGQuZ29vZ2xlYXBpcy5jb20vR29vZ2xlSG9zdGVkV29ya2VyIn0sIm1ldGFkYXRhIjp7Imludm9jYXRpb25JZCI6Imh0dHBzOi8vY2xvdWRidWlsZC5nb29nbGVhcGlzLmNvbS92MS9wcm9qZWN0cy9hcmdvLWxvY2FsLWtoYWxrL2xvY2F0aW9ucy91cy13ZXN0Mi9idWlsZHMvOWMxMWQyNTUtMDQ2OS00YTZhLWI3ZDAtZDUxMGM2Njk3YzU0Iiwic3RhcnRlZE9uIjoiMjAyMy0wOC0wOFQxODo0MDoyMS4wMTYxNDA1MDVaIiwiZmluaXNoZWRPbiI6IjIwMjMtMDgtMDhUMTg6NDA6MjkuMDU1MDM0WiJ9LCJieXByb2R1Y3RzIjpbe31dfX19", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } +} \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github.json new file mode 100644 index 000000000..7ec595004 --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-github.json @@ -0,0 +1,215 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "cloudbuild.yaml", + "ref": "refs/heads/main", + "repository": "git+https://github.com/khalkie/gcb-prod-prov" + }, + "substitutions": {} + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "main", + "BUILD_ID": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "LOCATION": "us-west2", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + }, + "triggerUri": "projects/0/locations//triggers/15e57958-19b3-4a52-a052-6906244088ce" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov@refs/heads/main" + }, + { + "digest": { + "sha256": "d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:d048af25a6f8945fa77e3aa679e49a8f8a8011f0050aab0364034e58f445a434" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-08T18:40:29.055034Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "startedOn": "2023-08-08T18:40:21.016140505Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:33.411662Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIE1xMZShL8GXSotP5pyb4iHptikuEkfu28EPKGvlGsCIAiEAiruAeMD2ijQOCAYzhF5EQL7vgkmFKBCMxxJ0Md_Mhmc=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/8f992d9a-2914-411e-bf58-aa96e429a7ac", + "noteName": "projects/verified-builder/notes/intoto_slsa_v1_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:33.411662Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "2ce3f90facdb51aeb950d5bc641e981be61fdf48" + }, + "uri": "git+https://github.com/khalkie/gcb-prod-prov" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-08T18:40:29.055034Z", + "buildInvocationId": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "buildStartedOn": "2023-08-08T18:40:21.016140505Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "9c11d255-0469-4a6a-b7d0-d510c6697c54", + "name": "projects/265426041527/locations/us-west2/builds/9c11d255-0469-4a6a-b7d0-d510c6697c54", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-08T18:40:24.274431656Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-08T18:40:25.372751784Z", + "startTime": "2023-08-08T18:40:24.270177058Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "main", + "COMMIT_SHA": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "REF_NAME": "main", + "REPO_FULL_NAME": "khalkie/gcb-prod-prov", + "REPO_NAME": "gcb-prod-prov", + "REVISION_ID": "2ce3f90facdb51aeb950d5bc641e981be61fdf48", + "SHORT_SHA": "2ce3f90", + "TRIGGER_BUILD_CONFIG_PATH": "cloudbuild.yaml", + "TRIGGER_NAME": "sample-trigger-1" + } + }, + "entryPoint": "cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image:latest" + } + ] + } + }, + "createTime": "2023-08-08T18:40:31.714424Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEUCIQCk5ROibAjU6rBtqQpIRdSy3uOoxvbFKsg-lkAfP1fOJAIgUIRqNlfdl0_8gIPkxedPbZWz1v6OfHtVSwKMBiSY6TM=" + }, + { + "keyid": "projects/verified-builder/locations/us-west2/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIH2UpRGBPoEZ--6IlaPAGiCFA9Zw8-YOQnA81G8SUzuPAiBl_zZJzGFpYAh6pnvjcn0U4YupmtmAg9fOEmHbMpzZXw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/c29928e7-299b-4fbc-83d3-6214b93115a7", + "noteName": "projects/verified-builder/notes/intoto_9c11d255-0469-4a6a-b7d0-d510c6697c54", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/prod-prov-image@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-08T18:40:31.714424Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-gitlab.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-gitlab.json new file mode 100644 index 000000000..185c52b1b --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-gitlab.json @@ -0,0 +1,218 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "build/cloudbuild.yaml", + "ref": "refs/heads/testbranch", + "repository": "git+https://gitlab.com/proctorprober/khalk-slsav1" + }, + "substitutions": { + "_TRIGGER_SUB": "here!" + } + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "testbranch", + "BUILD_ID": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "COMMIT_SHA": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "LOCATION": "us-west1", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "testbranch", + "REPO_FULL_NAME": "proctorprober/khalk-slsav1", + "REPO_NAME": "khalk-slsav1", + "REVISION_ID": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "SHORT_SHA": "f5ebb90", + "TRIGGER_BUILD_CONFIG_PATH": "build/cloudbuild.yaml", + "TRIGGER_NAME": "khalk-gle-trigger" + }, + "triggerUri": "projects/265426041527/locations/us-west1/triggers/30c3972b-dae9-484c-80bf-1328bd7954c0" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "f5ebb9038a13d099ac8732efaa3706c608b76b1f" + }, + "uri": "git+https://gitlab.com/proctorprober/khalk-slsav1@refs/heads/testbranch" + }, + { + "digest": { + "sha256": "154fcd4d2d65c6a35b06b98053a0829c581e223d530be5719326f5d85d680e8d" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:154fcd4d2d65c6a35b06b98053a0829c581e223d530be5719326f5d85d680e8d" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-02T16:26:42.945317Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west1/builds/14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "startedOn": "2023-08-02T16:26:36.121285869Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen:latest" + } + ] + } + }, + "createTime": "2023-08-02T16:26:46.104567Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIQDLTNYFWzD40LIK9_gb0iCS6GDTSCo4DZPLvCj9fDKwlAIgIr8NPNRAg6QTCmBJm1BjdRAA2Bz1trlTn9IZy9s3LuE=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/766c1b35-773f-41b0-ab5e-bf7f0aa297e3", + "noteName": "projects/argo-qa/notes/intoto_slsa_v1_14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-02T16:26:46.104567Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "f5ebb9038a13d099ac8732efaa3706c608b76b1f" + }, + "uri": "git+https://gitlab.com/proctorprober/khalk-slsav1" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-02T16:26:42.945317Z", + "buildInvocationId": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "buildStartedOn": "2023-08-02T16:26:36.121285869Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "name": "projects/265426041527/locations/us-west1/builds/14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-02T16:26:39.294709402Z", + "startTime": "2023-08-02T16:26:39.289815365Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-02T16:26:40.213306225Z", + "startTime": "2023-08-02T16:26:39.289815365Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "testbranch", + "COMMIT_SHA": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "REF_NAME": "testbranch", + "REPO_FULL_NAME": "proctorprober/khalk-slsav1", + "REPO_NAME": "khalk-slsav1", + "REVISION_ID": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "SHORT_SHA": "f5ebb90", + "TRIGGER_BUILD_CONFIG_PATH": "build/cloudbuild.yaml", + "TRIGGER_NAME": "khalk-gle-trigger", + "_TRIGGER_SUB": "here!" + } + }, + "entryPoint": "build/cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen:latest" + } + ] + } + }, + "createTime": "2023-08-02T16:26:44.890980Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEQCIAfHx9D98m2MwAkS_0Fq6ZLzHq6hI618tfh4XoF2-yx2AiAYKnKXwRKY3xHvcHDXU89_1VX9rEjZILAwoFT82FCeWw==" + }, + { + "keyid": "projects/argo-qa/locations/us-west1/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIB8AfLymB3pTGxhLVUFZyVQuo_rJ7m92f3pZnawA4bqwAiA-BS6TNMOt_wT3Bil4V503z19MUUt45cqOfuJPOOyCnw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/9fd0b377-b629-4f63-9bed-f386e70f82ae", + "noteName": "projects/argo-qa/notes/intoto_14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-02T16:26:44.890980Z" + } + ] + } +} \ No newline at end of file diff --git a/verifiers/internal/gcb/testdata/v1.0-gcloud-container-gitlabent.json b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-gitlabent.json new file mode 100644 index 000000000..3de40f00c --- /dev/null +++ b/verifiers/internal/gcb/testdata/v1.0-gcloud-container-gitlabent.json @@ -0,0 +1,218 @@ +{ + "image_summary": { + "digest": "sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "fully_qualified_digest": "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "registry": "us-central1-docker.pkg.dev", + "repository": "khalk-docker-ar", + "slsa_build_level": 0 + }, + "provenance_summary": { + "provenance": [ + { + "build": { + "inTotoSlsaProvenanceV1": { + "_type": "https://in-toto.io/Statement/v1", + "predicate": { + "buildDefinition": { + "buildType": "https://cloud.google.com/build/gcb-buildtypes/google-worker/v1", + "externalParameters": { + "buildConfigSource": { + "path": "build/cloudbuild.yaml", + "ref": "refs/heads/testbranch", + "repository": "git+https://gle-us-central1.gcb-test.com/proctorprober/khalk-slsav1" + }, + "substitutions": { + "_TRIGGER_SUB": "here!" + } + }, + "internalParameters": { + "systemSubstitutions": { + "BRANCH_NAME": "testbranch", + "BUILD_ID": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "COMMIT_SHA": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "LOCATION": "us-west1", + "PROJECT_NUMBER": "265426041527", + "REF_NAME": "testbranch", + "REPO_FULL_NAME": "proctorprober/khalk-slsav1", + "REPO_NAME": "khalk-slsav1", + "REVISION_ID": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "SHORT_SHA": "f5ebb90", + "TRIGGER_BUILD_CONFIG_PATH": "build/cloudbuild.yaml", + "TRIGGER_NAME": "khalk-gle-trigger" + }, + "triggerUri": "projects/265426041527/locations/us-west1/triggers/30c3972b-dae9-484c-80bf-1328bd7954c0" + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "f5ebb9038a13d099ac8732efaa3706c608b76b1f" + }, + "uri": "git+https://gle-us-central1.gcb-test.com/proctorprober/khalk-slsav1@refs/heads/testbranch" + }, + { + "digest": { + "sha256": "154fcd4d2d65c6a35b06b98053a0829c581e223d530be5719326f5d85d680e8d" + }, + "uri": "gcr.io/cloud-builders/docker@sha256:154fcd4d2d65c6a35b06b98053a0829c581e223d530be5719326f5d85d680e8d" + } + ] + }, + "runDetails": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker" + }, + "byproducts": [ + {} + ], + "metadata": { + "finishedOn": "2023-08-02T16:26:42.945317Z", + "invocationId": "https://cloudbuild.googleapis.com/v1/projects/argo-local-khalk/locations/us-west1/builds/14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "startedOn": "2023-08-02T16:26:36.121285869Z" + } + } + }, + "predicateType": "https://slsa.dev/provenance/v1", + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen:latest" + } + ] + } + }, + "createTime": "2023-08-02T16:26:46.104567Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/google-hosted-worker/cryptoKeyVersions/1", + "sig": "MEUCIQDLTNYFWzD40LIK9_gb0iCS6GDTSCo4DZPLvCj9fDKwlAIgIr8NPNRAg6QTCmBJm1BjdRAA2Bz1trlTn9IZy9s3LuE=" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/766c1b35-773f-41b0-ab5e-bf7f0aa297e3", + "noteName": "projects/argo-qa/notes/intoto_slsa_v1_14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-02T16:26:46.104567Z" + }, + { + "build": { + "intotoStatement": { + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://slsa.dev/provenance/v0.1", + "slsaProvenance": { + "builder": { + "id": "https://cloudbuild.googleapis.com/GoogleHostedWorker@v0.3" + }, + "materials": [ + { + "digest": { + "sha1": "f5ebb9038a13d099ac8732efaa3706c608b76b1f" + }, + "uri": "git+https://gitlab.com/proctorprober/khalk-slsav1" + } + ], + "metadata": { + "buildFinishedOn": "2023-08-02T16:26:42.945317Z", + "buildInvocationId": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "buildStartedOn": "2023-08-02T16:26:36.121285869Z" + }, + "recipe": { + "arguments": { + "@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build", + "id": "14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "name": "projects/265426041527/locations/us-west1/builds/14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "options": { + "dynamicSubstitutions": true, + "logging": "LEGACY", + "pool": {}, + "requestedVerifyOption": "VERIFIED", + "substitutionOption": "ALLOW_LOOSE" + }, + "sourceProvenance": {}, + "steps": [ + { + "args": [ + "tag", + "hello-world", + "us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + ], + "name": "gcr.io/cloud-builders/docker", + "pullTiming": { + "endTime": "2023-08-02T16:26:39.294709402Z", + "startTime": "2023-08-02T16:26:39.289815365Z" + }, + "status": "SUCCESS", + "timing": { + "endTime": "2023-08-02T16:26:40.213306225Z", + "startTime": "2023-08-02T16:26:39.289815365Z" + } + } + ], + "substitutions": { + "BRANCH_NAME": "testbranch", + "COMMIT_SHA": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "REF_NAME": "testbranch", + "REPO_FULL_NAME": "proctorprober/khalk-slsav1", + "REPO_NAME": "khalk-slsav1", + "REVISION_ID": "f5ebb9038a13d099ac8732efaa3706c608b76b1f", + "SHORT_SHA": "f5ebb90", + "TRIGGER_BUILD_CONFIG_PATH": "build/cloudbuild.yaml", + "TRIGGER_NAME": "khalk-gle-trigger", + "_TRIGGER_SUB": "here!" + } + }, + "entryPoint": "build/cloudbuild.yaml", + "type": "https://cloudbuild.googleapis.com/CloudBuildYaml@v0.1" + } + }, + "subject": [ + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen" + }, + { + "digest": { + "sha256": "7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3" + }, + "name": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen:latest" + } + ] + } + }, + "createTime": "2023-08-02T16:26:44.890980Z", + "envelope": { + "payload": "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", + "payloadType": "application/vnd.in-toto+json", + "signatures": [ + { + "keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/provenanceSigner/cryptoKeyVersions/1", + "sig": "MEQCIAfHx9D98m2MwAkS_0Fq6ZLzHq6hI618tfh4XoF2-yx2AiAYKnKXwRKY3xHvcHDXU89_1VX9rEjZILAwoFT82FCeWw==" + }, + { + "keyid": "projects/argo-qa/locations/us-west1/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1", + "sig": "MEQCIB8AfLymB3pTGxhLVUFZyVQuo_rJ7m92f3pZnawA4bqwAiA-BS6TNMOt_wT3Bil4V503z19MUUt45cqOfuJPOOyCnw==" + } + ] + }, + "kind": "BUILD", + "name": "projects/argo-local-khalk/occurrences/9fd0b377-b629-4f63-9bed-f386e70f82ae", + "noteName": "projects/argo-qa/notes/intoto_14533468-fe70-4a6a-bd80-93ae6fcbc89d", + "resourceUri": "https://us-central1-docker.pkg.dev/argo-local-khalk/khalk-docker-ar/gle-2ndgen@sha256:7e9b6e7ba2842c91cf49f3e214d04a7a496f8214356f41d81a6e6dcad11f11e3", + "updateTime": "2023-08-02T16:26:44.890980Z" + } + ] + } + } \ No newline at end of file diff --git a/verifiers/internal/gcb/verifier.go b/verifiers/internal/gcb/verifier.go index 04f31e6bb..511065009 100644 --- a/verifiers/internal/gcb/verifier.go +++ b/verifiers/internal/gcb/verifier.go @@ -64,11 +64,6 @@ func (v *GCBVerifier) VerifyImage(ctx context.Context, return nil, nil, err } - // Verify intoto header. - if err := prov.VerifyIntotoHeaders(); err != nil { - return nil, nil, err - } - // Verify the builder. builderID, err := prov.VerifyBuilder(builderOpts) if err != nil { diff --git a/verifiers/internal/gha/builder.go b/verifiers/internal/gha/builder.go index 8d0fa815e..5d82bf0fb 100644 --- a/verifiers/internal/gha/builder.go +++ b/verifiers/internal/gha/builder.go @@ -4,47 +4,46 @@ import ( "crypto/x509" "encoding/asn1" "fmt" + "net/url" "strings" - "golang.org/x/mod/semver" - fulcio "github.com/sigstore/fulcio/pkg/certificate" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/options" + ghacommon "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" ) var ( - trustedBuilderRepository = "slsa-framework/slsa-github-generator" - e2eTestRepository = "slsa-framework/example-package" - certOidcIssuer = "https://token.actions.githubusercontent.com" - githubCom = "github.com/" - httpsGithubCom = "https://" + githubCom + trustedBuilderRepository = "slsa-framework/slsa-github-generator" + e2eTestRepository = "slsa-framework/example-package" + jReleaserActionRepository = "jreleaser/release-action" + certOidcIssuer = "https://token.actions.githubusercontent.com" + githubCom = "github.com/" + httpsGithubCom = "https://" + githubCom // This is used in cosign's CheckOpts for validating the certificate. We // do specific builder verification after this. certSubjectRegexp = httpsGithubCom + "*" ) var defaultArtifactTrustedReusableWorkflows = map[string]bool{ - trustedBuilderRepository + "/.github/workflows/generator_generic_slsa3.yml": true, - trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml": true, - trustedBuilderRepository + "/.github/workflows/builder_docker-based_slsa3.yml": true, + ghacommon.GenericGeneratorBuilderID: true, + ghacommon.GoBuilderID: true, + ghacommon.ContainerBasedBuilderID: true, } var defaultContainerTrustedReusableWorkflows = map[string]bool{ - trustedBuilderRepository + "/.github/workflows/generator_container_slsa3.yml": true, + ghacommon.ContainerGeneratorBuilderID: true, } -var ( - delegatorGenericReusableWorkflow = trustedBuilderRepository + "/.github/workflows/delegator_generic_slsa3.yml" - delegatorLowPermsGenericReusableWorkflow = trustedBuilderRepository + "/.github/workflows/delegator_lowperms-generic_slsa3.yml" -) - var defaultBYOBReusableWorkflows = map[string]bool{ - delegatorGenericReusableWorkflow: true, - delegatorLowPermsGenericReusableWorkflow: true, + ghacommon.GenericDelegatorBuilderID: true, + ghacommon.GenericLowPermsDelegatorBuilderID: true, } +var JReleaserRepository = httpsGithubCom + jReleaserActionRepository + // VerifyCertficateSourceRepository verifies the source repository. func VerifyCertficateSourceRepository(id *WorkflowIdentity, sourceRepo string, @@ -67,71 +66,106 @@ func VerifyCertficateSourceRepository(id *WorkflowIdentity, func VerifyBuilderIdentity(id *WorkflowIdentity, builderOpts *options.BuilderOpts, defaultBuilders map[string]bool, -) (*utils.TrustedBuilderID, error) { +) (*utils.TrustedBuilderID, bool, error) { // Issuer verification. // NOTE: this is necessary before we do any further verification. if id.Issuer != certOidcIssuer { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidOIDCIssuer, id.Issuer) + return nil, false, fmt.Errorf("%w: %q", serrors.ErrorInvalidOIDCIssuer, id.Issuer) } - // cert URI path is /org/repo/path/to/workflow@ref - workflowPath := strings.SplitN(id.SubjectWorkflowRef, "@", 2) - if len(workflowPath) < 2 { - return nil, fmt.Errorf("%w: workflow uri: %s", serrors.ErrorMalformedURI, id.SubjectWorkflowRef) + // cert URI is https://github.com/org/repo/path/to/workflow@ref + // Remove '@' from Path + workflowID := id.SubjectWorkflowName() + workflowTag := id.SubjectWorkflowRef() + + if workflowID == "" || workflowTag == "" { + return nil, false, fmt.Errorf("%w: workflow uri: %q", serrors.ErrorMalformedURI, id.SubjectWorkflow.String()) } // Verify trusted workflow. - reusableWorkflowPath := strings.Trim(workflowPath[0], "/") - reusableWorkflowTag := strings.Trim(workflowPath[1], "/") - builderID, err := verifyTrustedBuilderID(reusableWorkflowPath, reusableWorkflowTag, + builderID, byob, err := verifyTrustedBuilderID(workflowID, workflowTag, builderOpts.ExpectedID, defaultBuilders) if err != nil { - return nil, err + return nil, byob, err } // Verify the ref is a full semantic version tag. - if err := verifyTrustedBuilderRef(id, reusableWorkflowTag); err != nil { - return nil, err + if err := verifyTrustedBuilderRef(id, workflowTag); err != nil { + return nil, byob, err } - return builderID, nil + return builderID, byob, nil } // Verifies the builder ID at path against an expected builderID. // If an expected builderID is not provided, uses the defaultBuilders. -func verifyTrustedBuilderID(certPath, certTag string, expectedBuilderID *string, defaultBuilders map[string]bool) (*utils.TrustedBuilderID, error) { +func verifyTrustedBuilderID(certBuilderID, certTag string, expectedBuilderID *string, defaultTrustedBuilders map[string]bool) (*utils.TrustedBuilderID, bool, error) { var trustedBuilderID *utils.TrustedBuilderID var err error - certBuilderName := httpsGithubCom + certPath // WARNING: we don't validate the tag here, because we need to allow // refs/heads/main for e2e tests. See verifyTrustedBuilderRef(). // No builder ID provided by user: use the default trusted workflows. if expectedBuilderID == nil || *expectedBuilderID == "" { - if _, ok := defaultBuilders[certPath]; !ok { - return nil, fmt.Errorf("%w: %s got %t", serrors.ErrorUntrustedReusableWorkflow, certPath, expectedBuilderID == nil) + if _, ok := defaultTrustedBuilders[certBuilderID]; !ok { + return nil, false, fmt.Errorf("%w: %s with builderID provided: %t", serrors.ErrorUntrustedReusableWorkflow, certBuilderID, expectedBuilderID != nil) } + // Construct the builderID using the certificate's builder's name and tag. - trustedBuilderID, err = utils.TrustedBuilderIDNew(certBuilderName+"@"+certTag, true) + trustedBuilderID, err = utils.TrustedBuilderIDNew(certBuilderID+"@"+certTag, true) if err != nil { - return nil, err - } - } else { - // Verify the builderID. - // We only accept IDs on github.com. - trustedBuilderID, err = utils.TrustedBuilderIDNew(certBuilderName+"@"+certTag, true) - if err != nil { - return nil, err + return nil, false, err } - // BuilderID provided by user should match the certificate. - // Note: the certificate builderID has the form `name@refs/tags/v1.2.3`, - // so we pass `allowRef = true`. - if err := trustedBuilderID.MatchesLoose(*expectedBuilderID, true); err != nil { - return nil, fmt.Errorf("%w: %v", serrors.ErrorUntrustedReusableWorkflow, err) - } + // Check if: + // - the builder in the cert is a BYOB builder + // - the caller trusts the BYOB builder + // If both are true, we don't match the user-provided builder ID + // against the certificate. Instead that will be done by the caller. + // + // This return of the delegator builderID enables non-compulsory + // builderID feature for BYOB builders by setting byob flag to true. + return trustedBuilderID, isTrustedDelegatorBuilder(trustedBuilderID, defaultTrustedBuilders), nil + } + + // Verify the builderID. + // We only accept IDs on github.com. + trustedBuilderID, err = utils.TrustedBuilderIDNew(certBuilderID+"@"+certTag, true) + if err != nil { + return nil, false, err } - return trustedBuilderID, nil + // Check if: + // - the builder in the cert is a BYOB builder + // - the caller trusts the BYOB builder + // If both are true, we don't match the user-provided builder ID + // against the certificate. Instead that will be done by the caller. + if isTrustedDelegatorBuilder(trustedBuilderID, defaultTrustedBuilders) { + return trustedBuilderID, true, nil + } + + // Not a BYOB builder. BuilderID provided by user should match the certificate. + // Note: the certificate builderID has the form `name@refs/tags/v1.2.3`, + // so we pass `allowRef = true`. + if err := trustedBuilderID.MatchesLoose(*expectedBuilderID, true); err != nil { + return nil, false, fmt.Errorf("%w: %v", serrors.ErrorUntrustedReusableWorkflow, err) + } + + return trustedBuilderID, false, nil +} + +func isTrustedDelegatorBuilder(certBuilder *utils.TrustedBuilderID, trustedBuilders map[string]bool) bool { + for byobBuilder := range defaultBYOBReusableWorkflows { + // Check that the certificate builder is a BYOB workflow. + if err := certBuilder.MatchesLoose(byobBuilder, true); err == nil { + // We found a delegator workflow that matches the certificate identity. + // Check that the BYOB builder is trusted by the caller. + if _, ok := trustedBuilders[byobBuilder]; !ok { + return false + } + return true + } + } + return false } // Only allow `@refs/heads/main` for the builder and the e2e tests that need to work at HEAD. @@ -146,38 +180,10 @@ func verifyTrustedBuilderRef(id *WorkflowIdentity, ref string) error { return nil } - // Extract the tag. - pin, err := utils.TagFromGitHubRef(ref) - if err != nil { - return err - } - - // Tags on trusted repositories should be a valid semver with version - // core including all three parts and no build identifier. - versionCore := strings.Split(pin, "-")[0] - if !semver.IsValid(pin) || - len(strings.Split(versionCore, ".")) != 3 || - semver.Build(pin) != "" { - return fmt.Errorf("%w: %s: version tag not valid", serrors.ErrorInvalidRef, pin) - } - - return nil - } - - // Extract the pin. - pin, err := utils.TagFromGitHubRef(ref) - if err != nil { - return err + return utils.IsValidBuilderTag(ref, true) } - // Valid semver of the form vX.Y.Z with no metadata. - if !(semver.IsValid(pin) && - len(strings.Split(pin, ".")) == 3 && - semver.Prerelease(pin) == "" && - semver.Build(pin) == "") { - return fmt.Errorf("%w: %s: not of the form vX.Y.Z", serrors.ErrorInvalidRef, pin) - } - return nil + return utils.IsValidBuilderTag(ref, false) } func getExtension(cert *x509.Certificate, oid asn1.ObjectIdentifier, encoded bool) (string, error) { @@ -210,6 +216,7 @@ const ( HostedGitHub ) +// WorkflowIdentity is a identity captured from a Fulcio certificate. // See https://github.com/sigstore/fulcio/blob/main/docs/oid-info.md. type WorkflowIdentity struct { // The source repository @@ -224,7 +231,7 @@ type WorkflowIdentity struct { SourceOwnerID *string // Workflow path OIDC subject - ref of reuseable workflow or trigger workflow. - SubjectWorkflowRef string + SubjectWorkflow *url.URL // Subject commit sha1. SubjectSha1 *string // Hosted status of the subject. @@ -241,6 +248,33 @@ type WorkflowIdentity struct { Issuer string } +// SubjectWorkflowName returns the subject workflow without the git ref. +func (id *WorkflowIdentity) SubjectWorkflowName() string { + // NOTE: You should be able to copy a net.URL struct safely. + // See: https://github.com/golang/go/issues/38351 + withoutRef := *id.SubjectWorkflow + withoutRef.Path = id.SubjectWorkflowPath() + return withoutRef.String() +} + +// SubjectWorkflowPath returns the subject workflow without the server url. +func (id *WorkflowIdentity) SubjectWorkflowPath() string { + i := strings.LastIndex(id.SubjectWorkflow.Path, "@") + if i == -1 { + return id.SubjectWorkflow.Path + } + return id.SubjectWorkflow.Path[:i] +} + +// SubjectWorkflowRef returns the ref for the subject workflow. +func (id *WorkflowIdentity) SubjectWorkflowRef() string { + i := strings.LastIndex(id.SubjectWorkflow.Path, "@") + if i == -1 { + return "" + } + return id.SubjectWorkflow.Path[i+1:] +} + func getHosted(cert *x509.Certificate) (*Hosted, error) { runnerEnv, err := getExtension(cert, fulcio.OIDRunnerEnvironment, true) if err != nil { @@ -429,8 +463,7 @@ func GetWorkflowInfoFromCertificate(cert *x509.Certificate) (*WorkflowIdentity, if !strings.HasPrefix(cert.URIs[0].Path, "/") { return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidFormat, cert.URIs[0].Path) } - // Remove the starting '/'. - subjectWorkflowRef := cert.URIs[0].Path[1:] + subjectWorkflow := cert.URIs[0] var pSubjectSha1, pSourceID, pSourceRef, pSourceOwnerID, pBuildConfigPath, pRunID *string if subjectSha1 != "" { @@ -456,9 +489,9 @@ func GetWorkflowInfoFromCertificate(cert *x509.Certificate) (*WorkflowIdentity, // Issuer. Issuer: issuer, // Subject - SubjectWorkflowRef: subjectWorkflowRef, - SubjectSha1: pSubjectSha1, - SubjectHosted: subjectHosted, + SubjectWorkflow: subjectWorkflow, + SubjectSha1: pSubjectSha1, + SubjectHosted: subjectHosted, // Source. SourceRepository: sourceRepository, SourceSha1: sourceSha1, diff --git a/verifiers/internal/gha/builder_test.go b/verifiers/internal/gha/builder_test.go index b3ac030dd..8475fc599 100644 --- a/verifiers/internal/gha/builder_test.go +++ b/verifiers/internal/gha/builder_test.go @@ -13,8 +13,18 @@ import ( fulcio "github.com/sigstore/fulcio/pkg/certificate" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/options" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" ) +// Must checks the error and panics if not nil. +func Must[T any](val T, err error) T { + if err != nil { + panic(err) + } + return val +} + func Test_VerifyBuilderIdentity(t *testing.T) { t.Parallel() tests := []struct { @@ -24,15 +34,16 @@ func Test_VerifyBuilderIdentity(t *testing.T) { builderID string defaults map[string]bool err error + byob bool }{ { name: "invalid job workflow ref", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: "random/workflow/ref", - BuildTrigger: "workflow_dispatch", - Issuer: "https://token.actions.githubusercontent.com", + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse("https://github.com/random/workflow/ref")), + BuildTrigger: "workflow_dispatch", + Issuer: "https://token.actions.githubusercontent.com", }, defaults: defaultArtifactTrustedReusableWorkflows, err: serrors.ErrorMalformedURI, @@ -40,11 +51,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "untrusted job workflow ref", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: "/malicious/slsa-go/.github/workflows/builder.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: "https://token.actions.githubusercontent.com", + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse("https://github.com/malicious/slsa-go/.github/workflows/builder.yml@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: "https://token.actions.githubusercontent.com", }, defaults: defaultArtifactTrustedReusableWorkflows, err: serrors.ErrorUntrustedReusableWorkflow, @@ -52,11 +63,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "untrusted job workflow ref for general repos", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/heads/main", - BuildTrigger: "workflow_dispatch", - Issuer: "https://token.actions.githubusercontent.com", + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/heads/main")), + BuildTrigger: "workflow_dispatch", + Issuer: "https://token.actions.githubusercontent.com", }, defaults: defaultArtifactTrustedReusableWorkflows, err: serrors.ErrorInvalidRef, @@ -64,11 +75,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "untrusted cert issuer for general repos", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: "https://bad.issuer.com", + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: "https://bad.issuer.com", }, defaults: defaultArtifactTrustedReusableWorkflows, err: serrors.ErrorInvalidOIDCIssuer, @@ -76,23 +87,49 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid trusted builder without tag", workflow: &WorkflowIdentity{ - SourceRepository: trustedBuilderRepository, - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: "https://token.actions.githubusercontent.com", + SourceRepository: trustedBuilderRepository, + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: "https://token.actions.githubusercontent.com", }, defaults: defaultArtifactTrustedReusableWorkflows, builderID: "https://github.com/" + trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml", }, + { + name: "valid generic delegator builder without tag", + workflow: &WorkflowIdentity{ + SourceRepository: trustedBuilderRepository, + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GenericDelegatorBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: "https://token.actions.githubusercontent.com", + }, + defaults: defaultBYOBReusableWorkflows, + builderID: "https://github.com/" + trustedBuilderRepository + "/.github/workflows/delegator_generic_slsa3.yml", + byob: true, + }, + { + name: "valid low-perms delegator builder with short tag", + workflow: &WorkflowIdentity{ + SourceRepository: trustedBuilderRepository, + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GenericLowPermsDelegatorBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: "https://token.actions.githubusercontent.com", + }, + defaults: defaultBYOBReusableWorkflows, + builderID: "https://github.com/" + trustedBuilderRepository + "/.github/workflows/delegator_lowperms-generic_slsa3.yml@v1.2.3", + byob: true, + }, { name: "valid main ref for e2e test", workflow: &WorkflowIdentity{ - SourceRepository: e2eTestRepository, - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: e2eTestRepository, + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, defaults: defaultArtifactTrustedReusableWorkflows, builderID: "https://github.com/" + trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml", @@ -100,11 +137,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid main ref for e2e test - match builderID", workflow: &WorkflowIdentity{ - SourceRepository: e2eTestRepository, - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: e2eTestRepository, + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, buildOpts: &options.BuilderOpts{ ExpectedID: asStringPointer("https://github.com/" + trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml"), @@ -115,11 +152,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid main ref for e2e test - mismatch builderID", workflow: &WorkflowIdentity{ - SourceRepository: e2eTestRepository, - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: e2eTestRepository, + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, buildOpts: &options.BuilderOpts{ ExpectedID: asStringPointer("some-other-builderID"), @@ -130,11 +167,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid workflow identity - match builderID", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, buildOpts: &options.BuilderOpts{ ExpectedID: asStringPointer("https://github.com/" + trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml"), @@ -145,11 +182,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid workflow identity - mismatch builderID", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, buildOpts: &options.BuilderOpts{ ExpectedID: asStringPointer("some-other-builderID"), @@ -160,11 +197,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "invalid workflow identity with prerelease", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3-alpha", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3-alpha")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, err: serrors.ErrorInvalidRef, defaults: defaultArtifactTrustedReusableWorkflows, @@ -173,11 +210,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "invalid workflow identity with build", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3+123", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3+123")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, defaults: defaultArtifactTrustedReusableWorkflows, err: serrors.ErrorInvalidRef, @@ -185,11 +222,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "invalid workflow identity with metadata", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3-alpha+123", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3-alpha+123")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, defaults: defaultArtifactTrustedReusableWorkflows, err: serrors.ErrorInvalidRef, @@ -197,11 +234,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid workflow identity with fully qualified source", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, defaults: defaultArtifactTrustedReusableWorkflows, builderID: "https://github.com/" + trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml", @@ -209,11 +246,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid workflow identity with fully qualified source - no default", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, buildOpts: &options.BuilderOpts{ ExpectedID: asStringPointer("https://github.com/" + trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml"), @@ -223,11 +260,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid workflow identity with fully qualified source - match builderID", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, buildOpts: &options.BuilderOpts{ ExpectedID: asStringPointer("https://github.com/" + trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml"), @@ -238,11 +275,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid workflow identity with fully qualified source - mismatch builderID", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, buildOpts: &options.BuilderOpts{ ExpectedID: asStringPointer("some-other-builderID"), @@ -253,11 +290,11 @@ func Test_VerifyBuilderIdentity(t *testing.T) { { name: "valid workflow identity with fully qualified source - mismatch defaults", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, defaults: defaultContainerTrustedReusableWorkflows, err: serrors.ErrorUntrustedReusableWorkflow, @@ -271,9 +308,16 @@ func Test_VerifyBuilderIdentity(t *testing.T) { if opts == nil { opts = &options.BuilderOpts{} } - id, err := VerifyBuilderIdentity(tt.workflow, opts, tt.defaults) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err, cmpopts.EquateErrors())) + if tt.builderID != "" { + opts.ExpectedID = &tt.builderID + } + id, byob, err := VerifyBuilderIdentity(tt.workflow, opts, tt.defaults) + if byob != tt.byob { + t.Errorf("unexpected byob value:\n%s", cmp.Diff(tt.byob, byob)) + } + + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Errorf("unexpected error (-want +got):\n%s", diff) } if err != nil { return @@ -286,6 +330,51 @@ func Test_VerifyBuilderIdentity(t *testing.T) { } } +func Test_isTrustedDelegatorBuilder(t *testing.T) { + t.Parallel() + tests := []struct { + name string + certBuilderID string + trustedBuilderIDs map[string]bool + result bool + }{ + { + name: "match byob", + certBuilderID: common.GenericLowPermsDelegatorBuilderID + "@refs/tags/v1.6.0", + trustedBuilderIDs: map[string]bool{ + common.GenericLowPermsDelegatorBuilderID: true, + "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/some_delegator.yml": true, + }, + result: true, + }, + { + name: "match byob but not caller trusted", + certBuilderID: common.GenericLowPermsDelegatorBuilderID + "@refs/tags/v1.6.0", + trustedBuilderIDs: map[string]bool{ + "slsa-framework/slsa-github-generator/.github/workflows/some_other_delegator.yml": true, + "slsa-framework/slsa-github-generator/.github/workflows/some_delegator.yml": true, + }, + result: false, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + trustedBuilderID, err := utils.TrustedBuilderIDNew(tt.certBuilderID, true) + if err != nil { + t.Fatalf(err.Error()) + } + + res := isTrustedDelegatorBuilder(trustedBuilderID, tt.trustedBuilderIDs) + if res != tt.result { + t.Errorf(cmp.Diff(res, tt.result)) + } + }) + } +} + func Test_VerifyCertficateSourceRepository(t *testing.T) { t.Parallel() tests := []struct { @@ -297,22 +386,22 @@ func Test_VerifyCertficateSourceRepository(t *testing.T) { { name: "repo match", workflow: &WorkflowIdentity{ - SourceRepository: "asraa/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "asraa/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, source: "github.com/asraa/slsa-on-github-test", }, { name: "unexpected source for e2e test", workflow: &WorkflowIdentity{ - SourceRepository: e2eTestRepository, - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: e2eTestRepository, + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, source: "malicious/source", err: serrors.ErrorMismatchSource, @@ -320,10 +409,10 @@ func Test_VerifyCertficateSourceRepository(t *testing.T) { { name: "valid main ref for builder", workflow: &WorkflowIdentity{ - SourceRepository: trustedBuilderRepository, - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: trustedBuilderRepository, + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, source: "malicious/source", err: serrors.ErrorMismatchSource, @@ -331,11 +420,11 @@ func Test_VerifyCertficateSourceRepository(t *testing.T) { { name: "unexpected source", workflow: &WorkflowIdentity{ - SourceRepository: "malicious/slsa-on-github-test", - SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", - SubjectWorkflowRef: trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml@refs/tags/v1.2.3", - BuildTrigger: "workflow_dispatch", - Issuer: certOidcIssuer, + SourceRepository: "malicious/slsa-on-github-test", + SourceSha1: "0dfcd24824432c4ce587f79c918eef8fc2c44d7b", + SubjectWorkflow: Must(url.Parse(common.GoBuilderID + "@refs/tags/v1.2.3")), + BuildTrigger: "workflow_dispatch", + Issuer: certOidcIssuer, }, source: "asraa/slsa-on-github-test", err: serrors.ErrorMismatchSource, @@ -365,7 +454,8 @@ func Test_verifyTrustedBuilderID(t *testing.T) { path string tag string defaults map[string]bool - expected error + err error + byob bool }{ { name: "default trusted short tag", @@ -379,12 +469,50 @@ func Test_verifyTrustedBuilderID(t *testing.T) { tag: "refs/tags/v1.2.3", defaults: defaultArtifactTrustedReusableWorkflows, }, + { + name: "generic delegator workflow long tag", + path: trustedBuilderRepository + "/.github/workflows/delegator_generic_slsa3.yml", + id: asStringPointer(trustedBuilderRepository + "/.github/workflows/delegator_generic_slsa3.yml@refs/tags/v1.2.3"), + tag: "refs/tags/v1.2.3", + defaults: defaultBYOBReusableWorkflows, + byob: true, + }, + { + // This is a BYOB workflow without an id that tests non-compulsory builder-id + // feature of slsa-verifier and expects byob to be true + name: "generic delegator workflow no id", + path: trustedBuilderRepository + "/.github/workflows/delegator_generic_slsa3.yml", + // NOTE: id is nil. + id: nil, + tag: "refs/tags/v1.2.3", + defaults: defaultBYOBReusableWorkflows, + byob: true, + }, + { + name: "low perms delegator workflow short tag", + path: trustedBuilderRepository + "/.github/workflows/delegator_lowperms-generic_slsa3.yml", + id: asStringPointer(trustedBuilderRepository + "/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.2.3"), + tag: "v1.2.3", + defaults: defaultBYOBReusableWorkflows, + byob: true, + }, + { + // This is a BYOB workflow without an id that tests non-compulsory builder-id + // feature of slsa-verifier and expects byob to be true + name: "low perms delegator workflow no ID provided", + path: trustedBuilderRepository + "/.github/workflows/delegator_lowperms-generic_slsa3.yml", + // NOTE: id is nil. + id: nil, + tag: "v1.2.3", + defaults: defaultBYOBReusableWorkflows, + byob: true, + }, { name: "default mismatch against container defaults long tag", path: trustedBuilderRepository + "/.github/workflows/generator_generic_slsa3.yml", tag: "refs/tags/v1.2.3", defaults: defaultContainerTrustedReusableWorkflows, - expected: serrors.ErrorUntrustedReusableWorkflow, + err: serrors.ErrorUntrustedReusableWorkflow, }, { name: "valid ID for GitHub builder short tag", @@ -405,11 +533,11 @@ func Test_verifyTrustedBuilderID(t *testing.T) { id: asStringPointer("https://github.com/some/repo/someBuilderID@v1.2.3"), }, { - name: "valid long ID for GitHub builder short tag", - path: "some/repo/someBuilderID", - tag: "v1.2.3", - id: asStringPointer("https://github.com/some/repo/someBuilderID@refs/tags/v1.2.3"), - expected: serrors.ErrorUntrustedReusableWorkflow, + name: "valid long ID for GitHub builder short tag", + path: "some/repo/someBuilderID", + tag: "v1.2.3", + id: asStringPointer("https://github.com/some/repo/someBuilderID@refs/tags/v1.2.3"), + err: serrors.ErrorUntrustedReusableWorkflow, }, { name: "valid ID for GitHub builder long tag", @@ -430,63 +558,64 @@ func Test_verifyTrustedBuilderID(t *testing.T) { id: asStringPointer("https://github.com/some/repo/someBuilderID@v1.2.3"), }, { - name: "valid long ID for GitHub builder short tag", - path: "some/repo/someBuilderID", - tag: "v1.2.3", - id: asStringPointer("https://github.com/some/repo/someBuilderID@refs/tags/v1.2.3"), - expected: serrors.ErrorUntrustedReusableWorkflow, + name: "valid long ID for GitHub builder short tag", + path: "some/repo/someBuilderID", + tag: "v1.2.3", + id: asStringPointer("https://github.com/some/repo/someBuilderID@refs/tags/v1.2.3"), + err: serrors.ErrorUntrustedReusableWorkflow, }, { - name: "non GitHub builder ID long builder tag", - path: "some/repo/someBuilderID", - tag: "refs/tags/v1.2.3", - id: asStringPointer("https://not-github.com/some/repo/someBuilderID"), - expected: serrors.ErrorUntrustedReusableWorkflow, + name: "non GitHub builder ID long builder tag", + path: "some/repo/someBuilderID", + tag: "refs/tags/v1.2.3", + id: asStringPointer("https://not-github.com/some/repo/someBuilderID"), + err: serrors.ErrorUntrustedReusableWorkflow, }, { - name: "mismatch org GitHub short builder tag", - path: "some/repo/someBuilderID", - tag: "v1.2.3", - id: asStringPointer("https://github.com/other/repo/someBuilderID"), - expected: serrors.ErrorUntrustedReusableWorkflow, + name: "mismatch org GitHub short builder tag", + path: "some/repo/someBuilderID", + tag: "v1.2.3", + id: asStringPointer("https://github.com/other/repo/someBuilderID"), + err: serrors.ErrorUntrustedReusableWorkflow, }, { - name: "mismatch org GitHub long builder tag", - path: "some/repo/someBuilderID", - tag: "refs/tags/v1.2.3", - id: asStringPointer("https://github.com/other/repo/someBuilderID"), - expected: serrors.ErrorUntrustedReusableWorkflow, + name: "mismatch org GitHub long builder tag", + path: "some/repo/someBuilderID", + tag: "refs/tags/v1.2.3", + id: asStringPointer("https://github.com/other/repo/someBuilderID"), + err: serrors.ErrorUntrustedReusableWorkflow, }, { - name: "mismatch name GitHub long builder tag", - path: "some/repo/someBuilderID", - tag: "refs/tags/v1.2.3", - id: asStringPointer("https://github.com/some/other/someBuilderID"), - expected: serrors.ErrorUntrustedReusableWorkflow, + name: "mismatch name GitHub long builder tag", + path: "some/repo/someBuilderID", + tag: "refs/tags/v1.2.3", + id: asStringPointer("https://github.com/some/other/someBuilderID"), + err: serrors.ErrorUntrustedReusableWorkflow, }, { - name: "mismatch id GitHub long builder tag", - path: "some/repo/someBuilderID", - tag: "refs/tags/v1.2.3", - id: asStringPointer("https://github.com/some/repo/ID"), - expected: serrors.ErrorUntrustedReusableWorkflow, + name: "mismatch id GitHub long builder tag", + path: "some/repo/someBuilderID", + tag: "refs/tags/v1.2.3", + id: asStringPointer("https://github.com/some/repo/ID"), + err: serrors.ErrorUntrustedReusableWorkflow, }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() - - id, err := verifyTrustedBuilderID(tt.path, tt.tag, tt.id, tt.defaults) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected, cmpopts.EquateErrors())) + id, byob, err := verifyTrustedBuilderID(httpsGithubCom+tt.path, tt.tag, tt.id, tt.defaults) + if byob != tt.byob { + t.Errorf(cmp.Diff(byob, tt.byob)) } - if err != nil { - return + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error (-want +got):\n%s", diff) } - expectedID := "https://github.com/" + tt.path + "@" + tt.tag - if err := id.MatchesLoose(expectedID, true); err != nil { - t.Errorf("matches failed:%v", err) + if tt.err == nil { + expectedID := httpsGithubCom + tt.path + "@" + tt.tag + if err := id.MatchesLoose(expectedID, true); err != nil { + t.Errorf("matches failed:%v", err) + } } }) } @@ -767,7 +896,9 @@ func Test_GetWorkflowInfoFromCertificate(t *testing.T) { cert: x509.Certificate{ URIs: []*url.URL{ { - Path: "/" + repo + "/" + buildConfigPath, + Scheme: "https", + Host: "github.com", + Path: "/" + repo + "/" + buildConfigPath, }, }, Extensions: []pkix.Extension{ @@ -794,11 +925,11 @@ func Test_GetWorkflowInfoFromCertificate(t *testing.T) { }, }, workflow: WorkflowIdentity{ - Issuer: issuer, - SubjectWorkflowRef: repo + "/" + buildConfigPath, - SourceRepository: repo, - SourceSha1: digest, - BuildTrigger: trigger, + Issuer: issuer, + SubjectWorkflow: Must(url.Parse(httpsGithubCom + repo + "/" + buildConfigPath)), + SourceRepository: repo, + SourceSha1: digest, + BuildTrigger: trigger, }, }, { @@ -834,7 +965,9 @@ func Test_GetWorkflowInfoFromCertificate(t *testing.T) { cert: x509.Certificate{ URIs: []*url.URL{ { - Path: "/" + repo + "/" + buildConfigPath, + Scheme: "https", + Host: "github.com", + Path: "/" + repo + "/" + buildConfigPath, }, }, Extensions: []pkix.Extension{ @@ -911,18 +1044,18 @@ func Test_GetWorkflowInfoFromCertificate(t *testing.T) { }, }, workflow: WorkflowIdentity{ - Issuer: issuer, - SubjectSha1: &subjectSha1, - SubjectHosted: &hosted, - SubjectWorkflowRef: repo + "/" + buildConfigPath, - SourceRepository: repo, - SourceSha1: digest, - SourceRef: &ref, - SourceID: &sourceID, - SourceOwnerID: &sourceOwnerID, - BuildTrigger: trigger, - BuildConfigPath: &buildConfigPath, - RunID: &invocationID, + Issuer: issuer, + SubjectSha1: &subjectSha1, + SubjectHosted: &hosted, + SubjectWorkflow: Must(url.Parse(httpsGithubCom + repo + "/" + buildConfigPath)), + SourceRepository: repo, + SourceSha1: digest, + SourceRef: &ref, + SourceID: &sourceID, + SourceOwnerID: &sourceOwnerID, + BuildTrigger: trigger, + BuildConfigPath: &buildConfigPath, + RunID: &invocationID, }, }, { @@ -1004,7 +1137,9 @@ func Test_GetWorkflowInfoFromCertificate(t *testing.T) { cert: x509.Certificate{ URIs: []*url.URL{ { - Path: "/" + repo + "/" + buildConfigPath, + Scheme: "https", + Host: "github.com", + Path: "/" + repo + "/" + buildConfigPath, }, }, Extensions: []pkix.Extension{ @@ -1056,17 +1191,17 @@ func Test_GetWorkflowInfoFromCertificate(t *testing.T) { }, }, workflow: WorkflowIdentity{ - Issuer: issuer, - SubjectWorkflowRef: repo + "/" + buildConfigPath, - SourceRepository: repo, - SourceSha1: digest, - BuildTrigger: trigger, - SubjectHosted: &hosted, - SourceRef: &ref, - SourceID: &sourceID, - SourceOwnerID: &sourceOwnerID, - BuildConfigPath: &buildConfigPath, - RunID: &invocationID, + Issuer: issuer, + SubjectWorkflow: Must(url.Parse(httpsGithubCom + repo + "/" + buildConfigPath)), + SourceRepository: repo, + SourceSha1: digest, + BuildTrigger: trigger, + SubjectHosted: &hosted, + SourceRef: &ref, + SourceID: &sourceID, + SourceOwnerID: &sourceOwnerID, + BuildConfigPath: &buildConfigPath, + RunID: &invocationID, }, }, { @@ -1141,3 +1276,60 @@ func Test_GetWorkflowInfoFromCertificate(t *testing.T) { }) } } + +func TestWorkflowIdentity(t *testing.T) { + t.Parallel() + + tests := []struct { + name string + workflow WorkflowIdentity + workflowName string + workflowPath string + workflowRef string + }{ + { + name: "no ref", + workflow: WorkflowIdentity{ + SubjectWorkflow: Must(url.Parse("https://github.com/random/workflow/ref")), + }, + workflowName: "https://github.com/random/workflow/ref", + workflowPath: "/random/workflow/ref", + workflowRef: "", + }, + { + name: "with ref", + workflow: WorkflowIdentity{ + SubjectWorkflow: Must(url.Parse("https://github.com/random/workflow/ref@refs/heads/foo")), + }, + workflowName: "https://github.com/random/workflow/ref", + workflowPath: "/random/workflow/ref", + workflowRef: "refs/heads/foo", + }, + { + name: "multiple (at) symbols", + workflow: WorkflowIdentity{ + SubjectWorkflow: Must(url.Parse("https://github.com/random/work@flow/ref@refs/heads/foo")), + }, + workflowName: "https://github.com/random/work@flow/ref", + workflowPath: "/random/work@flow/ref", + workflowRef: "refs/heads/foo", + }, + } + + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + if got, want := tt.workflow.SubjectWorkflowName(), tt.workflowName; got != want { + t.Errorf("unexpected subject workflow name, got %q, want %q", got, want) + } + + if got, want := tt.workflow.SubjectWorkflowPath(), tt.workflowPath; got != want { + t.Errorf("unexpected subject workflow path, got %q, want %q", got, want) + } + + if got, want := tt.workflow.SubjectWorkflowRef(), tt.workflowRef; got != want { + t.Errorf("unexpected subject workflow ref, got %q, want %q", got, want) + } + }) + } +} diff --git a/verifiers/internal/gha/npm.go b/verifiers/internal/gha/npm.go index 2ac0f5324..1b35b7834 100644 --- a/verifiers/internal/gha/npm.go +++ b/verifiers/internal/gha/npm.go @@ -15,7 +15,9 @@ import ( intoto "github.com/in-toto/in-toto-golang/in_toto" "github.com/secure-systems-lab/go-securesystemslib/dsse" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/options" "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" ) @@ -24,13 +26,8 @@ type hosted string const ( hostedSelf hosted = "self-hosted" hostedGitHub hosted = "github-hosted" -) -const ( - publishAttestationV01 = "https://github.com/npm/attestation/tree/main/specs/publish/" - builderLegacyGitHubRunnerID = "https://github.com/actions/runner" - builderGitHubHostedRunnerID = builderLegacyGitHubRunnerID + "/" + string(hostedGitHub) - builderSelfHostedRunnerID = builderLegacyGitHubRunnerID + "/" + string(hostedSelf) + publishAttestationV01 = "https://github.com/npm/attestation/tree/main/specs/publish/" ) var errrorInvalidAttestations = errors.New("invalid npm attestations") @@ -72,6 +69,7 @@ func (b *BundleBytes) UnmarshalJSON(data []byte) error { type Npm struct { ctx context.Context root *TrustedRoot + verifiedBuilderID *utils.TrustedBuilderID verifiedProvenanceAtt *SignedAttestation verifiedPublishAtt *SignedAttestation provenanceAttestation *attestation @@ -97,8 +95,9 @@ func NpmNew(ctx context.Context, root *TrustedRoot, attestationBytes []byte) (*N return nil, err } return &Npm{ - ctx: ctx, - root: root, + ctx: ctx, + root: root, + provenanceAttestation: prov, publishAttestation: pub, }, nil @@ -114,7 +113,7 @@ func extractAttestations(attestations []attestation) (*attestation, *attestation for i := range attestations { att := attestations[i] // Provenance type verification. - if att.PredicateType == slsaprovenance.ProvenanceV02Type { + if att.PredicateType == common.ProvenanceV02Type { provenanceAttestation = &att } // Publish type verification. @@ -196,7 +195,7 @@ func (n *Npm) verifyPublishAttesttationSignature() error { func (n *Npm) verifyIntotoHeaders() error { if err := verifyIntotoTypes(n.verifiedProvenanceAtt, - slsaprovenance.ProvenanceV02Type, intoto.PayloadType, false); err != nil { + common.ProvenanceV02Type, intoto.PayloadType, false); err != nil { return err } if err := verifyIntotoTypes(n.verifiedPublishAtt, @@ -255,7 +254,7 @@ func (n *Npm) verifyPackageName(name *string) error { } // Verify subject name in provenance. - if err := verifyProvenanceSubjectName(n.verifiedProvenanceAtt, *name); err != nil { + if err := verifyProvenanceSubjectName(n.verifiedBuilderID, n.verifiedProvenanceAtt, *name); err != nil { return err } @@ -278,7 +277,7 @@ func (n *Npm) verifyPackageVersion(version *string) error { } // Verify subject version in provenance. - if err := verifyProvenanceSubjectVersion(n.verifiedProvenanceAtt, *version); err != nil { + if err := verifyProvenanceSubjectVersion(n.verifiedBuilderID, n.verifiedProvenanceAtt, *version); err != nil { return err } @@ -295,6 +294,25 @@ func (n *Npm) verifyPackageVersion(version *string) error { return nil } +func (n *Npm) verifyBuilderID( + provenanceOpts *options.ProvenanceOpts, + builderOpts *options.BuilderOpts, + defaultBuilders map[string]bool, +) (*utils.TrustedBuilderID, error) { + // Verify certificate information. + builder, err := verifyNpmEnvAndCert( + n.ProvenanceEnvelope(), + n.ProvenanceLeafCertificate(), + provenanceOpts, builderOpts, + defaultBuilders, + ) + if err != nil { + return nil, err + } + n.verifiedBuilderID = builder + return builder, err +} + func verifyPublishPredicateVersion(att *SignedAttestation, expectedVersion string) error { _, version, err := getPublishPredicateData(att) if err != nil { @@ -340,8 +358,8 @@ func getPublishPredicateData(att *SignedAttestation) (string, string, error) { return statement.Predicate.Name, statement.Predicate.Version, nil } -func verifyProvenanceSubjectVersion(att *SignedAttestation, expectedVersion string) error { - subject, err := getSubject(att) +func verifyProvenanceSubjectVersion(b *utils.TrustedBuilderID, att *SignedAttestation, expectedVersion string) error { + subject, err := getSubject(b, att) if err != nil { return err } @@ -382,15 +400,15 @@ func verifyPublishSubjectName(att *SignedAttestation, expectedName string) error return verifyName(name, expectedName) } -func verifyProvenanceSubjectName(att *SignedAttestation, expectedName string) error { - prov, err := slsaprovenance.ProvenanceFromEnvelope(att.Envelope) +func verifyProvenanceSubjectName(b *utils.TrustedBuilderID, att *SignedAttestation, expectedName string) error { + prov, err := slsaprovenance.ProvenanceFromEnvelope(b.Name(), att.Envelope) if err != nil { - return nil + return fmt.Errorf("reading provenance: %w", err) } subjects, err := prov.Subjects() if err != nil { - return fmt.Errorf("%w", serrors.ErrorInvalidDssePayload) + return fmt.Errorf("%w: %w", serrors.ErrorInvalidDssePayload, err) } if len(subjects) != 1 { return fmt.Errorf("%w: expected 1 subject, got %v", serrors.ErrorInvalidDssePayload, len(subjects)) @@ -447,8 +465,8 @@ func getPackageNameAndVersion(name string) (string, string, error) { return pkgname, pkgtag, nil } -func getSubject(att *SignedAttestation) (string, error) { - prov, err := slsaprovenance.ProvenanceFromEnvelope(att.Envelope) +func getSubject(b *utils.TrustedBuilderID, att *SignedAttestation) (string, error) { + prov, err := slsaprovenance.ProvenanceFromEnvelope(b.Name(), att.Envelope) if err != nil { return "", err } diff --git a/verifiers/internal/gha/npm_test.go b/verifiers/internal/gha/npm_test.go index fee31d995..ddcd0b014 100644 --- a/verifiers/internal/gha/npm_test.go +++ b/verifiers/internal/gha/npm_test.go @@ -2,17 +2,20 @@ package gha import ( "context" + "encoding/base64" "fmt" "os" "path/filepath" "testing" "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" intoto "github.com/in-toto/in-toto-golang/in_toto" dsselib "github.com/secure-systems-lab/go-securesystemslib/dsse" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" ) func Test_verifyName(t *testing.T) { @@ -81,7 +84,15 @@ func Test_verifyPublishSubjectVersion(t *testing.T) { att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJwcmVkaWNhdGVUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9ucG0vYXR0ZXN0YXRpb24vdHJlZS9tYWluL3NwZWNzL3B1Ymxpc2gvdjAuMSIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJuYW1lIjogIkBsYXVyZW50c2ltb24vcHJvdmVuYW5jZS1ucG0tdGVzdCIsCiAgICAidmVyc2lvbiI6ICIxLjAuMCIsCiAgICAicmVnaXN0cnkiOiAiaHR0cHM6Ly9yZWdpc3RyeS5ucG1qcy5vcmciCiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://github.com/npm/attestation/tree/main/specs/publish/v0.1", + "predicate": { + "name": "@laurentsimon/provenance-npm-test", + "version": "1.0.0", + "registry": "https://registry.npmjs.org" + } + }`)), }, }, version: "1.0.0", @@ -91,7 +102,15 @@ func Test_verifyPublishSubjectVersion(t *testing.T) { att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJwcmVkaWNhdGVUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9ucG0vYXR0ZXN0YXRpb24vdHJlZS9tYWluL3NwZWNzL3B1Ymxpc2gvdjAuMSIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJuYW1lIjogIkBsYXVyZW50c2ltb24vcHJvdmVuYW5jZS1ucG0tdGVzdCIsCiAgICAidmVyc2lvbiI6ICIxLjAuMCIsCiAgICAicmVnaXN0cnkiOiAiaHR0cHM6Ly9yZWdpc3RyeS5ucG1qcy5vcmciCiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://github.com/npm/attestation/tree/main/specs/publish/v0.1", + "predicate": { + "name": "@laurentsimon/provenance-npm-test", + "version": "1.0.0", + "registry": "https://registry.npmjs.org" + } + }`)), }, }, version: "1.0", @@ -102,7 +121,15 @@ func Test_verifyPublishSubjectVersion(t *testing.T) { att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJwcmVkaWNhdGVUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9ucG0vYXR0ZXN0YXRpb24vdHJlZS9tYWluL3NwZWNzL3B1Ymxpc2gvdjAuMSIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJuYW1lIjogIkBsYXVyZW50c2ltb24vcHJvdmVuYW5jZS1ucG0tdGVzdCIsCiAgICAidmVyc2lvbiI6ICIxLjAuMCIsCiAgICAicmVnaXN0cnkiOiAiaHR0cHM6Ly9yZWdpc3RyeS5ucG1qcy5vcmciCiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://github.com/npm/attestation/tree/main/specs/publish/v0.1", + "predicate": { + "name": "@laurentsimon/provenance-npm-test", + "version": "1.0.0", + "registry": "https://registry.npmjs.org" + } + }`)), }, }, version: "1.0.1", @@ -113,7 +140,15 @@ func Test_verifyPublishSubjectVersion(t *testing.T) { att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJwcmVkaWNhdGVUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9ucG0vYXR0ZXN0YXRpb24vdHJlZS9tYWluL3NwZWNzL3B1Ymxpc2gvdjAuMSIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJuYW1lIjogIkBsYXVyZW50c2ltb24vcHJvdmVuYW5jZS1ucG0tdGVzdCIsCiAgICAidmVyc2lvbiI6ICIxLjAuMCIsCiAgICAicmVnaXN0cnkiOiAiaHR0cHM6Ly9yZWdpc3RyeS5ucG1qcy5vcmciCiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://github.com/npm/attestation/tree/main/specs/publish/v0.1", + "predicate": { + "name": "@laurentsimon/provenance-npm-test", + "version": "1.0.0", + "registry": "https://registry.npmjs.org" + } + }`)), }, }, version: "1.1.0", @@ -124,7 +159,15 @@ func Test_verifyPublishSubjectVersion(t *testing.T) { att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJwcmVkaWNhdGVUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9ucG0vYXR0ZXN0YXRpb24vdHJlZS9tYWluL3NwZWNzL3B1Ymxpc2gvdjAuMSIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJuYW1lIjogIkBsYXVyZW50c2ltb24vcHJvdmVuYW5jZS1ucG0tdGVzdCIsCiAgICAidmVyc2lvbiI6ICIxLjAuMCIsCiAgICAicmVnaXN0cnkiOiAiaHR0cHM6Ly9yZWdpc3RyeS5ucG1qcy5vcmciCiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "predicateType": "https://github.com/npm/attestation/tree/main/specs/publish/v0.1", + "predicate": { + "name": "@laurentsimon/provenance-npm-test", + "version": "1.0.0", + "registry": "https://registry.npmjs.org" + } + }`)), }, }, version: "2.0.0", @@ -138,8 +181,8 @@ func Test_verifyPublishSubjectVersion(t *testing.T) { err := verifyPublishSubjectVersion(tt.att, tt.version) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error (-want +got): \n%s", diff) } }) } @@ -149,60 +192,151 @@ func Test_verifyProvenanceSubjectVersion(t *testing.T) { t.Parallel() tests := []struct { - name string - att *SignedAttestation - version string - err error + name string + builderID string + att *SignedAttestation + version string + err error }{ { - name: "correct version", + name: "correct version", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJzdWJqZWN0IjogWwogICAgewogICAgICAibmFtZSI6ICJwa2c6bnBtLyU0MGxhdXJlbnRzaW1vbi9wcm92ZW5hbmNlLW5wbS10ZXN0QDEuMC4wIiwKICAgICAgImRpZ2VzdCI6IHsKICAgICAgICAic2hhNTEyIjogIjI5ZDE5ZjI2MjMzZjQ0NDEzMjg0MTJiMzRmZDczZWQxMDRlY2ZlZjYyZjE0MDk3ODkwY2NjZjc0NTViNTIxYjY1YzVhY2ZmODUxODQ5ZmFhODVjODUzOTVhYTIyZDQwMTQzNmYwMWYzYWZiNjFiMTljNzgwZTkwNmM4OGM3ZjIwIgogICAgICB9CiAgICB9CiAgXSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJidWlsZFR5cGUiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGkvZ2hhQHYxIiwKICAgICJidWlsZGVyIjogewogICAgICAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGlAOS41LjAiCiAgICB9CiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, version: "1.0.0", }, { - name: "incorrect subset version", + name: "incorrect subset version", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "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", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, version: "1.0", err: serrors.ErrorMismatchPackageVersion, }, { - name: "incorrect patch version", + name: "incorrect patch version", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "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", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, version: "1.0.1", err: serrors.ErrorMismatchPackageVersion, }, { - name: "incorrect minor version", + name: "incorrect minor version", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJzdWJqZWN0IjogWwogICAgewogICAgICAibmFtZSI6ICJwa2c6bnBtLyU0MGxhdXJlbnRzaW1vbi9wcm92ZW5hbmNlLW5wbS10ZXN0QDEuMC4wIiwKICAgICAgImRpZ2VzdCI6IHsKICAgICAgICAic2hhNTEyIjogIjI5ZDE5ZjI2MjMzZjQ0NDEzMjg0MTJiMzRmZDczZWQxMDRlY2ZlZjYyZjE0MDk3ODkwY2NjZjc0NTViNTIxYjY1YzVhY2ZmODUxODQ5ZmFhODVjODUzOTVhYTIyZDQwMTQzNmYwMWYzYWZiNjFiMTljNzgwZTkwNmM4OGM3ZjIwIgogICAgICB9CiAgICB9CiAgXSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJidWlsZFR5cGUiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGkvZ2hhQHYxIiwKICAgICJidWlsZGVyIjogewogICAgICAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGlAOS41LjAiCiAgICB9CiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, version: "1.1.0", err: serrors.ErrorMismatchPackageVersion, }, { - name: "incorrect major version", + name: "incorrect major version", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJzdWJqZWN0IjogWwogICAgewogICAgICAibmFtZSI6ICJwa2c6bnBtLyU0MGxhdXJlbnRzaW1vbi9wcm92ZW5hbmNlLW5wbS10ZXN0QDEuMC4wIiwKICAgICAgImRpZ2VzdCI6IHsKICAgICAgICAic2hhNTEyIjogIjI5ZDE5ZjI2MjMzZjQ0NDEzMjg0MTJiMzRmZDczZWQxMDRlY2ZlZjYyZjE0MDk3ODkwY2NjZjc0NTViNTIxYjY1YzVhY2ZmODUxODQ5ZmFhODVjODUzOTVhYTIyZDQwMTQzNmYwMWYzYWZiNjFiMTljNzgwZTkwNmM4OGM3ZjIwIgogICAgICB9CiAgICB9CiAgXSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJidWlsZFR5cGUiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGkvZ2hhQHYxIiwKICAgICJidWlsZGVyIjogewogICAgICAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGlAOS41LjAiCiAgICB9CiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, version: "2.0.0", @@ -213,11 +347,14 @@ func Test_verifyProvenanceSubjectVersion(t *testing.T) { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() + builderID, err := utils.TrustedBuilderIDNew(tt.builderID, false) + if err != nil { + panic(err) + } - err := verifyProvenanceSubjectVersion(tt.att, tt.version) - - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) + err = verifyProvenanceSubjectVersion(builderID, tt.att, tt.version) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error (-want +got): \n%s", diff) } }) } @@ -439,49 +576,122 @@ func Test_verifyProvenanceSubjectName(t *testing.T) { t.Parallel() tests := []struct { - name string - att *SignedAttestation - subject string - err error + name string + builderID string + att *SignedAttestation + subject string + err error }{ { - name: "correct name", + name: "correct name", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "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", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, subject: "@laurentsimon/provenance-npm-test", }, { - name: "incorrect name", + name: "incorrect name", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJzdWJqZWN0IjogWwogICAgewogICAgICAibmFtZSI6ICJwa2c6bnBtLyU0MGxhdXJlbnRzaW1vbi9wcm92ZW5hbmNlLW5wbS10ZXN0QDEuMC4wIiwKICAgICAgImRpZ2VzdCI6IHsKICAgICAgICAic2hhNTEyIjogIjI5ZDE5ZjI2MjMzZjQ0NDEzMjg0MTJiMzRmZDczZWQxMDRlY2ZlZjYyZjE0MDk3ODkwY2NjZjc0NTViNTIxYjY1YzVhY2ZmODUxODQ5ZmFhODVjODUzOTVhYTIyZDQwMTQzNmYwMWYzYWZiNjFiMTljNzgwZTkwNmM4OGM3ZjIwIgogICAgICB9CiAgICB9CiAgXSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsCiAgInByZWRpY2F0ZSI6IHsKICAgICJidWlsZFR5cGUiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGkvZ2hhQHYxIiwKICAgICJidWlsZGVyIjogewogICAgICAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL25wbS9jbGlAOS41LjAiCiAgICB9CiAgfQp9Cg==", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, subject: "wrong name", err: serrors.ErrorMismatchPackageName, }, { - name: "incorrect scope", + name: "incorrect scope", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "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", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, subject: "laurentsimon/provenance-npm-test", err: serrors.ErrorMismatchPackageName, }, { - name: "incorrect with version", + name: "incorrect with version", + builderID: common.NpmCLIHostedBuilderID, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ PayloadType: "application/vnd.in-toto+json", - Payload: "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", + Payload: base64.StdEncoding.EncodeToString([]byte(`{ + "_type": "https://in-toto.io/Statement/v0.1", + "subject": [ + { + "name": "pkg:npm/%40laurentsimon/provenance-npm-test@1.0.0", + "digest": { + "sha512": "29d19f26233f4441328412b34fd73ed104ecfef62f14097890cccf7455b521b65c5acff851849faa85c85395aa22d401436f01f3afb61b19c780e906c88c7f20" + } + } + ], + "predicateType": "https://slsa.dev/provenance/v0.2", + "predicate": { + "buildType": "https://github.com/npm/cli/gha@v1", + "builder": { + "id": "https://github.com/npm/cli@9.5.0" + } + } + }`)), }, }, subject: "@laurentsimon/provenance-npm-test@1.0.0", @@ -492,11 +702,14 @@ func Test_verifyProvenanceSubjectName(t *testing.T) { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() + builderID, err := utils.TrustedBuilderIDNew(tt.builderID, false) + if err != nil { + panic(err) + } - err := verifyProvenanceSubjectName(tt.att, tt.subject) - - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) + err = verifyProvenanceSubjectName(builderID, tt.att, tt.subject) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error (-want +got): \n%s", diff) } }) } @@ -572,6 +785,11 @@ func Test_verifyPackageName(t *testing.T) { Envelope: env, } + npm.verifiedBuilderID, err = utils.TrustedBuilderIDNew(common.NpmCLIHostedBuilderID, false) + if err != nil { + panic(err) + } + err = npm.verifyPackageName(&tt.subject) if !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) @@ -642,6 +860,11 @@ func Test_verifyPackageVersion(t *testing.T) { Envelope: env, } + npm.verifiedBuilderID, err = utils.TrustedBuilderIDNew(common.NpmCLIHostedBuilderID, false) + if err != nil { + panic(err) + } + env, err = getEnvelopeFromBundleBytes(npm.publishAttestation.BundleBytes) if err != nil { panic(fmt.Errorf("getEnvelopeFromBundleBytes: %w", err)) @@ -671,7 +894,7 @@ func Test_verifyIntotoTypes(t *testing.T) { }{ { name: "prov correct", - predicateType: slsaprovenance.ProvenanceV02Type, + predicateType: common.ProvenanceV02Type, payloadType: intoto.PayloadType, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ @@ -682,7 +905,7 @@ func Test_verifyIntotoTypes(t *testing.T) { }, { name: "prov mismatch payload type", - predicateType: slsaprovenance.ProvenanceV02Type, + predicateType: common.ProvenanceV02Type, payloadType: intoto.PayloadType, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ @@ -694,7 +917,7 @@ func Test_verifyIntotoTypes(t *testing.T) { }, { name: "prov mismatch predicate type", - predicateType: slsaprovenance.ProvenanceV02Type + "a", + predicateType: common.ProvenanceV02Type + "a", payloadType: intoto.PayloadType, att: &SignedAttestation{ Envelope: &dsselib.Envelope{ @@ -886,8 +1109,8 @@ func Test_NpmNew(t *testing.T) { } _, err = NpmNew(ctx, trustedRoot, content) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error (-want +got): \n%s", diff) } }) } diff --git a/verifiers/internal/gha/provenance.go b/verifiers/internal/gha/provenance.go index b1186752b..f9e592e5c 100644 --- a/verifiers/internal/gha/provenance.go +++ b/verifiers/internal/gha/provenance.go @@ -16,11 +16,9 @@ import ( serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/options" "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" - - // Load provenance types. - - _ "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v1.0" ) // SignedAttestation contains a signed DSSE envelope @@ -34,6 +32,7 @@ type SignedAttestation struct { RekorEntry *models.LogEntryAnon } +// EnvelopeFromBytes reads a DSSE envelope from the given payload. func EnvelopeFromBytes(payload []byte) (env *dsselib.Envelope, err error) { env = &dsselib.Envelope{} err = json.Unmarshal(payload, env) @@ -43,7 +42,7 @@ func EnvelopeFromBytes(payload []byte) (env *dsselib.Envelope, err error) { // Verify Builder ID in provenance statement. // This function does an exact comparison, and expects expectedBuilderID to be the full // `name@refs/tags/`. -func verifyBuilderIDExactMatch(prov slsaprovenance.Provenance, expectedBuilderID string) error { +func verifyBuilderIDExactMatch(prov iface.Provenance, expectedBuilderID string) error { id, err := prov.BuilderID() if err != nil { return err @@ -52,16 +51,38 @@ func verifyBuilderIDExactMatch(prov slsaprovenance.Provenance, expectedBuilderID if err != nil { return err } + if err := provBuilderID.MatchesFull(expectedBuilderID, true); err != nil { - return fmt.Errorf("%w", err) + return err } return nil } +// verifyBuilderIDPathPrefix verifies that the builder ID in provenance matches the provided expectedBuilderIDPathPrefix. +// Returns provenance builderID if verified against provided expected Builder ID path prefix. +func verifyBuilderIDPathPrefix(prov iface.Provenance, expectedBuilderIDPathPrefix string) (string, error) { + id, err := prov.BuilderID() + if err != nil { + return "", err + } + + provBuilderID, err := utils.TrustedBuilderIDNew(id, false) + if err != nil { + return "", err + } + + // Compare actual BuilderID with the expected BuilderID Path Prefix. + if !strings.HasPrefix(provBuilderID.Name(), expectedBuilderIDPathPrefix) { + return "", fmt.Errorf("%w: BuilderID Path Mismatch. Got: %q. Expected BuilderID Path Prefix: %q", serrors.ErrorInvalidBuilderID, provBuilderID.Name(), expectedBuilderIDPathPrefix) + } + + return provBuilderID.Name(), nil +} + // Verify Builder ID in provenance statement. // This function verifies the names match. If the expected builder ID contains a version, // it also verifies the versions match. -func verifyBuilderIDLooseMatch(prov slsaprovenance.Provenance, expectedBuilderID string) error { +func verifyBuilderIDLooseMatch(prov iface.Provenance, expectedBuilderID string) error { id, err := prov.BuilderID() if err != nil { return err @@ -70,117 +91,110 @@ func verifyBuilderIDLooseMatch(prov slsaprovenance.Provenance, expectedBuilderID if err != nil { return err } + if err := provBuilderID.MatchesLoose(expectedBuilderID, true); err != nil { - return fmt.Errorf("%w", err) + return err } return nil } -func asURI(s string) string { - source := s - if !strings.HasPrefix(source, "https://") && - !strings.HasPrefix(source, "git+") { - source = "git+https://" + source - } - if !strings.HasPrefix(source, "git+") { - source = "git+" + source - } - - return source -} - // Verify source URI in provenance statement. -func verifySourceURI(prov slsaprovenance.Provenance, expectedSourceURI string, allowNoMaterialRef bool) error { - source := asURI(expectedSourceURI) +func verifySourceURI(prov iface.Provenance, expectedSourceURI string) error { + source := utils.NormalizeGitURI(expectedSourceURI) // We expect github.com URIs only. if !strings.HasPrefix(source, "git+https://github.com/") { - return fmt.Errorf("%w: expected source github.com repository '%s'", serrors.ErrorMalformedURI, + return fmt.Errorf("%w: expected source github.com repository %q", serrors.ErrorMalformedURI, source) } - // Verify source from ConfigSource field. - fullConfigURI, err := prov.ConfigURI() + // Verify source in the trigger + fullTriggerURI, err := prov.TriggerURI() if err != nil { return err } - configURI, err := sourceFromURI(fullConfigURI, false) + + triggerURI, triggerRef, err := utils.ParseGitURIAndRef(fullTriggerURI) if err != nil { return err } - if configURI != source { - return fmt.Errorf("%w: expected source '%s' in configSource.uri, got '%s'", serrors.ErrorMismatchSource, - source, fullConfigURI) + if triggerURI != source { + return fmt.Errorf("%w: expected trigger %q to match source-uri %q", serrors.ErrorMismatchSource, + source, fullTriggerURI) + } + // We expect the trigger URI to always have a ref. + if triggerRef == "" { + return fmt.Errorf("%w: missing ref: %q", serrors.ErrorMalformedURI, fullTriggerURI) } // Verify source from material section. - materialSourceURI, err := prov.SourceURI() + fullSourceURI, err := prov.SourceURI() if err != nil { return err } - materialURI, err := sourceFromURI(materialSourceURI, allowNoMaterialRef) + + sourceURI, sourceRef, err := utils.ParseGitURIAndRef(fullSourceURI) if err != nil { return err } - if materialURI != source { - return fmt.Errorf("%w: expected source '%s' in material section, got '%s'", serrors.ErrorMismatchSource, - source, materialSourceURI) + if sourceURI != source { + return fmt.Errorf("%w: expected source %q to match source-uri %q", serrors.ErrorMismatchSource, + fullSourceURI, source) } - // Last, verify that both fields match. - // We use the full URI to match on the tag as well. - if allowNoMaterialRef && len(strings.Split(materialSourceURI, "@")) == 1 { + buildType, err := prov.BuildType() + if err != nil { + return fmt.Errorf("checking buildType: %v", err) + } + if sourceRef == "" { // NOTE: this is an exception for npm packages built before GA, // see https://github.com/slsa-framework/slsa-verifier/issues/492. // We don't need to compare the ref since materialSourceURI does not contain it. - return nil + if buildType == common.NpmCLIBuildTypeV1 { + return nil + } + // NOTE: BYOB builders can build from a different ref than the triggering ref. + // This most often happens when a TRW makes a commit as part of the release process. + // NOTE: Currently only building from a different git sha is supported + // which means the sourceRef is empty. Building from an arbitrary ref + // is currently not supported. + if buildType == common.BYOBBuildTypeV0 { + return nil + } + return fmt.Errorf("%w: missing ref: %q", serrors.ErrorMalformedURI, fullSourceURI) } - if fullConfigURI != materialSourceURI { - return fmt.Errorf("%w: material and config URIs do not match: '%s' != '%s'", + + // Last, verify that both fields match. We expect that the trigger URI and + // the source URI match but the ref used to trigger the build and source ref + // could be different. + if fullTriggerURI != fullSourceURI { + return fmt.Errorf("%w: source and trigger URIs do not match: %q != %q", serrors.ErrorInvalidDssePayload, - fullConfigURI, materialSourceURI) + fullTriggerURI, fullSourceURI) } return nil } -// sourceFromURI retrieves the source repository given a repository URI with ref. -// -// NOTE: `allowNoRef` is to allow for verification of npm packages -// generated before GA. Their provenance did not have a ref, -// see https://github.com/slsa-framework/slsa-verifier/issues/492. -// `allowNoRef` should be set to `false` for all other cases. -func sourceFromURI(uri string, allowNoRef bool) (string, error) { - if uri == "" { - return "", fmt.Errorf("%w: empty uri", serrors.ErrorMalformedURI) - } - - r := strings.Split(uri, "@") - if len(r) < 2 && !allowNoRef { - return "", fmt.Errorf("%w: %s", serrors.ErrorMalformedURI, - uri) - } - if len(r) < 1 { - return "", fmt.Errorf("%w: %s", serrors.ErrorMalformedURI, - uri) - } - return r[0], nil -} - // Verify Subject Digest from the provenance statement. -func verifyDigest(prov slsaprovenance.Provenance, expectedHash string) error { +func verifyDigest(prov iface.Provenance, expectedHash string) error { subjects, err := prov.Subjects() if err != nil { return err } // 8 bit represented in hex, so 8/2=4. - l := len(expectedHash) * 4 + bitLength := len(expectedHash) * 4 + expectedAlgo := fmt.Sprintf("sha%v", bitLength) + if bitLength < 256 { + return fmt.Errorf("%w: expected minimum 256-bit. Got %d", serrors.ErrorInvalidHash, bitLength) + } + for _, subject := range subjects { digestSet := subject.Digest - hash, exists := digestSet[fmt.Sprintf("sha%v", l)] + hash, exists := digestSet[expectedAlgo] if !exists { - return fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, fmt.Sprintf("no sha%v subject digest", l)) + continue } if hash == expectedHash { return nil @@ -212,10 +226,11 @@ func VerifyProvenanceSignature(ctx context.Context, trustedRoot *TrustedRoot, provenance, rClient, trustedRoot) } +// VerifyNpmPackageProvenance verifies provenance for an npm package. func VerifyNpmPackageProvenance(env *dsselib.Envelope, workflow *WorkflowIdentity, - provenanceOpts *options.ProvenanceOpts, isTrustedBuilder bool, + provenanceOpts *options.ProvenanceOpts, trustedBuilderID *utils.TrustedBuilderID, isTrustedBuilder bool, ) error { - prov, err := slsaprovenance.ProvenanceFromEnvelope(env) + prov, err := slsaprovenance.ProvenanceFromEnvelope(trustedBuilderID.Name(), env) if err != nil { return err } @@ -261,7 +276,7 @@ func VerifyNpmPackageProvenance(env *dsselib.Envelope, workflow *WorkflowIdentit } // Also, the GitHub context is not recorded for the default builder. - if err := VerifyProvenanceCommonOptions(prov, provenanceOpts, true); err != nil { + if err := VerifyProvenanceCommonOptions(prov, provenanceOpts); err != nil { return err } @@ -273,28 +288,114 @@ func VerifyNpmPackageProvenance(env *dsselib.Envelope, workflow *WorkflowIdentit return nil } -func VerifyProvenance(env *dsselib.Envelope, provenanceOpts *options.ProvenanceOpts, -) error { - prov, err := slsaprovenance.ProvenanceFromEnvelope(env) +func isValidDelegatorBuilderID(prov iface.Provenance) error { + // Verify the TRW was referenced at a proper tag by the user. + id, err := prov.BuilderID() if err != nil { return err } - // Verify Builder ID. - // Note: `provenanceOpts.ExpectedBuilderID` is not provided by the user, - // but taken from the certificate. It always is of the form `name@refs/tags/`. - if err := verifyBuilderIDExactMatch(prov, provenanceOpts.ExpectedBuilderID); err != nil { + parts := strings.Split(id, "@") + if len(parts) != 2 { + return fmt.Errorf("%w: %s", serrors.ErrorInvalidBuilderID, id) + } + builderRef := parts[1] + + // Exception for JReleaser builders. + // See https://github.com/slsa-framework/slsa-github-generator/issues/2035#issuecomment-1579963802. + if strings.HasPrefix(parts[0], JReleaserRepository) { + return utils.IsValidJreleaserBuilderTag(builderRef) + } + + sourceURI, err := prov.SourceURI() + if err != nil { + return err + } + + uri, _, err := utils.ParseGitURIAndRef(sourceURI) + if err != nil { return err } + // Exception to enable e2e tests for BYOB builders referenced at main. + normalizedE2eRepoURI := utils.NormalizeGitURI(httpsGithubCom + e2eTestRepository) + normalizedURI := utils.NormalizeGitURI(uri) + if normalizedURI == normalizedE2eRepoURI && options.TestingEnabled() { + // Allow verification on the main branch to support e2e tests. + if builderRef == "refs/heads/main" { + return nil + } + } - return VerifyProvenanceCommonOptions(prov, provenanceOpts, false) + return utils.IsValidBuilderTag(builderRef, false) } -func VerifyProvenanceCommonOptions(prov slsaprovenance.Provenance, provenanceOpts *options.ProvenanceOpts, - allowNoMaterialRef bool, -) error { +// builderID returns the trusted builder ID from the provenance. +// The certTrustedBuilderID input is from the Fulcio certificate. +func builderID(env *dsselib.Envelope, certTrustedBuilderID *utils.TrustedBuilderID) (*utils.TrustedBuilderID, error) { + prov, err := slsaprovenance.ProvenanceFromEnvelope(certTrustedBuilderID.Name(), env) + if err != nil { + return nil, err + } + id, err := prov.BuilderID() + if err != nil { + return nil, err + } + verifiedBuilderID, err := utils.TrustedBuilderIDNew(id, true) + if err != nil { + return nil, err + } + return verifiedBuilderID, nil +} + +// VerifyProvenance verifies the provenance for the given DSSE envelope. +func VerifyProvenance(env *dsselib.Envelope, provenanceOpts *options.ProvenanceOpts, trustedBuilderID *utils.TrustedBuilderID, byob bool, + expectedID *string) error { + prov, err := slsaprovenance.ProvenanceFromEnvelope(trustedBuilderID.Name(), env) + if err != nil { + return err + } + + // Verify Builder ID. + if byob { + if err := isValidDelegatorBuilderID(prov); err != nil { + return err + } + + // If expectedID is not provided, check to see if it is a trusted builder. + // If not provided, then a trusted builder is expected, to populate provenanceOpts.ExpectedBuilderID + // with that builder, otherwise, populate from user input. + // + // This can verify the actual BYOB builderIDPath against the trusted builderIDPath provided. + // Currently slsa-framework path is the only one supported for ExpectedBuilderPath. + if expectedID == nil { + var trustedBuilderRepositoryPath = httpsGithubCom + trustedBuilderRepository + "/.github/workflows/" + if provenanceOpts.ExpectedBuilderID, err = verifyBuilderIDPathPrefix(prov, trustedBuilderRepositoryPath); err != nil { + return err + } + } else { + provenanceOpts.ExpectedBuilderID = *expectedID + } + + // NOTE: `provenanceOpts.ExpectedBuilderID` is provided by the user + // or from return of verifyBuilderIDPath. + if err := verifyBuilderIDLooseMatch(prov, provenanceOpts.ExpectedBuilderID); err != nil { + return err + } + } else { + // Note: `provenanceOpts.ExpectedBuilderID` is not provided by the user, + // but taken from the certificate. It always is of the form `name@refs/tags/`. + if err := verifyBuilderIDExactMatch(prov, provenanceOpts.ExpectedBuilderID); err != nil { + return err + } + } + + return VerifyProvenanceCommonOptions(prov, provenanceOpts) +} + +// VerifyProvenanceCommonOptions verifies the given provenance. +func VerifyProvenanceCommonOptions(prov iface.Provenance, provenanceOpts *options.ProvenanceOpts) error { // Verify source. - if err := verifySourceURI(prov, provenanceOpts.ExpectedSourceURI, allowNoMaterialRef); err != nil { + if err := verifySourceURI(prov, provenanceOpts.ExpectedSourceURI); err != nil { return err } @@ -334,7 +435,9 @@ func VerifyProvenanceCommonOptions(prov slsaprovenance.Provenance, provenanceOpt return nil } -func VerifyWorkflowInputs(prov slsaprovenance.Provenance, inputs map[string]string) error { +// VerifyWorkflowInputs verifies that the workflow inputs in the provenance +// match the expected values. +func VerifyWorkflowInputs(prov iface.Provenance, inputs map[string]string) error { pyldInputs, err := prov.GetWorkflowInputs() if err != nil { return err @@ -342,7 +445,7 @@ func VerifyWorkflowInputs(prov slsaprovenance.Provenance, inputs map[string]stri // Verify all inputs. for k, v := range inputs { - value, err := slsaprovenance.GetAsString(pyldInputs, k) + value, err := common.GetAsString(pyldInputs, k) if err != nil { return fmt.Errorf("%w: cannot retrieve value of '%s'", serrors.ErrorMismatchWorkflowInputs, k) } @@ -356,13 +459,19 @@ func VerifyWorkflowInputs(prov slsaprovenance.Provenance, inputs map[string]stri return nil } -func VerifyBranch(prov slsaprovenance.Provenance, expectedBranch string) error { - branch, err := prov.GetBranch() +// VerifyBranch verifies that the source branch in the provenance matches the +// expected value. +func VerifyBranch(prov iface.Provenance, expectedBranch string) error { + ref, err := prov.GetBranch() if err != nil { return err } - expectedBranch = "refs/heads/" + expectedBranch + branch, err := utils.BranchFromGitRef(ref) + if err != nil { + return fmt.Errorf("verifying branch: %w", err) + } + if branch != expectedBranch { return fmt.Errorf("expected branch '%s', got '%s': %w", expectedBranch, branch, serrors.ErrorMismatchBranch) } @@ -370,13 +479,19 @@ func VerifyBranch(prov slsaprovenance.Provenance, expectedBranch string) error { return nil } -func VerifyTag(prov slsaprovenance.Provenance, expectedTag string) error { - tag, err := prov.GetTag() +// VerifyTag verifies that the source tag in the provenance matches the +// expected value. +func VerifyTag(prov iface.Provenance, expectedTag string) error { + ref, err := prov.GetTag() if err != nil { return err } - expectedTag = "refs/tags/" + expectedTag + tag, err := utils.TagFromGitRef(ref) + if err != nil { + return fmt.Errorf("verifying tag: %w", err) + } + if tag != expectedTag { return fmt.Errorf("expected tag '%s', got '%s': %w", expectedTag, tag, serrors.ErrorMismatchTag) } @@ -384,16 +499,24 @@ func VerifyTag(prov slsaprovenance.Provenance, expectedTag string) error { return nil } -func VerifyVersionedTag(prov slsaprovenance.Provenance, expectedTag string) error { +// VerifyVersionedTag verifies that the source tag in the provenance matches the +// expected semver value. +func VerifyVersionedTag(prov iface.Provenance, expectedTag string) error { // Retrieve, validate and canonicalize the provenance tag. // Note: prerelease is validated as part of patch validation // and must be equal. Build is discarded as per https://semver.org/: // "Build metadata MUST be ignored when determining version precedence", - tag, err := prov.GetTag() + ref, err := prov.GetTag() if err != nil { return err } - return utils.VerifyVersionedTag(strings.TrimPrefix(tag, "refs/tags/"), expectedTag) + + tag, err := utils.TagFromGitRef(ref) + if err != nil { + return fmt.Errorf("verifying tag: %w", err) + } + + return utils.VerifyVersionedTag(tag, expectedTag) } // hasCertInEnvelope checks if a valid x509 certificate is present in the diff --git a/verifiers/internal/gha/provenance_forgeable.go b/verifiers/internal/gha/provenance_forgeable.go index 03d6758ed..f90eb1dbd 100644 --- a/verifiers/internal/gha/provenance_forgeable.go +++ b/verifiers/internal/gha/provenance_forgeable.go @@ -1,18 +1,17 @@ package gha import ( + "errors" "fmt" "strings" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" - - // Load provenance types. + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" slsav02 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v0.2" - _ "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v1.0" ) -func verifyProvenanceMatchesCertificate(prov slsaprovenance.Provenance, workflow *WorkflowIdentity) error { +func verifyProvenanceMatchesCertificate(prov iface.Provenance, workflow *WorkflowIdentity) error { // See the generation at https://github.com/npm/cli/blob/latest/workspaces/libnpmpublish/lib/provenance.js. // Verify systemParameters. if err := verifySystemParameters(prov, workflow); err != nil { @@ -64,7 +63,7 @@ func verifyProvenanceMatchesCertificate(prov slsaprovenance.Provenance, workflow return nil } -func verifySubjectDigestName(prov slsaprovenance.Provenance, digestName string) error { +func verifySubjectDigestName(prov iface.Provenance, digestName string) error { subjects, err := prov.Subjects() if err != nil { return err @@ -83,15 +82,21 @@ func verifySubjectDigestName(prov slsaprovenance.Provenance, digestName string) return nil } -func verifyBuildConfig(prov slsaprovenance.Provenance, workflow *WorkflowIdentity) error { +func verifyBuildConfig(prov iface.Provenance, workflow *WorkflowIdentity) error { triggerPath, err := prov.GetBuildTriggerPath() if err != nil { + // If the field is not available in the provenance, + // we can safely skip the verification against the certificate. + if errors.Is(err, serrors.ErrorNotPresent) { + return nil + } return err } + return equalCertificateValue(workflow.BuildConfigPath, triggerPath, "trigger workflow") } -func verifyResolvedDependencies(prov slsaprovenance.Provenance) error { +func verifyResolvedDependencies(prov iface.Provenance) error { n, err := prov.GetNumberResolvedDependencies() if err != nil { return err @@ -103,7 +108,7 @@ func verifyResolvedDependencies(prov slsaprovenance.Provenance) error { return nil } -func verifyMetadata(prov slsaprovenance.Provenance, workflow *WorkflowIdentity) error { +func verifyMetadata(prov iface.Provenance, workflow *WorkflowIdentity) error { if err := verifyCommonMetadata(prov, workflow); err != nil { return err } @@ -118,7 +123,7 @@ func verifyMetadata(prov slsaprovenance.Provenance, workflow *WorkflowIdentity) return nil } -func verifyCommonMetadata(prov slsaprovenance.Provenance, workflow *WorkflowIdentity) error { +func verifyCommonMetadata(prov iface.Provenance, workflow *WorkflowIdentity) error { // Verify build invocation ID. invocationID, err := prov.GetBuildInvocationID() if err != nil { @@ -162,7 +167,7 @@ func verifyCommonMetadata(prov slsaprovenance.Provenance, workflow *WorkflowIden return nil } -func verifyV02Metadata(prov slsaprovenance.Provenance) error { +func verifyV02Metadata(prov iface.Provenance) error { // https://github.com/in-toto/in-toto-golang/blob/master/in_toto/slsa_provenance/v0.2/provenance.go /* v0.2: @@ -174,21 +179,23 @@ func verifyV02Metadata(prov slsaprovenance.Provenance) error { }, "reproducible": false */ - prov02, ok := prov.(*slsav02.ProvenanceV02) + prov02, ok := prov.(slsav02.ProvenanceV02) if !ok { return nil } - if prov02.Predicate.Metadata == nil { + predicate := prov02.Predicate() + + if predicate.Metadata == nil { return nil } - if prov02.Predicate.Metadata.Reproducible { + if predicate.Metadata.Reproducible { return fmt.Errorf("%w: reproducible: %v", serrors.ErrorNonVerifiableClaim, - prov02.Predicate.Metadata.Reproducible) + predicate.Metadata.Reproducible) } - completeness := prov02.Predicate.Metadata.Completeness + completeness := predicate.Metadata.Completeness if completeness.Parameters || completeness.Materials || completeness.Environment { return fmt.Errorf("%w: completeness: %v", @@ -198,44 +205,47 @@ func verifyV02Metadata(prov slsaprovenance.Provenance) error { return nil } -func verifyV02Parameters(prov slsaprovenance.Provenance) error { +func verifyV02Parameters(prov iface.Provenance) error { // https://github.com/in-toto/in-toto-golang/blob/master/in_toto/slsa_provenance/v0.2/provenance.go - prov02, ok := prov.(*slsav02.ProvenanceV02) + prov02, ok := prov.(slsav02.ProvenanceV02) if !ok { return nil } - if prov02.Predicate.Invocation.Parameters == nil { + predicate := prov02.Predicate() + + if predicate.Invocation.Parameters == nil { return nil } - m, ok := prov02.Predicate.Invocation.Parameters.(map[string]any) + m, ok := predicate.Invocation.Parameters.(map[string]any) if !ok || len(m) > 0 { return fmt.Errorf("%w: parameters: %v", - serrors.ErrorNonVerifiableClaim, prov02.Predicate.Invocation.Parameters) + serrors.ErrorNonVerifiableClaim, predicate.Invocation.Parameters) } return nil } -func verifyV02BuildConfig(prov slsaprovenance.Provenance) error { +func verifyV02BuildConfig(prov iface.Provenance) error { // https://github.com/in-toto/in-toto-golang/blob/master/in_toto/slsa_provenance/v0.2/provenance.go - prov02, ok := prov.(*slsav02.ProvenanceV02) + prov02, ok := prov.(slsav02.ProvenanceV02) if !ok { return nil } + predicate := prov02.Predicate() - if prov02.Predicate.BuildConfig == nil { + if predicate.BuildConfig == nil { return nil } - m, ok := prov02.Predicate.BuildConfig.(map[string]any) + m, ok := predicate.BuildConfig.(map[string]any) if !ok || len(m) > 0 { return fmt.Errorf("%w: buildConfig: %v", - serrors.ErrorNonVerifiableClaim, prov02.Predicate.BuildConfig) + serrors.ErrorNonVerifiableClaim, predicate.BuildConfig) } return nil } -func verifySystemParameters(prov slsaprovenance.Provenance, workflow *WorkflowIdentity) error { +func verifySystemParameters(prov iface.Provenance, workflow *WorkflowIdentity) error { /* "environment": { "GITHUB_EVENT_NAME": "workflow_dispatch", @@ -268,6 +278,7 @@ func verifySystemParameters(prov slsaprovenance.Provenance, workflow *WorkflowId "GITHUB_WORKFLOW_REF": true, "GITHUB_WORKFLOW_SHA": true, } + for k := range sysParams { if !supportedNames[k] { return fmt.Errorf("%w: unknown '%s' parameter", serrors.ErrorMismatchCertificate, k) @@ -299,7 +310,9 @@ func verifySystemParameters(prov slsaprovenance.Provenance, workflow *WorkflowId return err } // 7. GITHUB_WORKFLOW_REF - if err := verifySystemParameter(sysParams, "GITHUB_WORKFLOW_REF", &workflow.SubjectWorkflowRef); err != nil { + // NOTE: GITHUB_WORKFLOW_REF does not include the server url or leading '/' + workflowPath := strings.TrimLeft(workflow.SubjectWorkflow.Path, "/") + if err := verifySystemParameter(sysParams, "GITHUB_WORKFLOW_REF", &workflowPath); err != nil { return err } // 8. GITHUB_WORKFLOW_SHA @@ -330,7 +343,7 @@ func getRunIDs(workflow *WorkflowIdentity) (string, string, error) { func verifySystemRun(params map[string]any, workflow *WorkflowIdentity) error { // Verify only if the values are provided in the provenance. - if !slsaprovenance.Exists(params, "GITHUB_RUN_ID") && !slsaprovenance.Exists(params, "GITHUB_RUN_ATTEMPT") { + if !common.Exists(params, "GITHUB_RUN_ID") && !common.Exists(params, "GITHUB_RUN_ATTEMPT") { return nil } // The certificate contains runID as '4757060009/attempts/1'. @@ -356,11 +369,11 @@ func verifySystemRun(params map[string]any, workflow *WorkflowIdentity) error { func verifySystemParameter(params map[string]any, name string, certValue *string) error { // If the provenance does not contain an env variable. - if !slsaprovenance.Exists(params, name) { + if !common.Exists(params, name) { return nil } // Provenance contains the field, we must verify it. - provValue, err := slsaprovenance.GetAsString(params, name) + provValue, err := common.GetAsString(params, name) if err != nil { return err } @@ -374,6 +387,7 @@ func equalCertificateValue(expected *string, actual, logName string) error { return fmt.Errorf("%w: empty certificate value to verify '%s'", serrors.ErrorMismatchCertificate, logName) } + if actual != *expected { return fmt.Errorf("%w: %s: '%s' != '%s'", serrors.ErrorMismatchCertificate, logName, actual, *expected) diff --git a/verifiers/internal/gha/provenance_forgeable_test.go b/verifiers/internal/gha/provenance_forgeable_test.go index 4bda05624..c18fce55b 100644 --- a/verifiers/internal/gha/provenance_forgeable_test.go +++ b/verifiers/internal/gha/provenance_forgeable_test.go @@ -1,6 +1,7 @@ package gha import ( + "net/url" "testing" "time" @@ -8,10 +9,7 @@ import ( intoto "github.com/in-toto/in-toto-golang/in_toto" intotocommon "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common" intotov02 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2" - intotov1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" - slsav02 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v0.2" - slsav10 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v1.0" ) func Test_verifySubjectDigestName(t *testing.T) { @@ -47,7 +45,7 @@ func Test_verifySubjectDigestName(t *testing.T) { { name: "invalid no subjects", digestName: "sha256", - err: serrors.ErrorInvalidDssePayload, + err: serrors.ErrorNonVerifiableClaim, }, { name: "wrong digest", @@ -65,25 +63,10 @@ func Test_verifySubjectDigestName(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{ - StatementHeader: intoto.StatementHeader{ - Subject: tt.subject, - }, - }, - } - err := verifySubjectDigestName(prov02, tt.digestName) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) - } - - prov1 := &slsav10.ProvenanceV1{ - StatementHeader: intoto.StatementHeader{ - Subject: tt.subject, - }, + prov := &testProvenance{ + subjects: tt.subject, } - err = verifySubjectDigestName(prov1, tt.digestName) - if !errCmp(err, tt.err) { + if err := verifySubjectDigestName(prov, tt.digestName); !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) } }) @@ -124,35 +107,10 @@ func Test_verifyBuildConfig(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{ - Predicate: intotov02.ProvenancePredicate{ - Invocation: intotov02.ProvenanceInvocation{ - ConfigSource: intotov02.ConfigSource{ - EntryPoint: tt.path, - }, - }, - }, - }, + prov := &testProvenance{ + buildTriggerPath: tt.path, } - err := verifyBuildConfig(prov02, &tt.workflow) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) - } - - prov1 := &slsav10.ProvenanceV1{ - Predicate: intotov1.ProvenancePredicate{ - BuildDefinition: intotov1.ProvenanceBuildDefinition{ - ExternalParameters: map[string]interface{}{ - "workflow": map[string]string{ - "path": tt.path, - }, - }, - }, - }, - } - err = verifyBuildConfig(prov1, &tt.workflow) - if !errCmp(err, tt.err) { + if err := verifyBuildConfig(prov, &tt.workflow); !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) } }) @@ -187,29 +145,10 @@ func Test_verifyResolvedDependencies(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{ - Predicate: intotov02.ProvenancePredicate{}, - }, - } - if tt.n > 0 { - prov02.Predicate.Materials = make([]intotocommon.ProvenanceMaterial, tt.n) + prov := &testProvenance{ + noResolvedDeps: tt.n, } - err := verifyResolvedDependencies(prov02) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) - } - - prov1 := &slsav10.ProvenanceV1{ - Predicate: intotov1.ProvenancePredicate{ - BuildDefinition: intotov1.ProvenanceBuildDefinition{}, - }, - } - if tt.n > 0 { - prov1.Predicate.BuildDefinition.ResolvedDependencies = make([]intotov1.ResourceDescriptor, tt.n) - } - err = verifyResolvedDependencies(prov1) - if !errCmp(err, tt.err) { + if err := verifyResolvedDependencies(prov); !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) } }) @@ -297,45 +236,19 @@ func Test_verifyCommonMetadata(t *testing.T) { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() - metadata := tt.metadata || tt.invocationID != nil || tt.startTime != nil || - tt.endTime != nil - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{ - Predicate: intotov02.ProvenancePredicate{}, - }, - } - if metadata { - prov02.Predicate.Metadata = &intotov02.ProvenanceMetadata{} - } - if tt.invocationID != nil { - prov02.Predicate.Metadata.BuildInvocationID = *tt.invocationID - } - if tt.startTime != nil { - prov02.Predicate.Metadata.BuildStartedOn = tt.startTime - } - if tt.endTime != nil { - prov02.Predicate.Metadata.BuildFinishedOn = tt.endTime - } - - err := verifyCommonMetadata(prov02, &tt.workflow) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) - } - - prov1 := &slsav10.ProvenanceV1{} + prov := &testProvenance{} if tt.invocationID != nil { - prov1.Predicate.RunDetails.BuildMetadata.InvocationID = *tt.invocationID + prov.buildInvocationID = *tt.invocationID } if tt.startTime != nil { - prov1.Predicate.RunDetails.BuildMetadata.StartedOn = tt.startTime + prov.buildStartTime = tt.startTime } if tt.endTime != nil { - prov1.Predicate.RunDetails.BuildMetadata.FinishedOn = tt.endTime + prov.buildFinishTime = tt.endTime } - err = verifyCommonMetadata(prov1, &tt.workflow) - if !errCmp(err, tt.err) { + if err := verifyCommonMetadata(prov, &tt.workflow); !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) } }) @@ -383,15 +296,12 @@ func Test_verifyV02Metadata(t *testing.T) { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() - metadata := tt.metadata || tt.reproducible || tt.parameters || tt.environment || tt.materials - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{}, - } + prov02 := &testProvenanceV02{} if metadata { - prov02.Predicate.Metadata = &intotov02.ProvenanceMetadata{ + prov02.predicate.Metadata = &intotov02.ProvenanceMetadata{ Completeness: intotov02.ProvenanceComplete{ Parameters: tt.parameters, Materials: tt.materials, @@ -400,8 +310,7 @@ func Test_verifyV02Metadata(t *testing.T) { Reproducible: tt.reproducible, } } - err := verifyV02Metadata(prov02) - if !errCmp(err, tt.err) { + if err := verifyV02Metadata(prov02); !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) } }) @@ -442,11 +351,9 @@ func Test_verifyV02Parameters(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{}, - } + prov02 := &testProvenanceV02{} if tt.present || len(tt.value) > 0 { - prov02.Predicate.Invocation.Parameters = tt.value + prov02.predicate.Invocation.Parameters = tt.value } err := verifyV02Parameters(prov02) if !errCmp(err, tt.err) { @@ -490,11 +397,9 @@ func Test_verifyV02BuildConfig(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{}, - } + prov02 := &testProvenanceV02{} if tt.present || len(tt.value) > 0 { - prov02.Predicate.BuildConfig = tt.value + prov02.predicate.BuildConfig = tt.value } err := verifyV02BuildConfig(prov02) if !errCmp(err, tt.err) { @@ -617,52 +522,43 @@ func Test_verifyMetadata(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - metadata := tt.metadata || tt.invocationID != nil || tt.startTime != nil || - tt.endTime != nil || tt.reproducible || tt.parameters || - tt.environment || tt.materials - - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{}, + prov02 := &testProvenanceV02{} + if tt.invocationID != nil { + prov02.buildInvocationID = *tt.invocationID } - if metadata { - prov02.Predicate.Metadata = &intotov02.ProvenanceMetadata{ - Completeness: intotov02.ProvenanceComplete{ - Parameters: tt.parameters, - Materials: tt.materials, - Environment: tt.environment, - }, - Reproducible: tt.reproducible, - } - if tt.invocationID != nil { - prov02.Predicate.Metadata.BuildInvocationID = *tt.invocationID - } - if tt.startTime != nil { - prov02.Predicate.Metadata.BuildStartedOn = tt.startTime - } - if tt.endTime != nil { - prov02.Predicate.Metadata.BuildFinishedOn = tt.endTime - } + if tt.startTime != nil { + prov02.buildStartTime = tt.startTime } - errV02 := verifyMetadata(prov02, &tt.workflow) - if !errCmp(errV02, tt.errV02) { - t.Errorf(cmp.Diff(errV02, tt.errV02)) + if tt.endTime != nil { + prov02.buildFinishTime = tt.endTime + } + + prov02.predicate.Metadata = &intotov02.ProvenanceMetadata{ + Completeness: intotov02.ProvenanceComplete{ + Parameters: tt.parameters, + Materials: tt.materials, + Environment: tt.environment, + }, + Reproducible: tt.reproducible, } - prov1 := &slsav10.ProvenanceV1{} + if err := verifyMetadata(prov02, &tt.workflow); !errCmp(err, tt.errV02) { + t.Errorf(cmp.Diff(err, tt.errV02)) + } + prov1 := &testProvenanceV1{} if tt.invocationID != nil { - prov1.Predicate.RunDetails.BuildMetadata.InvocationID = *tt.invocationID + prov1.buildInvocationID = *tt.invocationID } if tt.startTime != nil { - prov1.Predicate.RunDetails.BuildMetadata.StartedOn = tt.startTime + prov1.buildStartTime = tt.startTime } if tt.endTime != nil { - prov1.Predicate.RunDetails.BuildMetadata.FinishedOn = tt.endTime + prov1.buildFinishTime = tt.endTime } - errV01 := verifyMetadata(prov1, &tt.workflow) - if !errCmp(errV01, tt.errV01) { - t.Errorf(cmp.Diff(errV01, tt.errV01)) + if err := verifyMetadata(prov1, &tt.workflow); !errCmp(err, tt.errV01) { + t.Errorf(cmp.Diff(err, tt.errV01)) } }) } @@ -671,15 +567,15 @@ func Test_verifyMetadata(t *testing.T) { func Test_verifySystemParameters(t *testing.T) { t.Parallel() expectedWorkflow := WorkflowIdentity{ - BuildTrigger: "workflow_dispatch", - SubjectWorkflowRef: "laurentsimon/provenance-npm-test/.github/workflows/release.yml@refs/heads/main", - SubjectSha1: asStringPointer("b38894f2dda4355ea5606fccb166e61565e12a14"), - SourceRepository: "laurentsimon/provenance-npm-test", - SourceRef: asStringPointer("refs/heads/main"), - SourceID: asStringPointer("602223945"), - SourceOwnerID: asStringPointer("64505099"), - SourceSha1: "b38894f2dda4355ea5606fccb166e61565e12a14", - RunID: asStringPointer("4757060009/attempt/1"), + BuildTrigger: "workflow_dispatch", + SubjectWorkflow: Must(url.Parse(httpsGithubCom + "laurentsimon/provenance-npm-test/.github/workflows/release.yml@refs/heads/main")), + SubjectSha1: asStringPointer("b38894f2dda4355ea5606fccb166e61565e12a14"), + SourceRepository: "laurentsimon/provenance-npm-test", + SourceRef: asStringPointer("refs/heads/main"), + SourceID: asStringPointer("602223945"), + SourceOwnerID: asStringPointer("64505099"), + SourceSha1: "b38894f2dda4355ea5606fccb166e61565e12a14", + RunID: asStringPointer("4757060009/attempt/1"), } tests := []struct { name string @@ -1039,30 +935,12 @@ func Test_verifySystemParameters(t *testing.T) { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{ - Predicate: intotov02.ProvenancePredicate{ - Invocation: intotov02.ProvenanceInvocation{ - Environment: tt.environment, - }, - }, - }, - } - err := verifySystemParameters(prov02, &tt.workflow) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) + prov := &testProvenance{ + systemParameters: tt.environment, } - prov1 := &slsav10.ProvenanceV1{ - Predicate: intotov1.ProvenancePredicate{ - BuildDefinition: intotov1.ProvenanceBuildDefinition{ - InternalParameters: tt.environment, - }, - }, - } - err = verifySystemParameters(prov1, &tt.workflow) - if !errCmp(err, tt.err) { + if err := verifySystemParameters(prov, &tt.workflow); !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) } }) @@ -1072,16 +950,16 @@ func Test_verifySystemParameters(t *testing.T) { func Test_verifyProvenanceMatchesCertificate(t *testing.T) { t.Parallel() expectedWorkflow := WorkflowIdentity{ - BuildTrigger: "workflow_dispatch", - BuildConfigPath: asStringPointer("release/workflow/path"), - SubjectWorkflowRef: "path/to/trusted-builder@subject-ref", - SubjectSha1: asStringPointer("subject-sha"), - SourceRepository: "repo/name", - SourceRef: asStringPointer("source-ref"), - SourceID: asStringPointer("source-id"), - SourceOwnerID: asStringPointer("source-owner-id"), - SourceSha1: "source-sha", - RunID: asStringPointer("run-id/attempt/run-attempt"), + BuildTrigger: "workflow_dispatch", + BuildConfigPath: asStringPointer("release/workflow/path"), + SubjectWorkflow: Must(url.Parse(httpsGithubCom + "repo/name/release/workflow/path@subject-ref")), + SubjectSha1: asStringPointer("subject-sha"), + SourceRepository: "repo/name", + SourceRef: asStringPointer("source-ref"), + SourceID: asStringPointer("source-id"), + SourceOwnerID: asStringPointer("source-owner-id"), + SourceSha1: "source-sha", + RunID: asStringPointer("run-id/attempt/run-attempt"), } tests := []struct { name string @@ -1089,7 +967,7 @@ func Test_verifyProvenanceMatchesCertificate(t *testing.T) { numberResolvedDependencies int workflowTriggerPath string environment map[string]interface{} - workflow WorkflowIdentity + certificateIdentity WorkflowIdentity err error }{ { @@ -1110,18 +988,34 @@ func Test_verifyProvenanceMatchesCertificate(t *testing.T) { "GITHUB_RUN_ATTEMPT": "run-attempt", "GITHUB_RUN_ID": "run-id", "GITHUB_SHA": "source-sha", - "GITHUB_WORKFLOW_REF": "path/to/trusted-builder@subject-ref", + "GITHUB_WORKFLOW_REF": "repo/name/release/workflow/path@subject-ref", "GITHUB_WORKFLOW_SHA": "subject-sha", }, - workflow: expectedWorkflow, + certificateIdentity: expectedWorkflow, + }, + { + name: "correct provenance no env", + subject: []intoto.Subject{ + { + Digest: intotocommon.DigestSet{"sha512": "abcd"}, + }, + }, + numberResolvedDependencies: 1, + workflowTriggerPath: "release/workflow/path", + certificateIdentity: expectedWorkflow, }, { name: "unknown field", + subject: []intoto.Subject{ + { + Digest: intotocommon.DigestSet{"sha512": "abcd"}, + }, + }, environment: map[string]interface{}{ "SOMETHING": "workflow_dispatch", }, - workflow: expectedWorkflow, - err: serrors.ErrorMismatchCertificate, + certificateIdentity: expectedWorkflow, + err: serrors.ErrorMismatchCertificate, }, { name: "too many resolved dependencies", @@ -1132,7 +1026,7 @@ func Test_verifyProvenanceMatchesCertificate(t *testing.T) { }, numberResolvedDependencies: 2, workflowTriggerPath: "release/workflow/path", - workflow: expectedWorkflow, + certificateIdentity: expectedWorkflow, err: serrors.ErrorNonVerifiableClaim, }, { @@ -1144,7 +1038,7 @@ func Test_verifyProvenanceMatchesCertificate(t *testing.T) { }, numberResolvedDependencies: 1, workflowTriggerPath: "release/workflow/path", - workflow: expectedWorkflow, + certificateIdentity: expectedWorkflow, err: serrors.ErrorNonVerifiableClaim, }, { @@ -1156,8 +1050,20 @@ func Test_verifyProvenanceMatchesCertificate(t *testing.T) { }, numberResolvedDependencies: 1, workflowTriggerPath: "release/workflow/path2", - workflow: expectedWorkflow, - err: serrors.ErrorMismatchCertificate, + environment: map[string]interface{}{ + "GITHUB_EVENT_NAME": "workflow_dispatch", + "GITHUB_REF": "source-ref", + "GITHUB_REPOSITORY": "repo/name", + "GITHUB_REPOSITORY_ID": "source-id", + "GITHUB_REPOSITORY_OWNER_ID": "source-owner-id", + "GITHUB_RUN_ATTEMPT": "run-attempt", + "GITHUB_RUN_ID": "run-id", + "GITHUB_SHA": "source-sha", + "GITHUB_WORKFLOW_REF": "repo/name/release/workflow/path2@subject-ref", + "GITHUB_WORKFLOW_SHA": "subject-sha", + }, + certificateIdentity: expectedWorkflow, + err: serrors.ErrorMismatchCertificate, }, { name: "invalid trigger name", @@ -1171,60 +1077,23 @@ func Test_verifyProvenanceMatchesCertificate(t *testing.T) { environment: map[string]interface{}{ "GITHUB_EVENT_NAME": "workflow_dispatch2", }, - workflow: expectedWorkflow, - err: serrors.ErrorMismatchCertificate, + certificateIdentity: expectedWorkflow, + err: serrors.ErrorMismatchCertificate, }, } for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &slsav02.ProvenanceV02{ - &intoto.ProvenanceStatement{ - StatementHeader: intoto.StatementHeader{ - Subject: tt.subject, - }, - Predicate: intotov02.ProvenancePredicate{ - Invocation: intotov02.ProvenanceInvocation{ - Environment: tt.environment, - ConfigSource: intotov02.ConfigSource{ - EntryPoint: tt.workflowTriggerPath, - }, - }, - }, - }, - } - if tt.numberResolvedDependencies > 0 { - prov02.Predicate.Materials = make([]intotocommon.ProvenanceMaterial, tt.numberResolvedDependencies) + prov := &testProvenance{ + subjects: tt.subject, + noResolvedDeps: tt.numberResolvedDependencies, + buildTriggerPath: tt.workflowTriggerPath, + systemParameters: tt.environment, } - err := verifyProvenanceMatchesCertificate(prov02, &tt.workflow) - if !errCmp(err, tt.err) { - t.Errorf(cmp.Diff(err, tt.err)) - } - - prov1 := &slsav10.ProvenanceV1{ - StatementHeader: intoto.StatementHeader{ - Subject: tt.subject, - }, - Predicate: intotov1.ProvenancePredicate{ - BuildDefinition: intotov1.ProvenanceBuildDefinition{ - InternalParameters: tt.environment, - ExternalParameters: map[string]interface{}{ - // TODO(#566): verify fields for v1.0 provenance. - "workflow": map[string]string{ - "path": tt.workflowTriggerPath, - }, - }, - }, - }, - } - if tt.numberResolvedDependencies > 0 { - prov1.Predicate.BuildDefinition.ResolvedDependencies = make([]intotov1.ResourceDescriptor, tt.numberResolvedDependencies) - } - err = verifyProvenanceMatchesCertificate(prov1, &tt.workflow) - if !errCmp(err, tt.err) { + if err := verifyProvenanceMatchesCertificate(prov, &tt.certificateIdentity); !errCmp(err, tt.err) { t.Errorf(cmp.Diff(err, tt.err)) } }) diff --git a/verifiers/internal/gha/provenance_test.go b/verifiers/internal/gha/provenance_test.go index 8f994d3be..eb0c4e7c2 100644 --- a/verifiers/internal/gha/provenance_test.go +++ b/verifiers/internal/gha/provenance_test.go @@ -1,157 +1,212 @@ package gha import ( - "fmt" "os" - "strings" + "path/filepath" "testing" + "time" "github.com/google/go-cmp/cmp" intoto "github.com/in-toto/in-toto-golang/in_toto" slsacommon "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common" slsa02 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2" slsa1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" + "github.com/slsa-framework/slsa-verifier/v2/options" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" serrors "github.com/slsa-framework/slsa-verifier/v2/errors" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" - v02 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v0.2" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v1.0" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" ) -func provenanceFromBytes(payload []byte) (slsaprovenance.Provenance, error) { - env, err := EnvelopeFromBytes(payload) - if err != nil { - return nil, err - } - return slsaprovenance.ProvenanceFromEnvelope(env) +type testProvenance struct { + builderID string + buildType string + sourceURI string + triggerURI string + subjects []intoto.Subject + branch string + tag string + buildTriggerPath string + systemParameters map[string]any + buildInvocationID string + buildStartTime *time.Time + buildFinishTime *time.Time + noResolvedDeps int + workflowInputs map[string]any } -func Test_ProvenanceFromEnvelope(t *testing.T) { - t.Parallel() - tests := []struct { - name string - path string - expected error - }{ - { - name: "invalid dsse: not SLSA predicate", - path: "./testdata/dsse-not-slsa.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, - }, - { - name: "slsa 1.0 invalid dsse: not SLSA predicate", - path: "./testdata/dsse-not-slsa-v1.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, - }, - // TODO(#573): add more copliance tests. - } - for _, tt := range tests { - tt := tt // Re-initializing variable so it is not changed while executing the closure below - t.Run(tt.name, func(t *testing.T) { - t.Parallel() +func (p *testProvenance) BuilderID() (string, error) { return p.builderID, nil } +func (p *testProvenance) BuildType() (string, error) { return p.buildType, nil } +func (p *testProvenance) SourceURI() (string, error) { return p.sourceURI, nil } +func (p *testProvenance) TriggerURI() (string, error) { return p.triggerURI, nil } +func (p *testProvenance) Subjects() ([]intoto.Subject, error) { return p.subjects, nil } +func (p *testProvenance) GetBranch() (string, error) { return p.branch, nil } +func (p *testProvenance) GetTag() (string, error) { return p.tag, nil } +func (p *testProvenance) GetBuildTriggerPath() (string, error) { return p.buildTriggerPath, nil } +func (p *testProvenance) GetSystemParameters() (map[string]any, error) { + return p.systemParameters, nil +} +func (p *testProvenance) GetBuildInvocationID() (string, error) { return p.buildInvocationID, nil } +func (p *testProvenance) GetBuildStartTime() (*time.Time, error) { return p.buildStartTime, nil } +func (p *testProvenance) GetBuildFinishTime() (*time.Time, error) { return p.buildFinishTime, nil } +func (p *testProvenance) GetNumberResolvedDependencies() (int, error) { return p.noResolvedDeps, nil } +func (p *testProvenance) GetWorkflowInputs() (map[string]interface{}, error) { + return p.workflowInputs, nil +} - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - _, err = provenanceFromBytes(content) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected)) - } - }) - } +type testProvenanceV02 struct { + testProvenance + predicate slsa02.ProvenancePredicate } +func (p *testProvenanceV02) Predicate() slsa02.ProvenancePredicate { return p.predicate } + +type testProvenanceV1 struct { + testProvenance + predicate slsa1.ProvenancePredicate +} + +func (p *testProvenanceV1) Predicate() slsa1.ProvenancePredicate { return p.predicate } + func Test_VerifyDigest(t *testing.T) { t.Parallel() tests := []struct { name string - path string + prov iface.Provenance artifactHash string expected error }{ { - name: "invalid dsse: no sha256 subject digest", - path: "./testdata/dsse-no-subject-hash.intoto.jsonl", - artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: serrors.ErrorInvalidDssePayload, - }, - { - name: "invalid dsse: nil subject", - path: "./testdata/dsse-no-subject.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, - }, - { - name: "mismatched artifact hash with env", - path: "./testdata/dsse-valid.intoto.jsonl", - artifactHash: "1ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: serrors.ErrorMismatchHash, + name: "invalid short hash", + prov: &testProvenance{ + subjects: []intoto.Subject{ + { + Digest: slsacommon.DigestSet{ + "sha1": "4506290e2e8feb1f34b27a044f7cc863c830ef6b", + }, + }, + }, + }, + // NOTE: the hash is one character short of sha256 hash. + artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4", + expected: serrors.ErrorInvalidHash, }, { - name: "valid entry", - path: "./testdata/dsse-valid.intoto.jsonl", + name: "invalid dsse: no sha256 subject digest", + prov: &testProvenance{ + subjects: []intoto.Subject{ + { + Digest: slsacommon.DigestSet{ + "sha1": "4506290e2e8feb1f34b27a044f7cc863c830ef6b", + }, + }, + }, + }, artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: nil, - }, - { - name: "valid entry multiple subjects last entry", - path: "./testdata/dsse-valid-multi-subjects.intoto.jsonl", - artifactHash: "03e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: nil, - }, - { - name: "valid multiple subjects second entry", - path: "./testdata/dsse-valid-multi-subjects.intoto.jsonl", - artifactHash: "02e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: nil, - }, - { - name: "multiple subjects invalid hash", - path: "./testdata/dsse-valid-multi-subjects.intoto.jsonl", - artifactHash: "04e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", expected: serrors.ErrorMismatchHash, }, + { name: "invalid dsse: nil subject", - path: "./testdata/dsse-no-subject-v1.intoto.jsonl", - artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: serrors.ErrorInvalidDssePayload, - }, - { - name: "invalid dsse: no sha256 subject digest", - path: "./testdata/dsse-no-subject-hash-v1.intoto.jsonl", + prov: &testProvenance{}, artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: serrors.ErrorInvalidDssePayload, + expected: serrors.ErrorMismatchHash, }, { - name: "mismatched artifact hash with env", - path: "./testdata/dsse-valid-v1.intoto.jsonl", + name: "mismatched artifact hash", + prov: &testProvenance{ + subjects: []intoto.Subject{ + { + Digest: slsacommon.DigestSet{ + "sha256": "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + }, + }, artifactHash: "1ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", expected: serrors.ErrorMismatchHash, }, - { - name: "valid entry", - path: "./testdata/dsse-valid-v1.intoto.jsonl", + name: "valid hash", + prov: &testProvenance{ + subjects: []intoto.Subject{ + { + Digest: slsacommon.DigestSet{ + "sha256": "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + }, + }, artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: nil, }, - { - name: "valid entry multiple subjects last entry", - path: "./testdata/dsse-valid-multi-subjects-v1.intoto.jsonl", - artifactHash: "03e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: nil, + name: "valid entry multiple subjects last entry", + prov: &testProvenance{ + subjects: []intoto.Subject{ + { + Digest: slsacommon.DigestSet{ + "sha256": "03e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + { + Digest: slsacommon.DigestSet{ + "sha1": "4506290e2e8feb1f34b27a044f7cc863c830ef6b", + }, + }, + { + Digest: slsacommon.DigestSet{ + "sha256": "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + }, + }, + artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", }, { - name: "valid multiple subjects second entry", - path: "./testdata/dsse-valid-multi-subjects-v1.intoto.jsonl", - artifactHash: "02e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", - expected: nil, + name: "valid multiple subjects second entry", + prov: &testProvenance{ + subjects: []intoto.Subject{ + { + Digest: slsacommon.DigestSet{ + "sha256": "03e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + { + Digest: slsacommon.DigestSet{ + "sha256": "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + { + Digest: slsacommon.DigestSet{ + "sha1": "4506290e2e8feb1f34b27a044f7cc863c830ef6b", + }, + }, + }, + }, + artifactHash: "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", }, { - name: "multiple subjects invalid hash", - path: "./testdata/dsse-valid-multi-subjects-v1.intoto.jsonl", + name: "multiple subjects invalid hash", + prov: &testProvenance{ + subjects: []intoto.Subject{ + { + Digest: slsacommon.DigestSet{ + "sha256": "03e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + { + Digest: slsacommon.DigestSet{ + "sha256": "0ae7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", + }, + }, + { + Digest: slsacommon.DigestSet{ + "sha1": "4506290e2e8feb1f34b27a044f7cc863c830ef6b", + }, + }, + }, + }, artifactHash: "04e7e4fa71686538440012ee36a2634dbaa19df2dd16a466f52411fb348bbc4e", expected: serrors.ErrorMismatchHash, }, @@ -161,17 +216,7 @@ func Test_VerifyDigest(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - prov, err := provenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("provenanceFromBytes: %w", err)) - } - - err = verifyDigest(prov, tt.artifactHash) - if !errCmp(err, tt.expected) { + if err := verifyDigest(tt.prov, tt.artifactHash); !errCmp(err, tt.expected) { t.Errorf(cmp.Diff(err, tt.expected)) } }) @@ -182,286 +227,160 @@ func Test_verifySourceURI(t *testing.T) { t.Parallel() tests := []struct { name string - prov *intoto.ProvenanceStatement - sourceURI string + provBuildType string + provMaterialsURI string + provTriggerURI string + expectedSourceURI string allowNoMaterialRef bool - expected error - // v1 provenance does not include materials - skipv1 bool + err error }{ { - name: "source has no @", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorMalformedURI, + name: "source has no @", + provMaterialsURI: "git+https://github.com/some/repo", + provTriggerURI: "git+https://github.com/some/repo", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "empty materials", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorInvalidDssePayload, - skipv1: true, + name: "empty materials", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "empty configSource", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorMalformedURI, + name: "empty configSource", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "empty uri materials", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorMalformedURI, + name: "empty uri materials", + provMaterialsURI: " ", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "no tag uri materials", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorMalformedURI, + name: "no tag uri materials", + provTriggerURI: "git+https://github.com/some/repo", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "no tag uri configSource", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorMalformedURI, + name: "no tag uri configSource", + provMaterialsURI: "git+https://github.com/some/repo", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "match source", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", + name: "not github repo", + provTriggerURI: "git+https://notgithub.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://notgithub.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://notgithub.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "match source no git", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "https://github.com/some/repo", + name: "match source", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", }, { - name: "match source no git no material ref", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo", - }, - }, - }, - }, - allowNoMaterialRef: true, - sourceURI: "https://github.com/some/repo", + name: "match source no git", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "https://github.com/some/repo", }, { - name: "match source no git no material ref ref not allowed", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo", - }, - }, - }, - }, - sourceURI: "https://github.com/some/repo", - expected: serrors.ErrorMalformedURI, - skipv1: true, + name: "match source no git no material ref (npm)", + provBuildType: common.NpmCLIBuildTypeV1, + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo", + expectedSourceURI: "https://github.com/some/repo", }, { - name: "match source no git+https", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "github.com/some/repo", + name: "mismatch source material ref (npm)", + provBuildType: common.NpmCLIBuildTypeV1, + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.4", + expectedSourceURI: "https://github.com/some/repo", + err: serrors.ErrorInvalidDssePayload, }, { - name: "match source no repo", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "some/repo", - expected: serrors.ErrorMalformedURI, + name: "match source no git no material ref (byob)", + provBuildType: common.BYOBBuildTypeV0, + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo", + expectedSourceURI: "https://github.com/some/repo", }, { - name: "mismatch materials configSource tag", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/repo@v1.2.4", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - skipv1: true, - expected: serrors.ErrorInvalidDssePayload, + name: "mismatch source material ref (byob)", + provBuildType: common.BYOBBuildTypeV0, + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.4", + expectedSourceURI: "https://github.com/some/repo", + err: serrors.ErrorInvalidDssePayload, }, { - name: "mismatch materials configSource org", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/other/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorMismatchSource, + name: "match source no git no material ref", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo", + expectedSourceURI: "https://github.com/some/repo", + err: serrors.ErrorMalformedURI, }, { - name: "mismatch materials configSource name", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://github.com/some/other@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "git+https://github.com/some/repo", - expected: serrors.ErrorMismatchSource, + name: "match source no git+https", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "github.com/some/repo", }, { - name: "not github.com repo", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Invocation: slsa02.ProvenanceInvocation{ - ConfigSource: slsa02.ConfigSource{ - URI: "git+https://not-github.com/some/repo@v1.2.3", - }, - }, - Materials: []slsacommon.ProvenanceMaterial{ - { - URI: "git+https://not-github.com/some/repo@v1.2.3", - }, - }, - }, - }, - sourceURI: "git+https://not-github.com/some/repo", - expected: serrors.ErrorMalformedURI, + name: "match source no repo", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "some/repo", + err: serrors.ErrorMalformedURI, + }, + { + name: "mismatch materials configSource tag", + provTriggerURI: "git+https://github.com/some/repo@v1.2.4", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "mismatch materials configSource org", + provTriggerURI: "git+https://github.com/other/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMismatchSource, + }, + { + name: "mismatch configSource materials org", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/other/repo@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMismatchSource, + }, + { + name: "mismatch materials configSource name", + provTriggerURI: "git+https://github.com/some/other@v1.2.3", + provMaterialsURI: "git+https://github.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMismatchSource, + }, + { + name: "mismatch configSource materials name", + provTriggerURI: "git+https://github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://github.com/some/other@v1.2.3", + expectedSourceURI: "git+https://github.com/some/repo", + err: serrors.ErrorMismatchSource, + }, + { + name: "not github.com repo", + provTriggerURI: "git+https://not-github.com/some/repo@v1.2.3", + provMaterialsURI: "git+https://not-github.com/some/repo@v1.2.3", + expectedSourceURI: "git+https://not-github.com/some/repo", + err: serrors.ErrorMalformedURI, }, } for _, tt := range tests { @@ -469,239 +388,223 @@ func Test_verifySourceURI(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - prov02 := &v02.ProvenanceV02{ - ProvenanceStatement: tt.prov, - } - - err := verifySourceURI(prov02, tt.sourceURI, tt.allowNoMaterialRef) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected)) - } - - if tt.skipv1 { - return + prov02 := &testProvenance{ + buildType: tt.provBuildType, + sourceURI: tt.provMaterialsURI, + triggerURI: tt.provTriggerURI, } - // Update to v1 SLSA provenance. - prov1 := &v1.ProvenanceV1{ - Predicate: slsa1.ProvenancePredicate{ - BuildDefinition: slsa1.ProvenanceBuildDefinition{ - ExternalParameters: map[string]interface{}{ - "source": slsa1.ResourceDescriptor{ - URI: tt.prov.Predicate.Invocation.ConfigSource.URI, - }, - }, - }, - }, - } - err = verifySourceURI(prov1, tt.sourceURI, tt.allowNoMaterialRef) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected)) + err := verifySourceURI(prov02, tt.expectedSourceURI) + if !errCmp(err, tt.err) { + t.Errorf(cmp.Diff(err, tt.err)) } }) } } -func Test_verifyBuilderIDExactMatch(t *testing.T) { - t.Parallel() +func Test_isValidDelegatorBuilderID(t *testing.T) { tests := []struct { - name string - prov *intoto.ProvenanceStatement - id string - expected error + name string + builderID string + sourceURI string + testingEnabled bool + err error }{ { - name: "match no version", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Builder: slsacommon.ProvenanceBuilder{ - ID: "some/builderID", - }, - }, - }, - id: "some/builderID", + name: "no @", + builderID: "some/builderID", + sourceURI: "git+" + httpsGithubCom + e2eTestRepository, + err: serrors.ErrorInvalidBuilderID, }, { - name: "match with tag", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Builder: slsacommon.ProvenanceBuilder{ - ID: "some/builderID@v1.2.3", - }, - }, - }, - id: "some/builderID@v1.2.3", + name: "invalid ref", + builderID: "some/builderID@v1.2.3", + sourceURI: "git+" + httpsGithubCom + e2eTestRepository, + err: serrors.ErrorInvalidRef, }, { - name: "same builderID mismatch version", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Builder: slsacommon.ProvenanceBuilder{ - ID: "some/builderID@v1.2.3", - }, - }, - }, - id: "some/builderID@v1.2.4", - expected: serrors.ErrorMismatchBuilderID, - // TODO(#189): this should fail. + name: "invalid ref not tag", + builderID: "some/builderID@refs/head/v1.2.3", + sourceURI: "git+" + httpsGithubCom + e2eTestRepository, + err: serrors.ErrorInvalidRef, }, { - name: "mismatch builderID same version", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Builder: slsacommon.ProvenanceBuilder{ - ID: "tome/builderID@v1.2.3", - }, - }, - }, - id: "some/builderID@v1.2.3", - expected: serrors.ErrorMismatchBuilderID, + name: "invalid ref not full semver", + builderID: "some/builderID@refs/heads/v1.2", + sourceURI: "git+" + httpsGithubCom + e2eTestRepository, + err: serrors.ErrorInvalidRef, }, { - name: "empty prov builderID", - prov: &intoto.ProvenanceStatement{}, - id: "some/builderID", - expected: serrors.ErrorMismatchBuilderID, + name: "valid builder", + sourceURI: "git+" + httpsGithubCom + e2eTestRepository, + builderID: "some/builderID@refs/tags/v1.2.3", }, { - name: "empty expected builderID", - prov: &intoto.ProvenanceStatement{ - Predicate: slsa02.ProvenancePredicate{ - Builder: slsacommon.ProvenanceBuilder{ - ID: "tome/builderID@v1.2.3", - }, - }, - }, - id: "", - expected: serrors.ErrorMismatchBuilderID, + name: "invalid builder ref not e2e repo with testing enabled", + sourceURI: "git+" + httpsGithubCom + "some/repo", + builderID: "some/builderID@refs/heads/main", + testingEnabled: true, + err: serrors.ErrorInvalidRef, + }, + { + name: "invalid builder ref e2e repo with testing enabled", + sourceURI: "git+" + httpsGithubCom + e2eTestRepository, + builderID: "some/builderID@refs/heads/main", + testingEnabled: true, + }, + { + name: "invalid builder ref e2e repo", + sourceURI: "git+" + httpsGithubCom + e2eTestRepository, + builderID: "some/builderID@refs/heads/main", + err: serrors.ErrorInvalidRef, }, } + for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { - t.Parallel() - - prov := &v02.ProvenanceV02{ - ProvenanceStatement: tt.prov, - } - - err := verifyBuilderIDExactMatch(prov, tt.id) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected)) + prov := &testProvenance{ + builderID: tt.builderID, + sourceURI: tt.sourceURI, } - // Update to v1 SLSA provenance. - prov1 := &v1.ProvenanceV1{ - Predicate: slsa1.ProvenancePredicate{ - RunDetails: slsa1.ProvenanceRunDetails{ - Builder: slsa1.Builder{ - ID: tt.prov.Predicate.Builder.ID, - }, - }, - }, + if tt.testingEnabled { + t.Setenv("SLSA_VERIFIER_TESTING", "1") + } else { + // Ensure that the variable is not set. + t.Setenv("SLSA_VERIFIER_TESTING", "") } - err = verifyBuilderIDExactMatch(prov1, tt.id) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected)) + err := isValidDelegatorBuilderID(prov) + if !errCmp(err, tt.err) { + t.Errorf(cmp.Diff(err, tt.err)) } }) } } -func Test_VerifyBranch(t *testing.T) { +func Test_verifyBuilderIDExactMatch(t *testing.T) { t.Parallel() tests := []struct { - name string - path string - branch string - expected error + name string + builderID string + expectedID string + err error }{ { - name: "ref main", - path: "./testdata/dsse-main-ref.intoto.jsonl", - branch: "main", + name: "match no version", + builderID: "some/builderID", + expectedID: "some/builderID", }, { - name: "ref branch3", - path: "./testdata/dsse-branch3-ref.intoto.jsonl", - branch: "branch3", + name: "match with tag", + builderID: "some/builderID@v1.2.3", + expectedID: "some/builderID@v1.2.3", }, { - name: "invalid ref type", - path: "./testdata/dsse-invalid-ref-type.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, + name: "same builderID mismatch version", + builderID: "some/builderID@v1.2.3", + expectedID: "some/builderID@v1.2.4", + err: serrors.ErrorMismatchBuilderID, + // TODO(#189): this should fail. }, { - name: "tag branch2 push trigger", - path: "./testdata/dsse-branch2-tag.intoto.jsonl", - branch: "branch2", + name: "mismatch builderID same version", + builderID: "tome/builderID@v1.2.3", + expectedID: "some/builderID@v1.2.3", + err: serrors.ErrorMismatchBuilderID, }, { - name: "v10.0.1 release trigger", - path: "./testdata/dsse-v10.0.1-release.intoto.jsonl", - branch: "main", + name: "empty prov builderID", + builderID: "", + expectedID: "some/builderID", + err: serrors.ErrorMismatchBuilderID, }, { - name: "from commit push - no branch", - path: "./testdata/dsse-annotated-tag.intoto.jsonl", - branch: "main", - expected: serrors.ErrorMismatchBranch, + name: "empty expected builderID", + builderID: "tome/builderID@v1.2.3", + expectedID: "", + err: serrors.ErrorMismatchBuilderID, }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + prov := &testProvenance{ + builderID: tt.builderID, + } + + err := verifyBuilderIDExactMatch(prov, tt.expectedID) + if !errCmp(err, tt.err) { + t.Errorf(cmp.Diff(err, tt.err)) + } + }) + } +} +func Test_VerifyBranch(t *testing.T) { + t.Parallel() + tests := []struct { + name string + prov iface.Provenance + branch string + expected error + }{ { - name: "ref main", - path: "./testdata/dsse-main-ref-v1.intoto.jsonl", - branch: "main", + name: "branch slsa1", + prov: &testProvenance{ + branch: "refs/heads/slsa1", + }, + branch: "slsa1", }, { - name: "ref main case-sensitive", - path: "./testdata/dsse-main-ref-v1.intoto.jsonl", - branch: "Main", + name: "branch mismatch", + prov: &testProvenance{ + branch: "refs/heads/slsa1", + }, + branch: "slsa2", expected: serrors.ErrorMismatchBranch, }, - { - name: "invalid ref type", - path: "./testdata/dsse-invalid-ref-type-v1.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, + name: "case sensitive branch mismatch", + prov: &testProvenance{ + branch: "refs/heads/slsa1", + }, + branch: "SLSA2", + expected: serrors.ErrorMismatchBranch, }, - { - name: "tag branch2 push trigger", - path: "./testdata/dsse-branch2-tag-v1.intoto.jsonl", - branch: "branch2", + name: "invalid ref type", + prov: &testProvenance{ + branch: "refs/tags/slsa1", + }, + branch: "slsa1", + expected: serrors.ErrorInvalidRef, }, - { - name: "v10.0.1 release trigger", - path: "./testdata/dsse-v10.0.1-release-v1.intoto.jsonl", - branch: "main", + name: "ref empty", + prov: &testProvenance{ + branch: "", + }, + expected: serrors.ErrorInvalidRef, }, - { - name: "from commit push - no branch", - path: "./testdata/dsse-annotated-tag-v1.intoto.jsonl", - branch: "main", - expected: serrors.ErrorMismatchBranch, + name: "branch empty", + prov: &testProvenance{ + branch: "refs/heads/", + }, + expected: serrors.ErrorInvalidRef, }, } + for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - prov, err := provenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("provenanceFromBytes: %w", err)) - } - - err = VerifyBranch(prov, tt.branch) - if !errCmp(err, tt.expected) { + if err := VerifyBranch(tt.prov, tt.branch); !errCmp(err, tt.expected) { t.Errorf(cmp.Diff(err, tt.expected)) } }) @@ -712,13 +615,19 @@ func Test_VerifyWorkflowInputs(t *testing.T) { t.Parallel() tests := []struct { name string - path string + prov iface.Provenance inputs map[string]string expected error }{ { name: "match all", - path: "./testdata/dsse-workflow-inputs.intoto.jsonl", + prov: &testProvenance{ + workflowInputs: map[string]any{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, + }, inputs: map[string]string{ "release_version": "v1.2.3", "some_bool": "true", @@ -727,7 +636,13 @@ func Test_VerifyWorkflowInputs(t *testing.T) { }, { name: "match subset", - path: "./testdata/dsse-workflow-inputs.intoto.jsonl", + prov: &testProvenance{ + workflowInputs: map[string]any{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, + }, inputs: map[string]string{ "release_version": "v1.2.3", "some_integer": "123", @@ -735,7 +650,13 @@ func Test_VerifyWorkflowInputs(t *testing.T) { }, { name: "missing field", - path: "./testdata/dsse-workflow-inputs.intoto.jsonl", + prov: &testProvenance{ + workflowInputs: map[string]any{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, + }, inputs: map[string]string{ "release_version": "v1.2.3", "missing_field": "123", @@ -744,7 +665,13 @@ func Test_VerifyWorkflowInputs(t *testing.T) { }, { name: "mismatch field release_version", - path: "./testdata/dsse-workflow-inputs.intoto.jsonl", + prov: &testProvenance{ + workflowInputs: map[string]any{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, + }, inputs: map[string]string{ "release_version": "v1.2.4", "some_integer": "123", @@ -753,61 +680,28 @@ func Test_VerifyWorkflowInputs(t *testing.T) { }, { name: "mismatch field some_integer", - path: "./testdata/dsse-workflow-inputs.intoto.jsonl", - inputs: map[string]string{ - "release_version": "v1.2.3", - "some_integer": "124", - }, - expected: serrors.ErrorMismatchWorkflowInputs, - }, - { - name: "not workflow_dispatch trigger", - path: "./testdata/dsse-workflow-inputs-wrong-trigger.intoto.jsonl", - inputs: map[string]string{ - "release_version": "v1.2.3", - "some_bool": "true", - "some_integer": "123", - }, - expected: serrors.ErrorMismatchWorkflowInputs, - }, - { - name: "match all", - path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", - inputs: map[string]string{ - "release_version": "v1.2.3", - "some_bool": "true", - "some_integer": "123", - }, - }, - { - name: "match subset", - path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", - inputs: map[string]string{ - "release_version": "v1.2.3", - "some_integer": "123", + prov: &testProvenance{ + workflowInputs: map[string]any{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, }, - }, - { - name: "missing field", - path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", inputs: map[string]string{ "release_version": "v1.2.3", - "missing_field": "123", - }, - expected: serrors.ErrorMismatchWorkflowInputs, - }, - { - name: "mismatch field release_version", - path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", - inputs: map[string]string{ - "release_version": "v1.2.4", - "some_integer": "123", + "some_integer": "124", }, expected: serrors.ErrorMismatchWorkflowInputs, }, { name: "mismatch field some_integer", - path: "./testdata/dsse-workflow-inputs-v1.intoto.jsonl", + prov: &testProvenance{ + workflowInputs: map[string]any{ + "release_version": "v1.2.3", + "some_bool": "true", + "some_integer": "123", + }, + }, inputs: map[string]string{ "release_version": "v1.2.3", "some_integer": "124", @@ -815,8 +709,10 @@ func Test_VerifyWorkflowInputs(t *testing.T) { expected: serrors.ErrorMismatchWorkflowInputs, }, { - name: "not workflow_dispatch trigger", - path: "./testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl", + name: "no inputs", + prov: &testProvenance{ + workflowInputs: map[string]any{}, + }, inputs: map[string]string{ "release_version": "v1.2.3", "some_bool": "true", @@ -830,17 +726,7 @@ func Test_VerifyWorkflowInputs(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - prov, err := provenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("provenanceFromBytes: %w", err)) - } - - err = VerifyWorkflowInputs(prov, tt.inputs) - if !errCmp(err, tt.expected) { + if err := VerifyWorkflowInputs(tt.prov, tt.inputs); !errCmp(err, tt.expected) { t.Errorf(cmp.Diff(err, tt.expected)) } }) @@ -851,83 +737,63 @@ func Test_VerifyTag(t *testing.T) { t.Parallel() tests := []struct { name string - path string + prov iface.Provenance tag string expected error }{ - { - name: "ref main", - path: "./testdata/dsse-main-ref.intoto.jsonl", - expected: serrors.ErrorMismatchTag, - }, - { - name: "ref branch3", - path: "./testdata/dsse-branch3-ref.intoto.jsonl", - expected: serrors.ErrorMismatchTag, - }, - { - name: "invalid ref type", - path: "./testdata/dsse-invalid-ref-type.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, - }, { name: "tag vslsa1", - path: "./testdata/dsse-vslsa1-tag.intoto.jsonl", - tag: "vslsa1", - }, - { - name: "ref branch3", - path: "./testdata/dsse-branch3-ref-v1.intoto.jsonl", - expected: serrors.ErrorMismatchTag, + prov: &testProvenance{ + tag: "refs/tags/vslsa1", + }, + tag: "vslsa1", }, { - name: "ref main", - path: "./testdata/dsse-main-ref-v1.intoto.jsonl", + name: "tag mismatch", + prov: &testProvenance{ + tag: "refs/tags/vslsa1", + }, + tag: "vslsa2", expected: serrors.ErrorMismatchTag, }, { - name: "ref branch3", - path: "./testdata/dsse-branch3-ref-v1.intoto.jsonl", + name: "case sensitive tag mismatch", + prov: &testProvenance{ + tag: "refs/tags/vslsa1", + }, + tag: "vSLSA2", expected: serrors.ErrorMismatchTag, }, { - name: "invalid ref type", - path: "./testdata/dsse-invalid-ref-type-v1.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, - }, - { - name: "tag vSLSA1 case-sensitive", - path: "./testdata/dsse-vslsa1-tag.intoto.jsonl", - tag: "vSLSA1", - expected: serrors.ErrorMismatchTag, + name: "invalid ref type", + prov: &testProvenance{ + tag: "refs/heads/vslsa1", + }, + tag: "vslsa1", + expected: serrors.ErrorInvalidRef, }, { - name: "tag vslsa1", - path: "./testdata/dsse-vslsa1-tag-v1.intoto.jsonl", - tag: "vslsa1", + name: "ref empty", + prov: &testProvenance{ + tag: "", + }, + expected: serrors.ErrorInvalidRef, }, { - name: "case sensitive", - path: "./testdata/dsse-vslsa1-tag-v1.intoto.jsonl", - tag: "vslsa1", + name: "tag empty", + prov: &testProvenance{ + tag: "refs/tags/", + }, + expected: serrors.ErrorInvalidRef, }, } + for _, tt := range tests { tt := tt // Re-initializing variable so it is not changed while executing the closure below t.Run(tt.name, func(t *testing.T) { t.Parallel() - content, err := os.ReadFile(tt.path) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - prov, err := provenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("provenanceFromBytes: %w", err)) - } - - err = VerifyTag(prov, tt.tag) - if !errCmp(err, tt.expected) { + if err := VerifyTag(tt.prov, tt.tag); !errCmp(err, tt.expected) { t.Errorf(cmp.Diff(err, tt.expected)) } }) @@ -938,306 +804,404 @@ func Test_VerifyVersionedTag(t *testing.T) { t.Parallel() tests := []struct { name string - path string + prov iface.Provenance tag string expected error }{ { - name: "ref main", - path: "./testdata/dsse-main-ref.intoto.jsonl", - expected: serrors.ErrorInvalidSemver, + name: "no tag", + prov: &testProvenance{}, tag: "v1.2.3", + expected: serrors.ErrorInvalidRef, }, { - name: "ref branch3", - path: "./testdata/dsse-branch3-ref.intoto.jsonl", - expected: serrors.ErrorInvalidSemver, - tag: "v1.2.3", - }, - { - name: "tag v1.2 invalid versioning", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "tag v1.2 invalid expected version", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "1.2", expected: serrors.ErrorInvalidSemver, }, { - name: "invalid ref", - path: "./testdata/dsse-invalid-ref-type.intoto.jsonl", - expected: serrors.ErrorInvalidDssePayload, + name: "tag v1.2.3 invalid tag ref", + prov: &testProvenance{ + tag: "refs/heads/v1.2.3", + }, tag: "v1.2.3", + expected: serrors.ErrorInvalidRef, }, { - name: "tag vslsa1 invalid", - path: "./testdata/dsse-vslsa1-tag.intoto.jsonl", + name: "tag vslsa1 invalid", + prov: &testProvenance{ + tag: "refs/tags/vslsa1", + }, tag: "vslsa1", expected: serrors.ErrorInvalidSemver, }, { - name: "tag vslsa1 invalid semver", - path: "./testdata/dsse-vslsa1-tag.intoto.jsonl", + name: "tag vslsa1 invalid semver", + prov: &testProvenance{ + tag: "refs/tags/vslsa1", + }, tag: "v1.2.3", expected: serrors.ErrorInvalidSemver, }, { name: "tag v1.2.3 exact match", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", - tag: "v1.2.3", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, + tag: "v1.2.3", }, { name: "tag v1.2.3 match v1.2", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", - tag: "v1.2", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, + tag: "v1.2", }, { name: "tag v1.2.3 match v1", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", - tag: "v1", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, + tag: "v1", }, { - name: "tag v1.2.3 no match v2", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", + name: "tag v1.2.3 no match v2", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, tag: "v2", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2.3 no match v1.3", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", + name: "tag v1.2.3 no match v1.3", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, tag: "v1.3", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2.3 no match v1.2.4", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", + name: "tag v1.2.3 no match v1.2.4", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, tag: "v1.2.4", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2.3 no match v1.2.2", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", + name: "tag v1.2.3 no match v1.2.2", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, tag: "v1.2.2", expected: serrors.ErrorMismatchVersionedTag, }, { name: "tag v1.2 exact v1.2", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", - tag: "v1.2", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, + tag: "v1.2", }, { name: "tag v1.2 match v1", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", - tag: "v1", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, + tag: "v1", }, { - name: "tag v1.1 no match v1.3", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "tag v1.1 no match v1.3", + prov: &testProvenance{ + tag: "refs/tags/v1.3", + }, tag: "v1.1", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v0 no match v1.3", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "tag v0 no match v1.3", + prov: &testProvenance{ + tag: "refs/tags/v1.3", + }, tag: "v0", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2 no match v1.3", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "tag v1.3 no match v1.2", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1.3", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2 no match v1.2.3", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "tag v1.2.3 no match v1.2", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1.2.3", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2 match v1.2.0", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", - tag: "v1.2.0", + name: "tag v1.2.0 match v1.2", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, + tag: "v1.2.0", }, { name: "tag v1.2 match v1.2.0+123", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", - tag: "v1.2.0+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, + tag: "v1.2.0+123", }, { - name: "invalid v1.2+123", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "invalid v1.2+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1.2+123", expected: serrors.ErrorInvalidSemver, }, { - name: "invalid v1.2-alpha", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "invalid v1.2-alpha", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1.2-alpha", expected: serrors.ErrorInvalidSemver, }, { - name: "invalid v1-alpha", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "invalid v1-alpha", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1-alpha", expected: serrors.ErrorInvalidSemver, }, { - name: "invalid v1+123", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "invalid v1+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1+123", expected: serrors.ErrorInvalidSemver, }, { - name: "invalid v1-alpha+123", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "invalid v1-alpha+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1-alpha+123", expected: serrors.ErrorInvalidSemver, }, { - name: "invalid v1.2-alpha+123", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "invalid v1.2-alpha+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, + tag: "v1.2-alpha+123", expected: serrors.ErrorInvalidSemver, }, { name: "tag v1.2.3-alpha match v1.2.3-alpha", - path: "./testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl", - tag: "v1.2.3-alpha", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha", + }, + tag: "v1.2.3-alpha", }, { - name: "tag v1.2.3-alpha no match v1.2.3", - path: "./testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl", + name: "tag v1.2.3-alpha no match v1.2.3", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha", + }, tag: "v1.2.3", expected: serrors.ErrorMismatchVersionedTag, }, { name: "tag v1.2.3-alpha+123 match v1.2.3-alpha", - path: "./testdata/dsse-v1.2.3-alpha+123-tag.intoto.jsonl", - tag: "v1.2.3-alpha", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha+123", + }, + + tag: "v1.2.3-alpha", }, { name: "tag v1.2.3-alpha+123 match v1.2.3-alpha+123", - path: "./testdata/dsse-v1.2.3-alpha+123-tag.intoto.jsonl", - tag: "v1.2.3-alpha+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha+123", + }, + tag: "v1.2.3-alpha+123", }, { name: "tag v1.2.3-alpha+123 match v1.2.3-alpha+456", - path: "./testdata/dsse-v1.2.3-alpha+123-tag.intoto.jsonl", - tag: "v1.2.3-alpha+456", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha+123", + }, + tag: "v1.2.3-alpha+456", }, { name: "tag v1.2.3-alpha match v1.2.3-alpha+123", - path: "./testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl", - tag: "v1.2.3-alpha+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha", + }, + tag: "v1.2.3-alpha+123", }, { - name: "tag v1.2.3-alpha no match v1.2.3-beta+123", - path: "./testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl", + name: "tag v1.2.3-alpha no match v1.2.3-beta+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha", + }, tag: "v1.2.3-beta+123", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2.3+123 no match v1.2.3-alpha+123", - path: "./testdata/dsse-v1.2.3+123-tag.intoto.jsonl", + name: "tag v1.2.3+123 no match v1.2.3-alpha+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3+123", + }, tag: "v1.2.3-alpha+123", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2.3+123 no match v1.2.3-alpha", - path: "./testdata/dsse-v1.2.3+123-tag.intoto.jsonl", + name: "tag v1.2.3+123 no match v1.2.3-alpha", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3+123", + }, tag: "v1.2.3-alpha", expected: serrors.ErrorMismatchVersionedTag, }, { name: "tag v1.2.3+123 match v1.2.3+123", - path: "./testdata/dsse-v1.2.3+123-tag.intoto.jsonl", - tag: "v1.2.3+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3+123", + }, + tag: "v1.2.3+123", }, { name: "tag v1.2.3+123 match v1.2.3", - path: "./testdata/dsse-v1.2.3+123-tag.intoto.jsonl", - tag: "v1.2.3", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3+123", + }, + tag: "v1.2.3", }, { name: "tag v1.2.3+123 match v1.2.3+456", - path: "./testdata/dsse-v1.2.3+123-tag.intoto.jsonl", - tag: "v1.2.3+456", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3+123", + }, + tag: "v1.2.3+456", }, { - name: "tag v1.2.3 no match v1.2.3-aplha", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", + name: "tag v1.2.3 no match v1.2.3-aplha", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, tag: "v1.2.3-alpha", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2.3-alpha no match v1.2.3-beta", - path: "./testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl", + name: "tag v1.2.3-alpha no match v1.2.3-beta", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3-alpha", + }, tag: "v1.2.3-beta", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2 no match v1.2.3-beta", - path: "./testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl", + name: "tag v1.2 no match v1.2.3-beta", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1.2.3-beta", expected: serrors.ErrorMismatchVersionedTag, }, { name: "tag v1.2.3 match v1.2.3+123", - path: "./testdata/dsse-v1.2.3-tag.intoto.jsonl", - tag: "v1.2.3+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2.3", + }, + tag: "v1.2.3+123", }, { - name: "tag v1.2 no match v1.2.0-aplha+123", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "tag v1.2 no match v1.2.0-aplha+123", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v1.2.0-alpha+123", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1.2 no match v2", - path: "./testdata/dsse-v1.2-tag.intoto.jsonl", + name: "tag v1.2 no match v2", + prov: &testProvenance{ + tag: "refs/tags/v1.2", + }, tag: "v2", expected: serrors.ErrorMismatchVersionedTag, }, { name: "tag v1 exact match", - path: "./testdata/dsse-v1-tag.intoto.jsonl", - tag: "v1", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, + tag: "v1", }, { - name: "tag v1 no match v2", - path: "./testdata/dsse-v1-tag.intoto.jsonl", + name: "tag v1 no match v2", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, tag: "v2", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1 no match v1.2", - path: "./testdata/dsse-v1-tag.intoto.jsonl", + name: "tag v1 no match v1.2", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, tag: "v1.2", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1 no match v0", - path: "./testdata/dsse-v1-tag.intoto.jsonl", + name: "tag v1 no match v0", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, tag: "v0", expected: serrors.ErrorMismatchVersionedTag, }, { - name: "tag v1 no match v1.2.3", - path: "./testdata/dsse-v1-tag.intoto.jsonl", + name: "tag v1 no match v1.2.3", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, tag: "v1.2.3", expected: serrors.ErrorMismatchVersionedTag, }, { name: "tag v1 match v1.0", - path: "./testdata/dsse-v1-tag.intoto.jsonl", - tag: "v1.0", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, + tag: "v1.0", }, { name: "tag v1 match v1.0.0", - path: "./testdata/dsse-v1-tag.intoto.jsonl", - tag: "v1.0.0", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, + tag: "v1.0.0", }, { - name: "invalid v1-alpha", - path: "./testdata/dsse-v1-tag.intoto.jsonl", + name: "invalid v1-alpha", + prov: &testProvenance{ + tag: "refs/tags/v1", + }, tag: "v1-alpha", expected: serrors.ErrorInvalidSemver, }, @@ -1247,23 +1211,149 @@ func Test_VerifyVersionedTag(t *testing.T) { t.Run(tt.name, func(t *testing.T) { t.Parallel() - for _, version := range []string{"", "-v1"} { - pathParts := strings.Split(tt.path, ".intoto") - pathName := []string{pathParts[0] + version} - pathName = append(pathName, pathParts[1:]...) - content, err := os.ReadFile(strings.Join(pathName, ".intoto")) - if err != nil { - panic(fmt.Errorf("os.ReadFile: %w", err)) - } - prov, err := provenanceFromBytes(content) - if err != nil { - panic(fmt.Errorf("provenanceFromBytes: %w", err)) - } + if err := VerifyVersionedTag(tt.prov, tt.tag); !errCmp(err, tt.expected) { + t.Errorf(cmp.Diff(err, tt.expected)) + } + }) + } +} + +func Test_VerifyProvenance(t *testing.T) { + t.Parallel() + tests := []struct { + name string + envelopePath string + provenanceOpts *options.ProvenanceOpts + trustedBuilderIDName string + byob bool + expectedID *string + expected error + }{ + { + name: "Verify Trusted (slsa-github-generator) Bazel Builder (v1.8.0)", + envelopePath: "bazel-trusted-dsseEnvelope.build.slsa", + provenanceOpts: &options.ProvenanceOpts{ + ExpectedBranch: nil, + ExpectedTag: nil, + ExpectedVersionedTag: nil, + ExpectedDigest: "caaadba2846905ac477c777e96a636e1c2e067fdf6fed90ec9eeca4df18d6ed9", + ExpectedSourceURI: "github.com/enteraga6/slsa-lvl3-generic-provenance-with-bazel-example", + ExpectedBuilderID: "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.8.0", + ExpectedWorkflowInputs: map[string]string{}, + }, + byob: true, + trustedBuilderIDName: "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.8.0", + expectedID: nil, + }, + { + name: "Verify Un-Trusted (slsa-github-generator) Bazel Builder (from enteraga6/slsa-github-generator)", + envelopePath: "bazel-untrusted-dsseEnvelope.sigstore", + provenanceOpts: &options.ProvenanceOpts{ + ExpectedBranch: nil, + ExpectedTag: nil, + ExpectedVersionedTag: nil, + ExpectedDigest: "caaadba2846905ac477c777e96a636e1c2e067fdf6fed90ec9eeca4df18d6ed9", + ExpectedSourceURI: "github.com/enteraga6/slsa-lvl3-generic-provenance-with-bazel-example", + ExpectedBuilderID: "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.7.0", + ExpectedWorkflowInputs: map[string]string{}, + }, + byob: true, + trustedBuilderIDName: "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.7.0", + expectedID: nil, + expected: serrors.ErrorInvalidBuilderID, + }, + { + name: "Verify Trusted - Empty ExpectedBuilderID", + envelopePath: "bazel-trusted-dsseEnvelope.build.slsa", + provenanceOpts: &options.ProvenanceOpts{ + ExpectedBranch: nil, + ExpectedTag: nil, + ExpectedVersionedTag: nil, + ExpectedDigest: "caaadba2846905ac477c777e96a636e1c2e067fdf6fed90ec9eeca4df18d6ed9", + ExpectedSourceURI: "github.com/enteraga6/slsa-lvl3-generic-provenance-with-bazel-example", + ExpectedBuilderID: "", + ExpectedWorkflowInputs: map[string]string{}, + }, + byob: true, + trustedBuilderIDName: "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.8.0", + expectedID: nil, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + trustedBuilderID, tErr := utils.TrustedBuilderIDNew(tt.trustedBuilderIDName, true) + if tErr != nil { + t.Errorf("Provenance Verification FAILED. Error: %v", tErr) + } + + envelopeBytes, err := os.ReadFile(filepath.Join("testdata", tt.envelopePath)) + if err != nil { + t.Errorf("os.ReadFile: %v", err) + } - err = VerifyVersionedTag(prov, tt.tag) - if !errCmp(err, tt.expected) { - t.Errorf(cmp.Diff(err, tt.expected)) - } + env, err := EnvelopeFromBytes(envelopeBytes) + if err != nil { + t.Errorf("unexpected error parsing envelope %v", err) + } + + if err := VerifyProvenance(env, tt.provenanceOpts, trustedBuilderID, tt.byob, tt.expectedID); !errCmp(err, tt.expected) { + t.Errorf(cmp.Diff(err, tt.expected)) + } + }) + } +} + +func Test_VerifyUntrustedProvenance(t *testing.T) { + t.Parallel() + tests := []struct { + name string + envelopePath string + provenanceOpts *options.ProvenanceOpts + trustedBuilderIDName string + byob bool + expectedID *string + expected error + }{ + { + name: "Verify Un-Trusted (slsa-github-generator) Bazel Builder (from enteraga6/slsa-github-generator)", + envelopePath: "bazel-untrusted-dsseEnvelope.sigstore", + provenanceOpts: &options.ProvenanceOpts{ + ExpectedBranch: nil, + ExpectedTag: nil, + ExpectedVersionedTag: nil, + ExpectedDigest: "caaadba2846905ac477c777e96a636e1c2e067fdf6fed90ec9eeca4df18d6ed9", + ExpectedSourceURI: "github.com/enteraga6/slsa-lvl3-generic-provenance-with-bazel-example", + ExpectedBuilderID: "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.7.0", + ExpectedWorkflowInputs: map[string]string{}, + }, + byob: true, + trustedBuilderIDName: "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@refs/tags/v1.7.0", + expectedID: nil, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + trustedBuilderID, tErr := utils.TrustedBuilderIDNew(tt.trustedBuilderIDName, true) + if tErr != nil { + t.Errorf("Provenance Verification FAILED. Error: %v", tErr) + } + + envelopeBytes, err := os.ReadFile(filepath.Join("testdata", tt.envelopePath)) + if err != nil { + t.Errorf("os.ReadFile: %v", err) + } + + env, err := EnvelopeFromBytes(envelopeBytes) + if err != nil { + t.Errorf("unexpected error parsing envelope %v", err) + } + + if err := VerifyProvenance(env, tt.provenanceOpts, trustedBuilderID, tt.byob, tt.expectedID); errCmp(err, tt.expected) { + t.Errorf(cmp.Diff(err, tt.expected)) } }) } diff --git a/verifiers/internal/gha/slsaprovenance/common/builders.go b/verifiers/internal/gha/slsaprovenance/common/builders.go new file mode 100644 index 000000000..0d3bfb43b --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/common/builders.go @@ -0,0 +1,26 @@ +package common + +var trustedBuilderRepository = "https://github.com/slsa-framework/slsa-github-generator" + +var ( + // GenericGeneratorBuilderID is the builder ID for the Generic Generator. + GenericGeneratorBuilderID = trustedBuilderRepository + "/.github/workflows/generator_generic_slsa3.yml" + // ContainerGeneratorBuilderID is the builder ID for the Container Generator. + ContainerGeneratorBuilderID = trustedBuilderRepository + "/.github/workflows/generator_container_slsa3.yml" + // GoBuilderID is the SLSA builder ID for the Go Builder. + GoBuilderID = trustedBuilderRepository + "/.github/workflows/builder_go_slsa3.yml" + // ContainerBasedBuilderID is the SLSA builder ID for the Container-Based Builder. + ContainerBasedBuilderID = trustedBuilderRepository + "/.github/workflows/builder_container-based_slsa3.yml" + + // NpmCLILegacyBuilderID is the legacy builder ID for the npm CLI. + NpmCLILegacyBuilderID = "https://github.com/actions/runner" + // NpmCLIHostedBuilderID is the builder ID for the npm CLI on Hosted GitHub Actions. + NpmCLIHostedBuilderID = NpmCLILegacyBuilderID + "/github-hosted" + // NpmCLISelfHostedBuilderID is the builder ID for the npm CLI on Self-hosted GitHub Actions. + NpmCLISelfHostedBuilderID = NpmCLILegacyBuilderID + "/self-hosted" + + // GenericDelegatorBuilderID is the SLSA builder ID for the BYOB Generic Low-Permissions Delegated Builder. + GenericDelegatorBuilderID = trustedBuilderRepository + "/.github/workflows/delegator_generic_slsa3.yml" + // GenericLowPermsDelegatorBuilderID is the SLSA builder ID for the BYOB Generic Low-Permissions Delegated Builder. + GenericLowPermsDelegatorBuilderID = trustedBuilderRepository + "/.github/workflows/delegator_lowperms-generic_slsa3.yml" +) diff --git a/verifiers/internal/gha/slsaprovenance/common/buildtypes.go b/verifiers/internal/gha/slsaprovenance/common/buildtypes.go new file mode 100644 index 000000000..2ecf8f823 --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/common/buildtypes.go @@ -0,0 +1,30 @@ +package common + +var ( + // BYOBBuildTypeV0 is the base buildType for BYOB delegated builders. + BYOBBuildTypeV0 = "https://github.com/slsa-framework/slsa-github-generator/delegator-generic@v0" + + // ContainerBasedBuildTypeV01Draft is the buildType for the container-based builder. + ContainerBasedBuildTypeV01Draft = "https://slsa.dev/container-based-build/v0.1?draft" + + // GoBuilderBuildTypeV1 is the buildType for the Go builder. + GoBuilderBuildTypeV1 = "https://github.com/slsa-framework/slsa-github-generator/go@v1" + + // GenericGeneratorBuildTypeV1 is the buildType for the generic generator. + GenericGeneratorBuildTypeV1 = "https://github.com/slsa-framework/slsa-github-generator/generic@v1" + + // ContainerGeneratorBuildTypeV1 is the buildType for the container generator. + ContainerGeneratorBuildTypeV1 = "https://github.com/slsa-framework/slsa-github-generator/container@v1" + + // NpmCLIBuildTypeV1 is the buildType for provenance generated by the npm cli. + NpmCLIBuildTypeV1 = "https://github.com/npm/cli/gha@v1" +) + +// Legacy buildTypes. +var ( + // LegacyGoBuilderBuildTypeV1 is a legacy Go builder buildType. + LegacyGoBuilderBuildTypeV1 = "https://github.com/slsa-framework/slsa-github-generator-go@v1" + + // LegacyBuilderBuildTypeV1 is a legacy generic build type for slsa-github-generator. + LegacyBuilderBuildTypeV1 = "https://github.com/slsa-framework/slsa-github-generator@v1" +) diff --git a/verifiers/internal/gha/slsaprovenance/common.go b/verifiers/internal/gha/slsaprovenance/common/common.go similarity index 73% rename from verifiers/internal/gha/slsaprovenance/common.go rename to verifiers/internal/gha/slsaprovenance/common/common.go index d9be54f17..3e049a48f 100644 --- a/verifiers/internal/gha/slsaprovenance/common.go +++ b/verifiers/internal/gha/slsaprovenance/common/common.go @@ -1,4 +1,4 @@ -package slsaprovenance +package common import ( "fmt" @@ -8,11 +8,19 @@ import ( serrors "github.com/slsa-framework/slsa-verifier/v2/errors" ) +const ( + // ProvenanceV02Type is the SLSA v0.2 predicate type. + ProvenanceV02Type = "https://slsa.dev/provenance/v0.2" + + // ProvenanceV1Type is the SLSA v1.0 predicate type. + ProvenanceV1Type = slsa1.PredicateSLSAProvenance +) + // GetWorkflowInputs gets the workflow inputs from the GitHub environment map // and converts the keys to the necessary casing depending on predicate type. -func GetWorkflowInputs(environment map[string]any, predicateType string) (map[string]any, error) { +func GetWorkflowInputs(environment map[string]any, upperEnv bool) (map[string]any, error) { // Verify it's a workflow_dispatch trigger. - eventKey, err := convertKey("github_event_name", predicateType) + eventKey, err := convertKey("github_event_name", upperEnv) if err != nil { return nil, fmt.Errorf("%w: %s", serrors.ErrorMismatchWorkflowInputs, err) @@ -26,7 +34,7 @@ func GetWorkflowInputs(environment map[string]any, predicateType string) (map[st serrors.ErrorMismatchWorkflowInputs, triggerName) } - payload, err := GetEventPayload(environment, predicateType) + payload, err := GetEventPayload(environment, upperEnv) if err != nil { return nil, err } @@ -45,8 +53,8 @@ func GetWorkflowInputs(environment map[string]any, predicateType string) (map[st // GetEventPayload retrieves the GitHub event payload from the environment map // that contains the GitHub context payload. -func GetEventPayload(environment map[string]any, predicateType string) (map[string]any, error) { - eventPayloadKey, err := convertKey("github_event_payload", predicateType) +func GetEventPayload(environment map[string]any, upperEnv bool) (map[string]any, error) { + eventPayloadKey, err := convertKey("github_event_payload", upperEnv) if err != nil { return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) } @@ -63,15 +71,11 @@ func GetEventPayload(environment map[string]any, predicateType string) (map[stri return payload, nil } -func convertKey(key, predicateType string) (string, error) { - switch predicateType { - case slsa1.PredicateSLSAProvenance: +func convertKey(key string, upperEnv bool) (string, error) { + if upperEnv { return strings.ToUpper(key), nil - case ProvenanceV02Type: - return key, nil - default: - return "", fmt.Errorf("unrecognized predicate type %s", predicateType) } + return key, nil } func getAsAny(environment map[string]any, field string) (any, error) { @@ -83,8 +87,8 @@ func getAsAny(environment map[string]any, field string) (any, error) { return value, nil } -func getBranchForTag(environment map[string]any, predicateType string) (string, error) { - baseRefKey, err := convertKey("github_base_ref", predicateType) +func getBranchForTag(environment map[string]any, upperEnv bool) (string, error) { + baseRefKey, err := convertKey("github_base_ref", upperEnv) if err != nil { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) } @@ -100,7 +104,7 @@ func getBranchForTag(environment map[string]any, predicateType string) (string, } // Look at the event payload instead. - environmentKey, err := convertKey("github_event_name", predicateType) + environmentKey, err := convertKey("github_event_name", upperEnv) if err != nil { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) } @@ -109,7 +113,7 @@ func getBranchForTag(environment map[string]any, predicateType string) (string, return "", err } - payload, err := GetEventPayload(environment, predicateType) + payload, err := GetEventPayload(environment, upperEnv) if err != nil { return "", err } @@ -154,8 +158,9 @@ func getBranchForTag(environment map[string]any, predicateType string) (string, } } -func GetTag(environment map[string]any, predicateType string) (string, error) { - refTypeKey, err := convertKey("github_ref_type", predicateType) +// GetTag returns the triggering event's tag based on the given environment. +func GetTag(environment map[string]any, upperEnv bool) (string, error) { + refTypeKey, err := convertKey("github_ref_type", upperEnv) if err != nil { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) } @@ -169,19 +174,20 @@ func GetTag(environment map[string]any, predicateType string) (string, error) { case "branch": return "", nil case "tag": - refKey, err := convertKey("github_ref", predicateType) + refKey, err := convertKey("github_ref", upperEnv) if err != nil { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) } return GetAsString(environment, refKey) default: - return "", fmt.Errorf("%w: %s %s", serrors.ErrorInvalidDssePayload, + return "", fmt.Errorf("%w: %s %q", serrors.ErrorInvalidDssePayload, "unknown ref type", refType) } } -func GetBranch(environment map[string]any, predicateType string) (string, error) { - refTypeKey, err := convertKey("github_ref_type", predicateType) +// GetBranch returns the triggering event's branch based on the given environment. +func GetBranch(environment map[string]any, upperEnv bool) (string, error) { + refTypeKey, err := convertKey("github_ref_type", upperEnv) if err != nil { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) } @@ -193,24 +199,26 @@ func GetBranch(environment map[string]any, predicateType string) (string, error) switch refType { case "branch": - refKey, err := convertKey("github_ref", predicateType) + refKey, err := convertKey("github_ref", upperEnv) if err != nil { return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) } return GetAsString(environment, refKey) case "tag": - return getBranchForTag(environment, predicateType) + return getBranchForTag(environment, upperEnv) default: - return "", fmt.Errorf("%w: %s %s", serrors.ErrorInvalidDssePayload, + return "", fmt.Errorf("%w: %s %q", serrors.ErrorInvalidDssePayload, "unknown ref type", refType) } } +// Exists returns true if the given key exists in the environment. func Exists(environment map[string]any, field string) bool { _, ok := environment[field] return ok } +// GetAsString returns the value in the given environment as a string. func GetAsString(environment map[string]any, field string) (string, error) { value, ok := environment[field] if !ok { diff --git a/verifiers/internal/gha/slsaprovenance/iface/provenance.go b/verifiers/internal/gha/slsaprovenance/iface/provenance.go new file mode 100644 index 000000000..f294743d5 --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/iface/provenance.go @@ -0,0 +1,53 @@ +package iface + +import ( + "time" + + intoto "github.com/in-toto/in-toto-golang/in_toto" +) + +// Provenance represents provenance for a predicate type and build type. +type Provenance interface { + // BuilderID returns the builder id in the predicate. + BuilderID() (string, error) + + // BuildType returns the buildType. + BuildType() (string, error) + + // SourceURI is the full URI (including tag) of the source material. + SourceURI() (string, error) + + // TriggerURI is the full URI (including tag) of the configuration / trigger. + TriggerURI() (string, error) + + // Subject is the list of intoto subjects in the provenance. + Subjects() ([]intoto.Subject, error) + + // GetBranch retrieves the branch name of the source from the provenance. + GetBranch() (string, error) + + // GetTag retrieves the tag of the source from the provenance. + GetTag() (string, error) + + // Get workflow trigger path. + GetBuildTriggerPath() (string, error) + + // Get system pararmeters. + GetSystemParameters() (map[string]any, error) + + // Get build invocation ID. + GetBuildInvocationID() (string, error) + + // Get build start time. + GetBuildStartTime() (*time.Time, error) + + // Get build finish time. + GetBuildFinishTime() (*time.Time, error) + + // Get number of resolved dependencies. + GetNumberResolvedDependencies() (int, error) + + // GetWorkflowInputs retrieves the inputs from the provenance. Only succeeds for event + // relevant event types (workflow_inputs). + GetWorkflowInputs() (map[string]interface{}, error) +} diff --git a/verifiers/internal/gha/slsaprovenance/slsaprovenance.go b/verifiers/internal/gha/slsaprovenance/slsaprovenance.go index eded600d4..6adb41240 100644 --- a/verifiers/internal/gha/slsaprovenance/slsaprovenance.go +++ b/verifiers/internal/gha/slsaprovenance/slsaprovenance.go @@ -1,100 +1,59 @@ package slsaprovenance import ( - "bytes" "encoding/base64" "encoding/json" "fmt" - "sync" - "time" intoto "github.com/in-toto/in-toto-golang/in_toto" dsselib "github.com/secure-systems-lab/go-securesystemslib/dsse" - serrors "github.com/slsa-framework/slsa-verifier/v2/errors" -) -const ( - ProvenanceV02Type = "https://slsa.dev/provenance/v0.2" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" + slsav02 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v0.2" + slsav1 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v1.0" ) -type Provenance interface { - // BuilderID returns the builder id in the predicate. - BuilderID() (string, error) - - // SourceURI is the full URI (including tag) of the source material. - SourceURI() (string, error) - - // ConfigURI is the full URI (including tag) of the configuration material. - ConfigURI() (string, error) - - // Subject is the list of intoto subjects in the provenance. - Subjects() ([]intoto.Subject, error) - - // GetBranch retrieves the branch name of the source from the provenance. - GetBranch() (string, error) - - // GetTag retrieves the tag of the source from the provenance. - GetTag() (string, error) - - // Get workflow trigger path. - GetBuildTriggerPath() (string, error) - - // Get system pararmeters. - GetSystemParameters() (map[string]any, error) +// provenanceConstructor creates a new Provenance instance for the given payload as a json Decoder. +type provenanceConstructor func(builderID string, payload []byte) (iface.Provenance, error) - // Get build invocation ID. - GetBuildInvocationID() (string, error) - - // Get build start time. - GetBuildStartTime() (*time.Time, error) - - // Get build finish time. - GetBuildFinishTime() (*time.Time, error) - - // Get number of resolved dependencies. - GetNumberResolvedDependencies() (int, error) - - // GetWorkflowInputs retrieves the inputs from the provenance. Only succeeds for event - // relevant event types (workflow_inputs). - GetWorkflowInputs() (map[string]interface{}, error) +// predicateTypeMap stores the different provenance version types. It is a map of +// predicate type -> ProvenanceConstructor. +var predicateTypeMap = map[string]provenanceConstructor{ + common.ProvenanceV02Type: slsav02.New, + common.ProvenanceV1Type: slsav1.New, } -// ProvenanceMap stores the different provenance version types. -var ProvenanceMap sync.Map - -// Provenance interface that each type may implement. -func ProvenanceFromEnvelope(env *dsselib.Envelope) (Provenance, error) { - if env.PayloadType != "application/vnd.in-toto+json" { - return nil, fmt.Errorf("%w: expected payload type 'application/vnd.in-toto+json', got '%s'", - serrors.ErrorInvalidDssePayload, env.PayloadType) +// ProvenanceFromEnvelope returns a Provenance instance for the given builder +// ID and DSSE Envelope. The builder ID is retrieved from the signing certificate +// rather than from the payload itself in order to support delegated builders. +func ProvenanceFromEnvelope(builderID string, env *dsselib.Envelope) (iface.Provenance, error) { + if env.PayloadType != intoto.PayloadType { + return nil, fmt.Errorf("%w: expected payload type %q, got %q", + serrors.ErrorInvalidDssePayload, intoto.PayloadType, env.PayloadType) } + pyld, err := base64.StdEncoding.DecodeString(env.Payload) if err != nil { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + return nil, fmt.Errorf("%w: %w", serrors.ErrorInvalidDssePayload, err) } - // Get the predicateType, a required field. - pred := struct { - PredicateType string `json:"predicateType"` - }{} + // Load the in-toto attestation statement header. + pred := intoto.StatementHeader{} if err := json.Unmarshal(pyld, &pred); err != nil { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + return nil, fmt.Errorf("%w: decoding json: %w", serrors.ErrorInvalidDssePayload, err) } - // Load the appropriate structure and unmarshal. - ptype, ok := ProvenanceMap.Load(pred.PredicateType) + // Verify the predicate type is one we can handle. + newProv, ok := predicateTypeMap[pred.PredicateType] if !ok { - return nil, fmt.Errorf("%w: unexpected predicate type '%s'", serrors.ErrorInvalidDssePayload, pred.PredicateType) + return nil, fmt.Errorf("%w: unexpected predicate type %q", serrors.ErrorInvalidDssePayload, pred.PredicateType) } - prov := ptype.(func() Provenance)() - - // Strict unmarshal. - // NOTE: this supports extensions because they are - // only used as part of interface{}-defined fields. - dec := json.NewDecoder(bytes.NewReader(pyld)) - dec.DisallowUnknownFields() - if err := dec.Decode(prov); err != nil { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err.Error()) + prov, err := newProv(builderID, pyld) + if err != nil { + return nil, fmt.Errorf("%w: %w", serrors.ErrorInvalidDssePayload, err) } + return prov, nil } diff --git a/verifiers/internal/gha/slsaprovenance/slsaprovenance_test.go b/verifiers/internal/gha/slsaprovenance/slsaprovenance_test.go new file mode 100644 index 000000000..8d859729b --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/slsaprovenance_test.go @@ -0,0 +1,117 @@ +package slsaprovenance + +import ( + "encoding/base64" + "encoding/json" + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + intoto "github.com/in-toto/in-toto-golang/in_toto" + intoto_slsav1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" + "github.com/secure-systems-lab/go-securesystemslib/dsse" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + slsav1 "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/v1.0" +) + +func mustJSON(o any) string { + b, err := json.Marshal(o) + if err != nil { + panic(err) + } + return base64.StdEncoding.EncodeToString(b) +} + +func Test_ProvenanceFromEnvelope(t *testing.T) { + t.Parallel() + tests := []struct { + name string + builderID string + envelope *dsse.Envelope + path string + err error + }{ + { + name: "valid dsse", + builderID: common.GenericDelegatorBuilderID, + envelope: &dsse.Envelope{ + PayloadType: intoto.PayloadType, + Payload: mustJSON(&slsav1.Attestation{ + StatementHeader: intoto.StatementHeader{ + PredicateType: intoto_slsav1.PredicateSLSAProvenance, + }, + Predicate: intoto_slsav1.ProvenancePredicate{ + BuildDefinition: intoto_slsav1.ProvenanceBuildDefinition{ + BuildType: slsav1.BYOBBuildType, + }, + }, + }), + }, + }, + { + name: "invalid dsse: not SLSA predicate", + builderID: common.GenericDelegatorBuilderID, + envelope: &dsse.Envelope{ + PayloadType: intoto.PayloadType, + Payload: mustJSON(&intoto.StatementHeader{ + // NOTE: Not a SLSA predicate type. + PredicateType: intoto.PredicateSPDX, + }), + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "invalid dsse: not base64", + builderID: common.GenericDelegatorBuilderID, + envelope: &dsse.Envelope{ + PayloadType: intoto.PayloadType, + // NOTE: Not valid base64. + Payload: "i&(*$(@&^&)))", + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "invalid dsse: not json", + builderID: common.GenericDelegatorBuilderID, + envelope: &dsse.Envelope{ + PayloadType: intoto.PayloadType, + // NOTE: Not valid JSON. + Payload: base64.StdEncoding.EncodeToString([]byte("{'not valid json'")), + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "invalid dsse: not in-toto", + builderID: common.GenericDelegatorBuilderID, + envelope: &dsse.Envelope{ + // NOTE: Not an in-toto attestation payload type, + PayloadType: "http://github.com/other/payload/type", + // NOTE: The rest of the payload should be valid. + Payload: mustJSON(&slsav1.Attestation{ + StatementHeader: intoto.StatementHeader{ + PredicateType: intoto_slsav1.PredicateSLSAProvenance, + }, + Predicate: intoto_slsav1.ProvenancePredicate{ + BuildDefinition: intoto_slsav1.ProvenanceBuildDefinition{ + BuildType: slsav1.BYOBBuildType, + }, + }, + }), + }, + err: serrors.ErrorInvalidDssePayload, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + _, err := ProvenanceFromEnvelope(tt.builderID, tt.envelope) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Errorf("unexpected error (-want +got):\n%s", diff) + } + }) + } +} diff --git a/verifiers/internal/gha/slsaprovenance/v0.2/base.go b/verifiers/internal/gha/slsaprovenance/v0.2/base.go new file mode 100644 index 000000000..320306e68 --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v0.2/base.go @@ -0,0 +1,148 @@ +package v02 + +import ( + "fmt" + "time" + + intoto "github.com/in-toto/in-toto-golang/in_toto" + slsa02 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" +) + +func newLegacyBuilderProvenance(a *Attestation) iface.Provenance { + return &provenanceV02{ + upperEnv: false, + prov: a, + } +} + +// provenanceV02 implements basic logic for SLSA v0.2 provenance. +type provenanceV02 struct { + // upperEnv specifies if environment fields are in uppercase. + upperEnv bool + prov *Attestation +} + +// Predicate implements provenanceV02.Predicate. +func (p *provenanceV02) Predicate() slsa02.ProvenancePredicate { + return p.prov.Predicate +} + +// BuilderID implements Provenance.BuilderID. +func (p *provenanceV02) BuilderID() (string, error) { + return p.prov.Predicate.Builder.ID, nil +} + +// BuildType implements Provenance.BuildType. +func (p *provenanceV02) BuildType() (string, error) { + return p.prov.Predicate.BuildType, nil +} + +// SourceURI implements Provenance.SourceURI. +func (p *provenanceV02) SourceURI() (string, error) { + if len(p.prov.Predicate.Materials) == 0 { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no material") + } + uri := p.prov.Predicate.Materials[0].URI + if uri == "" { + return "", fmt.Errorf("%w: empty uri", serrors.ErrorMalformedURI) + } + + return uri, nil +} + +// TriggerURI implements Provenance.TriggerURI. +func (p *provenanceV02) TriggerURI() (string, error) { + uri := p.prov.Predicate.Invocation.ConfigSource.URI + if uri == "" { + return "", fmt.Errorf("%w: empty uri", serrors.ErrorMalformedURI) + } + return uri, nil +} + +// Subjects implements Provenance.Subjects. +func (p *provenanceV02) Subjects() ([]intoto.Subject, error) { + subj := p.prov.Subject + if len(subj) == 0 { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no subjects") + } + return subj, nil +} + +// GetBranch implements Provenance.GetBranch. +func (p *provenanceV02) GetBranch() (string, error) { + // GetBranch gets the branch from the invocation parameters. + environment, ok := p.prov.Predicate.Invocation.Environment.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") + } + + return common.GetBranch(environment, p.upperEnv) +} + +// GetTag implements Provenance.GetTag. +func (p *provenanceV02) GetTag() (string, error) { + environment, ok := p.prov.Predicate.Invocation.Environment.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") + } + + return common.GetTag(environment, p.upperEnv) +} + +// GetWorkflowInputs implements Provenance.GetWorkflowInputs. +func (p *provenanceV02) GetWorkflowInputs() (map[string]interface{}, error) { + // Verify it's a workflow_dispatch trigger. + environment, ok := p.prov.Predicate.Invocation.Environment.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") + } + + return common.GetWorkflowInputs(environment, p.upperEnv) +} + +// GetBuildTriggerPath implements Provenance.GetBuildTriggerPath. +func (p *provenanceV02) GetBuildTriggerPath() (string, error) { + return p.prov.Predicate.Invocation.ConfigSource.EntryPoint, nil +} + +// GetBuildInvocationID implements Provenance.GetBuildInvocationID. +func (p *provenanceV02) GetBuildInvocationID() (string, error) { + if p.prov.Predicate.Metadata == nil { + return "", nil + } + return p.prov.Predicate.Metadata.BuildInvocationID, nil +} + +// GetBuildStartTime implements Provenance.GetBuildStartTime. +func (p *provenanceV02) GetBuildStartTime() (*time.Time, error) { + if p.prov.Predicate.Metadata == nil { + return nil, nil + } + return p.prov.Predicate.Metadata.BuildStartedOn, nil +} + +// GetBuildFinishTime implements Provenance.GetBuildFinishTime. +func (p *provenanceV02) GetBuildFinishTime() (*time.Time, error) { + if p.prov.Predicate.Metadata == nil { + return nil, nil + } + return p.prov.Predicate.Metadata.BuildFinishedOn, nil +} + +// GetNumberResolvedDependencies implements Provenance.GetNumberResolvedDependencies. +func (p *provenanceV02) GetNumberResolvedDependencies() (int, error) { + return len(p.prov.Predicate.Materials), nil +} + +// GetSystemParameters implements Provenance.GetSystemParameters. +func (p *provenanceV02) GetSystemParameters() (map[string]any, error) { + environment, ok := p.prov.Predicate.Invocation.Environment.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") + } + return environment, nil +} diff --git a/verifiers/internal/gha/slsaprovenance/v0.2/byob.go b/verifiers/internal/gha/slsaprovenance/v0.2/byob.go new file mode 100644 index 000000000..93f1943f9 --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v0.2/byob.go @@ -0,0 +1,91 @@ +package v02 + +import ( + "fmt" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" +) + +// byobProvenance is SLSA v0.2 provenance created by a BYOB builder. +type byobProvenance struct { + *provenanceV02 +} + +func newBYOBProvenance(att *Attestation) iface.Provenance { + return &byobProvenance{ + provenanceV02: &provenanceV02{ + prov: att, + upperEnv: true, + }, + } +} + +// GetBranch implements Provenance.GetBranch. +func (p *byobProvenance) GetBranch() (string, error) { + sourceURI, err := p.SourceURI() + if err != nil { + return "", fmt.Errorf("reading source uri: %w", err) + } + + // Returns the branch from the source URI if available. + _, ref, err := utils.ParseGitURIAndRef(sourceURI) + if err != nil { + return "", fmt.Errorf("parsing source uri: %w", err) + } + + if ref == "" { + return "", fmt.Errorf("%w: unable to get ref for source %q", + serrors.ErrorInvalidDssePayload, sourceURI) + } + + refType, _ := utils.ParseGitRef(ref) + switch refType { + case "heads": // branch. + // NOTE: We return the full git ref. + return ref, nil + case "tags": + // NOTE: If the ref type is a tag we want to try to parse out the branch from the tag. + sysParams, ok := p.prov.Predicate.Invocation.Environment.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") + } + return common.GetBranch(sysParams, true) + default: + return "", fmt.Errorf("%w: unknown ref type %q for ref %q", + serrors.ErrorInvalidDssePayload, refType, ref) + } +} + +// GetTag implements Provenance.GetTag. +func (p *byobProvenance) GetTag() (string, error) { + sourceURI, err := p.SourceURI() + if err != nil { + return "", fmt.Errorf("reading source uri: %w", err) + } + + // Returns the branch from the source URI if available. + _, ref, err := utils.ParseGitURIAndRef(sourceURI) + if err != nil { + return "", fmt.Errorf("parsing source uri: %w", err) + } + + if ref == "" { + return "", fmt.Errorf("%w: unable to get ref for source %q", + serrors.ErrorInvalidDssePayload, sourceURI) + } + + refType, _ := utils.ParseGitRef(ref) + switch refType { + case "heads": // branch. + return "", nil + case "tags": + // NOTE: We return the full git ref. + return ref, nil + default: + return "", fmt.Errorf("%w: unknown ref type %q for ref %q", + serrors.ErrorInvalidDssePayload, refType, ref) + } +} diff --git a/verifiers/internal/gha/slsaprovenance/v0.2/byob_test.go b/verifiers/internal/gha/slsaprovenance/v0.2/byob_test.go new file mode 100644 index 000000000..012e2f05d --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v0.2/byob_test.go @@ -0,0 +1,280 @@ +package v02 + +import ( + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + intoto "github.com/in-toto/in-toto-golang/in_toto" + slsacommon "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common" + slsa02 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" +) + +func Test_byobProvenance_GetBranch(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + prov iface.Provenance + branch string + err error + }{ + { + name: "empty provenance", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{}, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "materials uri @ refs/heads/main", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Materials: []slsacommon.ProvenanceMaterial{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/heads/main", + }, + }, + }, + }, + ), + branch: "refs/heads/main", + }, + { + name: "environment GITHUB_REF @ refs/heads/main", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Invocation: slsa02.ProvenanceInvocation{ + Environment: map[string]interface{}{ + "GITHUB_REF_TYPE": "branch", + "GITHUB_REF": "refs/heads/main", + }, + }, + }, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "materials uri @ refs/tags/v1.0.0", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Invocation: slsa02.ProvenanceInvocation{ + Environment: map[string]interface{}{ + "GITHUB_BASE_REF": "", + "GITHUB_REF_TYPE": "tag", + "GITHUB_REF": "refs/tags/v1.0.0", + "GITHUB_EVENT_NAME": "push", + "GITHUB_EVENT_PAYLOAD": map[string]any{ + "base_ref": nil, + }, + }, + }, + Materials: []slsacommon.ProvenanceMaterial{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + }, + }, + }, + ), + branch: "", + }, + { + name: "environment GITHUB_REF @ ref/tags/v1.0.0", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Invocation: slsa02.ProvenanceInvocation{ + Environment: map[string]interface{}{ + "GITHUB_BASE_REF": "", + "GITHUB_REF_TYPE": "tag", + "GITHUB_REF": "refs/tags/v1.0.0", + "GITHUB_EVENT_NAME": "push", + "GITHUB_EVENT_PAYLOAD": map[string]any{ + "base_ref": nil, + }, + }, + }, + }, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "materials uri no ref", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Invocation: slsa02.ProvenanceInvocation{ + Environment: map[string]interface{}{ + "GITHUB_REF_TYPE": "branch", + "GITHUB_REF": "refs/heads/main", + }, + }, + Materials: []slsacommon.ProvenanceMaterial{ + { + URI: "git+https://github.com/kubernetes/kubernetes", + }, + }, + }, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + branch, err := tt.prov.GetBranch() + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error: %v", err) + } + if got, want := branch, tt.branch; got != want { + t.Fatalf("unexpected branch, got: %q, want: %q", got, want) + } + }) + } +} + +func Test_byobProvenance_GetTag(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + prov iface.Provenance + tag string + err error + }{ + { + name: "empty provenance", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{}, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "materials uri @ refs/heads/main", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Materials: []slsacommon.ProvenanceMaterial{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/heads/main", + }, + }, + }, + }, + ), + tag: "", + }, + { + name: "environment GITHUB_REF @ refs/heads/main", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Invocation: slsa02.ProvenanceInvocation{ + Environment: map[string]interface{}{ + "GITHUB_REF_TYPE": "branch", + "GITHUB_REF": "refs/heads/main", + }, + }, + }, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "materials uri @ refs/tags/v1.0.0", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Materials: []slsacommon.ProvenanceMaterial{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + }, + }, + }, + ), + tag: "refs/tags/v1.0.0", + }, + { + name: "environment GITHUB_REF @ ref/tags/v1.0.0", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Invocation: slsa02.ProvenanceInvocation{ + Environment: map[string]interface{}{ + "GITHUB_REF_TYPE": "tag", + "GITHUB_REF": "refs/tags/v1.0.0", + }, + }, + }, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "materials uri no ref", + prov: newBYOBProvenance( + &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa02.ProvenancePredicate{ + Invocation: slsa02.ProvenanceInvocation{ + Environment: map[string]interface{}{ + "GITHUB_REF_TYPE": "tag", + "GITHUB_REF": "refs/tags/v1.0.0", + }, + }, + Materials: []slsacommon.ProvenanceMaterial{ + { + URI: "git+https://github.com/kubernetes/kubernetes", + }, + }, + }, + }, + ), + err: serrors.ErrorInvalidDssePayload, + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + tag, err := tt.prov.GetTag() + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error: %v", err) + } + if got, want := tag, tt.tag; got != want { + t.Fatalf("unexpected tag, got: %q, want: %q", got, want) + } + }) + } +} diff --git a/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go b/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go index 46f6b7125..c854ade1c 100644 --- a/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go +++ b/verifiers/internal/gha/slsaprovenance/v0.2/provenance.go @@ -1,117 +1,72 @@ package v02 import ( + "bytes" + "encoding/json" "fmt" - "time" intoto "github.com/in-toto/in-toto-golang/in_toto" + slsa02 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" ) -// TODO(https://github.com/slsa-framework/slsa-verifier/issues/473): Use a static mapping. -// -//nolint:gochecknoinits -func init() { - slsaprovenance.ProvenanceMap.Store( - slsaprovenance.ProvenanceV02Type, - New) +// Attestation is a SLSA v0.2 in-toto attestation statement. +type Attestation struct { + intoto.StatementHeader + Predicate slsa02.ProvenancePredicate `json:"predicate"` } -type ProvenanceV02 struct { - *intoto.ProvenanceStatement +// ProvenanceV02 represents v0.2 provenance. +type ProvenanceV02 interface { + Predicate() slsa02.ProvenancePredicate } -// This returns a new, empty instance of the v0.2 provenance. -func New() slsaprovenance.Provenance { - return &ProvenanceV02{} -} +type provFunc func(*Attestation) iface.Provenance -func (prov *ProvenanceV02) BuilderID() (string, error) { - return prov.Predicate.Builder.ID, nil -} +// buildTypeMap is a map of builder IDs to supported buildTypes. +var buildTypeMap = map[string]map[string]provFunc{ + common.GenericDelegatorBuilderID: {common.BYOBBuildTypeV0: newBYOBProvenance}, + common.GenericLowPermsDelegatorBuilderID: {common.BYOBBuildTypeV0: newBYOBProvenance}, -func (prov *ProvenanceV02) SourceURI() (string, error) { - if len(prov.Predicate.Materials) == 0 { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no material") - } - return prov.Predicate.Materials[0].URI, nil -} + common.GoBuilderID: { + common.GoBuilderBuildTypeV1: newLegacyBuilderProvenance, + common.LegacyBuilderBuildTypeV1: newLegacyBuilderProvenance, + common.LegacyGoBuilderBuildTypeV1: newLegacyBuilderProvenance, + }, -func (prov *ProvenanceV02) ConfigURI() (string, error) { - return prov.Predicate.Invocation.ConfigSource.URI, nil -} + common.GenericGeneratorBuilderID: {common.GenericGeneratorBuildTypeV1: newLegacyBuilderProvenance}, + common.ContainerGeneratorBuilderID: {common.ContainerGeneratorBuildTypeV1: newLegacyBuilderProvenance}, -func (prov *ProvenanceV02) Subjects() ([]intoto.Subject, error) { - subj := prov.Subject - if len(subj) == 0 { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no subjects") - } - return subj, nil + common.NpmCLILegacyBuilderID: {common.NpmCLIBuildTypeV1: newLegacyBuilderProvenance}, + common.NpmCLIHostedBuilderID: {common.NpmCLIBuildTypeV1: newLegacyBuilderProvenance}, + // NOTE: we don't support Npm CLI on self-hosted. } -func (prov *ProvenanceV02) GetBranch() (string, error) { - // GetBranch gets the branch from the invocation parameters. - environment, ok := prov.Predicate.Invocation.Environment.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") - } - - return slsaprovenance.GetBranch(environment, prov.PredicateType) -} +// New returns a new Provenance for the given json payload. +func New(builderID string, payload []byte) (iface.Provenance, error) { + // Strict unmarshal. + // NOTE: this supports extensions because they are + // only used as part of interface{}-defined fields. + dec := json.NewDecoder(bytes.NewReader(payload)) + dec.DisallowUnknownFields() -func (prov *ProvenanceV02) GetTag() (string, error) { - environment, ok := prov.Predicate.Invocation.Environment.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") + a := &Attestation{} + if err := dec.Decode(a); err != nil { + return nil, err } - return slsaprovenance.GetTag(environment, prov.PredicateType) -} - -func (prov *ProvenanceV02) GetWorkflowInputs() (map[string]interface{}, error) { - // Verify it's a workflow_dispatch trigger. - environment, ok := prov.Predicate.Invocation.Environment.(map[string]interface{}) + btMap, ok := buildTypeMap[builderID] if !ok { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") - } - - return slsaprovenance.GetWorkflowInputs(environment, prov.PredicateType) -} - -func (prov *ProvenanceV02) GetBuildTriggerPath() (string, error) { - return prov.Predicate.Invocation.ConfigSource.EntryPoint, nil -} - -func (prov *ProvenanceV02) GetBuildInvocationID() (string, error) { - if prov.Predicate.Metadata == nil { - return "", nil + return nil, fmt.Errorf("%w: %q", serrors.ErrorInvalidBuilderID, builderID) } - return prov.Predicate.Metadata.BuildInvocationID, nil -} -func (prov *ProvenanceV02) GetBuildStartTime() (*time.Time, error) { - if prov.Predicate.Metadata == nil { - return nil, nil - } - return prov.Predicate.Metadata.BuildStartedOn, nil -} - -func (prov *ProvenanceV02) GetBuildFinishTime() (*time.Time, error) { - if prov.Predicate.Metadata == nil { - return nil, nil - } - return prov.Predicate.Metadata.BuildFinishedOn, nil -} - -func (prov *ProvenanceV02) GetNumberResolvedDependencies() (int, error) { - return len(prov.Predicate.Materials), nil -} - -func (prov *ProvenanceV02) GetSystemParameters() (map[string]any, error) { - environment, ok := prov.Predicate.Invocation.Environment.(map[string]interface{}) + pFunc, ok := btMap[a.Predicate.BuildType] if !ok { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "parameters type") + return nil, fmt.Errorf("%w: %q for builder ID %q", serrors.ErrorInvalidBuildType, a.Predicate.BuildType, builderID) } - return environment, nil + + return pFunc(a), nil } diff --git a/verifiers/internal/gha/slsaprovenance/v1.0/base.go b/verifiers/internal/gha/slsaprovenance/v1.0/base.go new file mode 100644 index 000000000..81f0e493c --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v1.0/base.go @@ -0,0 +1,188 @@ +package v1 + +import ( + "fmt" + "strings" + "time" + + intoto "github.com/in-toto/in-toto-golang/in_toto" + slsa1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" +) + +// provenanceV1 is a base implementation for SLSA v1.0 provenance. +type provenanceV1 struct { + prov *Attestation +} + +// Predicate implements ProvenanceV02.Predicate. +func (p *provenanceV1) Predicate() slsa1.ProvenancePredicate { + return p.prov.Predicate +} + +// BuilderID implements Provenance.BuilderID. +func (p *provenanceV1) BuilderID() (string, error) { + return p.prov.Predicate.RunDetails.Builder.ID, nil +} + +// BuildType implements Provenance.BuildType. +func (p *provenanceV1) BuildType() (string, error) { + return p.prov.Predicate.BuildDefinition.BuildType, nil +} + +// SourceURI implements Provenance.SourceURI. +func (p *provenanceV1) SourceURI() (string, error) { + // Use resolvedDependencies. + if len(p.prov.Predicate.BuildDefinition.ResolvedDependencies) == 0 { + return "", fmt.Errorf("%w: empty resovedDependencies", serrors.ErrorInvalidDssePayload) + } + // For now, we use the first resolvedDependency relying on a GHA builder-verifier contract. + uri := p.prov.Predicate.BuildDefinition.ResolvedDependencies[0].URI + if uri == "" { + return "", fmt.Errorf("%w: empty uri", serrors.ErrorMalformedURI) + } + return uri, nil +} + +func (p *provenanceV1) builderTriggerInfo() (string, string, string, error) { + sysParams, ok := p.prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) + if !ok { + return "", "", "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "internal parameters type") + } + + if _, exists := sysParams["GITHUB_WORKFLOW_REF"]; !exists { + return "", "", "", fmt.Errorf("%w: GITHUB_WORKFLOW_REF", serrors.ErrorNotPresent) + } + + workflowRef, err := common.GetAsString(sysParams, "GITHUB_WORKFLOW_REF") + if err != nil { + return "", "", "", err + } + + parts := strings.Split(workflowRef, "@") + if len(parts) != 2 { + return "", "", "", fmt.Errorf("%w: ref: %s", serrors.ErrorInvalidFormat, workflowRef) + } + repoAndPath := parts[0] + ref := parts[1] + + parts = strings.Split(repoAndPath, "/") + if len(parts) < 2 { + return "", "", "", fmt.Errorf("%w: rep and path: %s", serrors.ErrorInvalidFormat, repoAndPath) + } + + repo := strings.Join(parts[:2], "/") + path := strings.Join(parts[2:], "/") + return fmt.Sprintf("git+https://github.com/%s", repo), ref, path, nil +} + +func (p *provenanceV1) triggerInfo() (string, string, string, error) { + return p.builderTriggerInfo() +} + +// TriggerURI implements Provenance.TriggerURI. +func (p *provenanceV1) TriggerURI() (string, error) { + repository, ref, _, err := p.triggerInfo() + if err != nil { + return "", err + } + if repository == "" || ref == "" { + return "", fmt.Errorf("%w: repository or ref is empty", serrors.ErrorMalformedURI) + } + return fmt.Sprintf("%s@%s", repository, ref), nil +} + +// Subjects implements Provenance.Subjects. +func (p *provenanceV1) Subjects() ([]intoto.Subject, error) { + subj := p.prov.Subject + if len(subj) == 0 { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no subjects") + } + return subj, nil +} + +// GetBranch implements Provenance.GetBranch. +func (p *provenanceV1) GetBranch() (string, error) { + sysParams, ok := p.prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "internal parameters type") + } + + return common.GetBranch(sysParams, true) +} + +// GetTag implements Provenance.GetTag. +func (p *provenanceV1) GetTag() (string, error) { + sysParams, ok := p.prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + } + + return common.GetTag(sysParams, true) +} + +// GetWorkflowInputs implements Provenance.GetWorkflowInputs. +func (p *provenanceV1) GetWorkflowInputs() (map[string]interface{}, error) { + sysParams, ok := p.prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + } + return common.GetWorkflowInputs(sysParams, true) +} + +// GetBuildTriggerPath implements Provenance.GetBuildTriggerPath. +func (p *provenanceV1) GetBuildTriggerPath() (string, error) { + // TODO(#566): verify the ref and repo as well. + sysParams, ok := p.prov.Predicate.BuildDefinition.ExternalParameters.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + } + + w, ok := sysParams["workflow"] + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "workflow parameters type") + } + + wMap, ok := w.(map[string]string) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "workflow not a map") + } + + v, ok := wMap["path"] + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no path entry on workflow") + } + return v, nil +} + +// GetBuildInvocationID implements Provenance.GetBuildInvocationID. +func (p *provenanceV1) GetBuildInvocationID() (string, error) { + return p.prov.Predicate.RunDetails.BuildMetadata.InvocationID, nil +} + +// GetBuildStartTime implements Provenance.GetBuildStartTime. +func (p *provenanceV1) GetBuildStartTime() (*time.Time, error) { + return p.prov.Predicate.RunDetails.BuildMetadata.StartedOn, nil +} + +// GetBuildFinishTime implements Provenance.GetBuildFinishTime. +func (p *provenanceV1) GetBuildFinishTime() (*time.Time, error) { + return p.prov.Predicate.RunDetails.BuildMetadata.FinishedOn, nil +} + +// GetNumberResolvedDependencies implements Provenance.GetNumberResolvedDependencies. +func (p *provenanceV1) GetNumberResolvedDependencies() (int, error) { + return len(p.prov.Predicate.BuildDefinition.ResolvedDependencies), nil +} + +// GetSystemParameters implements Provenance.GetSystemParameters. +func (p *provenanceV1) GetSystemParameters() (map[string]any, error) { + sysParams, ok := p.prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) + if !ok { + return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + } + + return sysParams, nil +} diff --git a/verifiers/internal/gha/slsaprovenance/v1.0/byob.go b/verifiers/internal/gha/slsaprovenance/v1.0/byob.go new file mode 100644 index 000000000..d6dba5320 --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v1.0/byob.go @@ -0,0 +1,85 @@ +package v1 + +import ( + "fmt" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" +) + +// BYOBBuildType is the base build type for BYOB delegated builders. +var BYOBBuildType = "https://github.com/slsa-framework/slsa-github-generator/delegator-generic@v0" + +// BYOBProvenance is SLSA v1.0 provenance for the slsa-github-generator BYOB build type. +type BYOBProvenance struct { + *provenanceV1 +} + +// GetBranch implements Provenance.GetBranch. +func (p *BYOBProvenance) GetBranch() (string, error) { + sourceURI, err := p.SourceURI() + if err != nil { + return "", fmt.Errorf("reading source uri: %w", err) + } + + // Returns the branch from the source URI if available. + _, ref, err := utils.ParseGitURIAndRef(sourceURI) + if err != nil { + return "", fmt.Errorf("parsing source uri: %w", err) + } + + if ref == "" { + return "", fmt.Errorf("%w: unable to get ref for source %q", + serrors.ErrorInvalidDssePayload, sourceURI) + } + + refType, _ := utils.ParseGitRef(ref) + switch refType { + case "heads": // branch. + // NOTE: We return the full git ref. + return ref, nil + case "tags": + // NOTE: If the ref type is a tag we want to try to parse out the branch from the tag. + sysParams, ok := p.prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) + if !ok { + return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "internal parameters type") + } + return common.GetBranch(sysParams, true) + default: + return "", fmt.Errorf("%w: unknown ref type %q for ref %q", + serrors.ErrorInvalidDssePayload, refType, ref) + } +} + +// GetTag implements Provenance.GetTag. +func (p *BYOBProvenance) GetTag() (string, error) { + sourceURI, err := p.SourceURI() + if err != nil { + return "", fmt.Errorf("reading source uri: %w", err) + } + + // Returns the branch from the source URI if available. + _, ref, err := utils.ParseGitURIAndRef(sourceURI) + if err != nil { + return "", fmt.Errorf("parsing source uri: %w", err) + } + + if ref == "" { + return "", fmt.Errorf("%w: unable to get ref for source %q", + serrors.ErrorInvalidDssePayload, sourceURI) + } + + refType, _ := utils.ParseGitRef(ref) + switch refType { + case "heads": // branch. + return "", nil + case "tags": + // NOTE: We return the full git ref. + return ref, nil + default: + return "", fmt.Errorf("%w: unknown ref type %q for ref %q", + serrors.ErrorInvalidDssePayload, refType, ref) + } +} diff --git a/verifiers/internal/gha/slsaprovenance/v1.0/byob_test.go b/verifiers/internal/gha/slsaprovenance/v1.0/byob_test.go new file mode 100644 index 000000000..bb593f9cd --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v1.0/byob_test.go @@ -0,0 +1,279 @@ +package v1 + +import ( + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + intoto "github.com/in-toto/in-toto-golang/in_toto" + slsa1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" +) + +func Test_BYOBProvenance_GetBranch(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + prov BYOBProvenance + branch string + err error + }{ + { + name: "empty provenance", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{}, + }, + }, + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "resolved dependency uri @ refs/heads/main", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + ResolvedDependencies: []slsa1.ResourceDescriptor{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/heads/main", + }, + }, + }, + }, + }, + }, + }, + branch: "refs/heads/main", + }, + { + name: "internalParameters GITHUB_REF @ refs/heads/main", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + InternalParameters: map[string]interface{}{ + "GITHUB_REF_TYPE": "branch", + "GITHUB_REF": "refs/heads/main", + }, + }, + }, + }, + }, + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "resolved dependency uri @ refs/tags/v1.0.0", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + InternalParameters: map[string]interface{}{ + "GITHUB_BASE_REF": "", + "GITHUB_REF_TYPE": "tag", + "GITHUB_REF": "refs/tags/v1.0.0", + "GITHUB_EVENT_NAME": "push", + "GITHUB_EVENT_PAYLOAD": map[string]any{ + "base_ref": nil, + }, + }, + ResolvedDependencies: []slsa1.ResourceDescriptor{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + }, + }, + }, + }, + }, + }, + branch: "", + }, + { + name: "resolved dependency uri @ refs/heads/main no ref", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + InternalParameters: map[string]interface{}{ + "GITHUB_REF_TYPE": "branch", + "GITHUB_REF": "refs/heads/main", + }, + ResolvedDependencies: []slsa1.ResourceDescriptor{ + { + URI: "git+https://github.com/kubernetes/kubernetes", + }, + }, + }, + }, + }, + }, + }, + err: serrors.ErrorInvalidDssePayload, + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + branch, err := tt.prov.GetBranch() + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error (-want +got): \n%s", diff) + } + if got, want := branch, tt.branch; got != want { + t.Fatalf("unexpected branch, got: %q, want: %q", got, want) + } + }) + } +} + +func Test_BYOBProvenance_GetTag(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + prov BYOBProvenance + tag string + err error + }{ + { + name: "empty provenance", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{}, + }, + }, + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "resolved dependency uri @ refs/heads/main", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + ResolvedDependencies: []slsa1.ResourceDescriptor{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/heads/main", + }, + }, + }, + }, + }, + }, + }, + tag: "", + }, + { + name: "internalParameters GITHUB_REF @ refs/heads/main", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + InternalParameters: map[string]interface{}{ + "GITHUB_REF_TYPE": "branch", + "GITHUB_REF": "refs/heads/main", + }, + }, + }, + }, + }, + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "resolved dependency uri @ refs/tags/v1.0.0", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + ResolvedDependencies: []slsa1.ResourceDescriptor{ + { + URI: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + }, + }, + }, + }, + }, + }, + tag: "refs/tags/v1.0.0", + }, + { + name: "internalParameters GITHUB_REF @ ref/tags/v1.0.0", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + InternalParameters: map[string]interface{}{ + "GITHUB_REF_TYPE": "tag", + "GITHUB_REF": "refs/tags/v1.0.0", + }, + }, + }, + }, + }, + }, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "resolved dependency uri @ refs/tags/v1.0.0 no ref", + prov: BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + StatementHeader: intoto.StatementHeader{}, + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + ResolvedDependencies: []slsa1.ResourceDescriptor{ + { + URI: "git+https://github.com/kubernetes/kubernetes", + }, + }, + }, + }, + }, + }, + }, + err: serrors.ErrorInvalidDssePayload, + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + tag, err := tt.prov.GetTag() + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error: %v", err) + } + if got, want := tag, tt.tag; got != want { + t.Fatalf("unexpected tag, got: %q, want: %q", got, want) + } + }) + } +} diff --git a/verifiers/internal/gha/slsaprovenance/v1.0/container_based.go b/verifiers/internal/gha/slsaprovenance/v1.0/container_based.go new file mode 100644 index 000000000..aa146aaab --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v1.0/container_based.go @@ -0,0 +1,9 @@ +package v1 + +// ContainerBasedBuildType is the build type for the container-based builder. +var ContainerBasedBuildType = "https://slsa.dev/container-based-build/v0.1?draft" + +// ContainerBasedProvenance is provenance generated by the container-based builder. +type ContainerBasedProvenance struct { + *provenanceV1 +} diff --git a/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go b/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go index 66c61cd35..6f44d9b9c 100644 --- a/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go +++ b/verifiers/internal/gha/slsaprovenance/v1.0/provenance.go @@ -1,147 +1,76 @@ package v1 import ( + "bytes" "encoding/json" "fmt" - "time" intoto "github.com/in-toto/in-toto-golang/in_toto" slsa1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" - "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" ) -// TODO(https://github.com/slsa-framework/slsa-verifier/issues/473): Use a static mapping. -// -//nolint:gochecknoinits -func init() { - slsaprovenance.ProvenanceMap.Store( - slsa1.PredicateSLSAProvenance, - New) -} - -type ProvenanceV1 struct { +// Attestation is an in-toto SLSA v1.0 attestation statement. +type Attestation struct { intoto.StatementHeader - Predicate slsa1.ProvenancePredicate `json:"predicate"` - predicateType string + Predicate slsa1.ProvenancePredicate `json:"predicate"` } -// This returns a new, empty instance of the v0.2 provenance. -func New() slsaprovenance.Provenance { - return &ProvenanceV1{ - predicateType: slsa1.PredicateSLSAProvenance, - } +// ProvenanceV1 represents v1.0 provenance. +type ProvenanceV1 interface { + Predicate() slsa1.ProvenancePredicate } -func (prov *ProvenanceV1) BuilderID() (string, error) { - return prov.Predicate.RunDetails.Builder.ID, nil -} +type provFunc func(*Attestation) iface.Provenance -func (prov *ProvenanceV1) SourceURI() (string, error) { - extParams, ok := prov.Predicate.BuildDefinition.ExternalParameters.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "external parameters type") - } - source, ok := extParams["source"] - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "external parameters source") - } - sourceBytes, err := json.Marshal(source) - if err != nil { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, err) - } - var sourceRef slsa1.ResourceDescriptor - if err := json.Unmarshal(sourceBytes, &sourceRef); err != nil { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "external parameters source type") - } - return sourceRef.URI, nil -} - -func (prov *ProvenanceV1) ConfigURI() (string, error) { - // The source and config are the same for GHA provenance. - return prov.SourceURI() -} - -func (prov *ProvenanceV1) Subjects() ([]intoto.Subject, error) { - subj := prov.Subject - if len(subj) == 0 { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no subjects") - } - return subj, nil -} - -func (prov *ProvenanceV1) GetBranch() (string, error) { - // TODO(https://github.com/slsa-framework/slsa-verifier/issues/472): Add GetBranch() support. - sysParams, ok := prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") +func newBYOB(a *Attestation) iface.Provenance { + return &BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: a, + }, } - - return slsaprovenance.GetBranch(sysParams, prov.predicateType) } -func (prov *ProvenanceV1) GetTag() (string, error) { - sysParams, ok := prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") +func newContainerBased(a *Attestation) iface.Provenance { + return &ContainerBasedProvenance{ + provenanceV1: &provenanceV1{ + prov: a, + }, } - return slsaprovenance.GetTag(sysParams, prov.predicateType) } -func (prov *ProvenanceV1) GetWorkflowInputs() (map[string]interface{}, error) { - sysParams, ok := prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) - if !ok { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") - } - return slsaprovenance.GetWorkflowInputs(sysParams, prov.predicateType) +// buildTypeMap is a map of builder IDs to supported buildTypes. +var buildTypeMap = map[string]map[string]provFunc{ + common.GenericDelegatorBuilderID: {common.BYOBBuildTypeV0: newBYOB}, + common.GenericLowPermsDelegatorBuilderID: {common.BYOBBuildTypeV0: newBYOB}, + common.ContainerBasedBuilderID: {common.ContainerBasedBuildTypeV01Draft: newContainerBased}, } -// TODO(https://github.com/slsa-framework/slsa-verifier/issues/566): -// verify the ref and repo as well. -func (prov *ProvenanceV1) GetBuildTriggerPath() (string, error) { - sysParams, ok := prov.Predicate.BuildDefinition.ExternalParameters.(map[string]interface{}) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") - } - - w, ok := sysParams["workflow"] - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "workflow parameters type") - } +// New returns a new Provenance object based on the payload. +func New(builderID string, payload []byte) (iface.Provenance, error) { + // Strict unmarshal. + // NOTE: this supports extensions because they are + // only used as part of interface{}-defined fields. + dec := json.NewDecoder(bytes.NewReader(payload)) + dec.DisallowUnknownFields() - wMap, ok := w.(map[string]string) - if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "workflow not a map") + a := &Attestation{} + if err := dec.Decode(a); err != nil { + return nil, fmt.Errorf("%w: %w", serrors.ErrorInvalidDssePayload, err) } - v, ok := wMap["path"] + btMap, ok := buildTypeMap[builderID] if !ok { - return "", fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "no path entry on workflow") + return nil, fmt.Errorf("%w: %q", serrors.ErrorInvalidBuilderID, builderID) } - return v, nil -} - -func (prov *ProvenanceV1) GetBuildInvocationID() (string, error) { - return prov.Predicate.RunDetails.BuildMetadata.InvocationID, nil -} - -func (prov *ProvenanceV1) GetBuildStartTime() (*time.Time, error) { - return prov.Predicate.RunDetails.BuildMetadata.StartedOn, nil -} - -func (prov *ProvenanceV1) GetBuildFinishTime() (*time.Time, error) { - return prov.Predicate.RunDetails.BuildMetadata.FinishedOn, nil -} - -func (prov *ProvenanceV1) GetNumberResolvedDependencies() (int, error) { - return len(prov.Predicate.BuildDefinition.ResolvedDependencies), nil -} -func (prov *ProvenanceV1) GetSystemParameters() (map[string]any, error) { - sysParams, ok := prov.Predicate.BuildDefinition.InternalParameters.(map[string]interface{}) + provFunc, ok := btMap[a.Predicate.BuildDefinition.BuildType] if !ok { - return nil, fmt.Errorf("%w: %s", serrors.ErrorInvalidDssePayload, "system parameters type") + return nil, fmt.Errorf("%w: %q for builder ID %q", serrors.ErrorInvalidBuildType, a.Predicate.BuildDefinition.BuildType, builderID) } - return sysParams, nil + return provFunc(a), nil } diff --git a/verifiers/internal/gha/slsaprovenance/v1.0/provenance_test.go b/verifiers/internal/gha/slsaprovenance/v1.0/provenance_test.go new file mode 100644 index 000000000..3b5d5157f --- /dev/null +++ b/verifiers/internal/gha/slsaprovenance/v1.0/provenance_test.go @@ -0,0 +1,118 @@ +package v1 + +import ( + "fmt" + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + slsa1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/iface" +) + +func Test_New(t *testing.T) { + testCases := []struct { + name string + builderID string + payload string + prov iface.Provenance + err error + }{ + { + name: "BYOB build type", + builderID: common.GenericDelegatorBuilderID, + payload: fmt.Sprintf(`{ + "predicate": { + "buildDefinition": { + "buildType": %q + } + } + }`, common.BYOBBuildTypeV0), + prov: &BYOBProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + BuildType: common.BYOBBuildTypeV0, + }, + }, + }, + }, + }, + }, + { + name: "Container-based build type", + builderID: common.ContainerBasedBuilderID, + payload: fmt.Sprintf(`{ + "predicate": { + "buildDefinition": { + "buildType": %q + } + } + }`, common.ContainerBasedBuildTypeV01Draft), + prov: &ContainerBasedProvenance{ + provenanceV1: &provenanceV1{ + prov: &Attestation{ + Predicate: slsa1.ProvenancePredicate{ + BuildDefinition: slsa1.ProvenanceBuildDefinition{ + BuildType: common.ContainerBasedBuildTypeV01Draft, + }, + }, + }, + }, + }, + }, + { + name: "Unknown fields", + payload: `{ + "predicate": { + "unknown": "field", + "buildDefinition": { + "buildType": "foo" + } + } + }`, + err: serrors.ErrorInvalidDssePayload, + }, + { + name: "Unknown builder ID", + builderID: "unknown", + payload: `{ + "predicate": { + "buildDefinition": { + "buildType": "foo" + } + } + }`, + err: serrors.ErrorInvalidBuilderID, + }, + { + name: "Unknown buildType", + builderID: common.GenericDelegatorBuilderID, + payload: `{ + "predicate": { + "buildDefinition": { + "buildType": "foo" + } + } + }`, + err: serrors.ErrorInvalidBuildType, + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + p, err := New(tt.builderID, []byte(tt.payload)) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error (-want +got): \n%s", diff) + } + if diff := cmp.Diff(tt.prov, p, cmp.AllowUnexported(provenanceV1{}, BYOBProvenance{}, ContainerBasedProvenance{})); diff != "" { + t.Fatalf("unexpected result (-want +got): \n%s", diff) + } + }) + } +} diff --git a/verifiers/internal/gha/testdata/bazel-trusted-dsseEnvelope.build.slsa b/verifiers/internal/gha/testdata/bazel-trusted-dsseEnvelope.build.slsa new file mode 100644 index 000000000..19202c08b --- /dev/null +++ b/verifiers/internal/gha/testdata/bazel-trusted-dsseEnvelope.build.slsa @@ -0,0 +1,3 @@ +{ + "payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQC5KILL/ouIQVHa10bCUW2VukAff5Towcn7t9wP48Qx2AIhAJBiNPxVT2ug4dKNzV73VR+7Qj6wNW7F+vtJ0ngsyIM4","keyid":""}] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/bazel-untrusted-dsseEnvelope.sigstore b/verifiers/internal/gha/testdata/bazel-untrusted-dsseEnvelope.sigstore new file mode 100644 index 000000000..35c29dc54 --- /dev/null +++ b/verifiers/internal/gha/testdata/bazel-untrusted-dsseEnvelope.sigstore @@ -0,0 +1,3 @@ +{ + "payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIBI2U1FXszYZ2BU1hrtiCgfDsvLBpftB5gvGv0UrobTrAiEAnBPjQHPQHXgGRGokorag5kq9BSDNIGs90v/hHUNY77s=","keyid":""}] +} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-annotated-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-annotated-tag-v1.intoto.jsonl deleted file mode 100644 index 04b6516b8..000000000 --- a/verifiers/internal/gha/testdata/dsse-annotated-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEQCIDkvUKQpbCRy0vtbmOCjHyb6NcAZvVn8+pFePCWr8j6iAiB9cZBFGnuE19DaO1PCBCV72dFRqdLkiceCWS/JG6Kl9A==", "cert": "-----BEGIN CERTIFICATE-----\nMIIDPjCCAsOgAwIBAgIUAMCNMIi+TBlK/3dXro7koENp/08wCgYIKoZIzj0EAwMw\nKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0y\nMjA4MDUxNTQ3MzJaFw0yMjA4MDUxNTU3MzFaMAAwWTATBgcqhkjOPQIBBggqhkjO\nPQMBBwNCAATtSRaJAp/3YS9RGt2JXWTQUo82IO9CKBl7GRR/Wn4F1DYgEA+r34pp\n+HNiYsHozL42qjWagmKaBDxgdIsIKzB0o4IB7zCCAeswDgYDVR0PAQH/BAQDAgeA\nMBMGA1UdJQQMMAoGCCsGAQUFBwMDMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFO/q\nSIy4zy74V5dEVtypObDo+xv+MB8GA1UdIwQYMBaAFFjAHl+RRaVmqXrMkKGTItAq\nxcX6MIGEBgNVHREBAf8EejB4hnZodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFt\nZXdvcmsvc2xzYS1naXRodWItZ2VuZXJhdG9yLy5naXRodWIvd29ya2Zsb3dzL2dl\nbmVyYXRvcl9nZW5lcmljX3Nsc2EzLnltbEByZWZzL3RhZ3MvdjEuMi4wMDIGCisG\nAQQBg78wAQUEJHNldGhtbGFyc29uL3B5dGhvbi1zbHNhLXJlbGVhc2UtdGVzdDA2\nBgorBgEEAYO/MAEDBChjOGY4OTk2ZTQwZWY3ZTA1MzlkMGIwYWQ0MDVjZjNhYmRi\nZDIwODY1MDkGCisGAQQBg78wAQEEK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRo\ndWJ1c2VyY29udGVudC5jb20wHQYKKwYBBAGDvzABBgQPcmVmcy90YWdzLzAuMS45\nMBUGCisGAQQBg78wAQQEB1JlbGVhc2UwEgYKKwYBBAGDvzABAgQEcHVzaDAKBggq\nhkjOPQQDAwNpADBmAjEA4cZAjJPMV4vIpdwGE7sFt/j9fgSNTB3HhKCOMbAWD9dZ\npBf9Yv0GUP+duHSsjW6FAjEAgpqc5Z3hjvm98DO2fIKxXT/jEC7BLbjJB4Mfpmhi\njH2IwOwnU1BPDrtPLv9K9eGJ\n-----END CERTIFICATE-----\n" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-annotated-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-annotated-tag.intoto.jsonl deleted file mode 100644 index a896a82ae..000000000 --- a/verifiers/internal/gha/testdata/dsse-annotated-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIDkvUKQpbCRy0vtbmOCjHyb6NcAZvVn8+pFePCWr8j6iAiB9cZBFGnuE19DaO1PCBCV72dFRqdLkiceCWS/JG6Kl9A==","cert":"-----BEGIN CERTIFICATE-----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\njH2IwOwnU1BPDrtPLv9K9eGJ\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-branch2-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-branch2-tag-v1.intoto.jsonl deleted file mode 100644 index b87db53c9..000000000 --- a/verifiers/internal/gha/testdata/dsse-branch2-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "eyAiX3R5cGUiOiAiaHR0cHM6Ly9pbi10b3RvLmlvL1N0YXRlbWVudC92MC4xIiwgInN1YmplY3QiOiBbIHsgImRpZ2VzdCI6IHsgInNoYTI1NiI6ICIwYWU3ZTRmYTcxNjg2NTM4NDQwMDEyZWUzNmEyNjM0ZGJhYTE5ZGYyZGQxNmE0NjZmNTI0MTFmYjM0OGJiYzRlIiB9LCAibmFtZSI6ICJiaW5hcnktbGludXgtYW1kNjQiIH0gXSwgInByZWRpY2F0ZVR5cGUiOiAiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6IHsgImJ1aWxkRGVmaW5pdGlvbiI6IHsgImJ1aWxkVHlwZSI6ICJodHRwczovL2dpdGh1Yi5jb20vQXR0ZXN0YXRpb25zL0dpdEh1YkFjdGlvbnNXb3JrZmxvd0B2MSIsICJleHRlcm5hbFBhcmFtZXRlcnMiOiB7ICJzb3VyY2UiOiB7ICJ1cmkiOiAiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCAiZGlnZXN0IjogeyAic2hhMSI6ICI0ZTZjNWY2ZDBiNGExMjZmYTIzNzNkN2U1N2I3YTBhZjA1MTA4NzkxIiB9IH0gfSwgImludGVybmFsUGFyYW1ldGVycyI6IHsgIlJVTk5FUl9BUkNIIjogIlg2NCIsICJHSVRIVUJfQUNUT1IiOiAiYXNyYWEiLCAiR0lUSFVCX0JBU0VfUkVGIjogIiIsICJHSVRIVUJfRVZFTlRfTkFNRSI6ICJwdXNoIiwgIkdJVEhVQl9FVkVOVF9QQVlMT0FEIjogeyAiYWZ0ZXIiOiAiZjYyYTgxODg4NTUxNzhhYmRmMTVhMDcwNzY5MDBhYzRiYmU5NTFlZSIsICJiYXNlX3JlZiI6ICJyZWZzL2hlYWRzL2JyYW5jaDIiLCAiYmVmb3JlIjogIjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCAiY29tbWl0cyI6IFtdLCAiY29tcGFyZSI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21wYXJlL3Nsc2ExIiwgImNyZWF0ZWQiOiB0cnVlLCAiZGVsZXRlZCI6IGZhbHNlLCAiZm9yY2VkIjogZmFsc2UsICJoZWFkX2NvbW1pdCI6IHsgImF1dGhvciI6IHsgImVtYWlsIjogImFzcmFhQGdvb2dsZS5jb20iLCAibmFtZSI6ICJBc3JhIEFsaSIsICJ1c2VybmFtZSI6ICJhc3JhYSIgfSwgImNvbW1pdHRlciI6IHsgImVtYWlsIjogImFzcmFhQGdvb2dsZS5jb20iLCAibmFtZSI6ICJBc3JhIEFsaSIsICJ1c2VybmFtZSI6ICJhc3JhYSIgfSwgImRpc3RpbmN0IjogdHJ1ZSwgImlkIjogImY2MmE4MTg4ODU1MTc4YWJkZjE1YTA3MDc2OTAwYWM0YmJlOTUxZWUiLCAibWVzc2FnZSI6ICJhZGQgd29ya2Zsb3dcblxuU2lnbmVkLW9mZi1ieTogQXNyYSBBbGkgPGFzcmFhQGdvb2dsZS5jb20+IiwgInRpbWVzdGFtcCI6ICIyMDIyLTA1LTAyVDEzOjA0OjUzLTA1OjAwIiwgInRyZWVfaWQiOiAiNjlkMDY5YWVkZjFkMDkxNDQ1ZDIzNTBlYWIwNDJhNWQ1OWM2NjVjYyIsICJ1cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tbWl0L2Y2MmE4MTg4ODU1MTc4YWJkZjE1YTA3MDc2OTAwYWM0YmJlOTUxZWUiIH0sICJwdXNoZXIiOiB7ICJlbWFpbCI6ICJhc3JhYUBnb29nbGUuY29tIiwgIm5hbWUiOiAiYXNyYWEiIH0sICJyZWYiOiAicmVmcy90YWdzL3Nsc2ExIiwgInJlcG9zaXRvcnkiOiB7ICJhbGxvd19mb3JraW5nIjogdHJ1ZSwgImFyY2hpdmVfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC97YXJjaGl2ZV9mb3JtYXR9ey9yZWZ9IiwgImFyY2hpdmVkIjogZmFsc2UsICJhc3NpZ25lZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9hc3NpZ25lZXN7L3VzZXJ9IiwgImJsb2JzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L2Jsb2Jzey9zaGF9IiwgImJyYW5jaGVzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvYnJhbmNoZXN7L2JyYW5jaH0iLCAiY2xvbmVfdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsICJjb2xsYWJvcmF0b3JzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29sbGFib3JhdG9yc3svY29sbGFib3JhdG9yfSIsICJjb21tZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbW1lbnRzey9udW1iZXJ9IiwgImNvbW1pdHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXRzey9zaGF9IiwgImNvbXBhcmVfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21wYXJlL3tiYXNlfS4uLntoZWFkfSIsICJjb250ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbnRlbnRzL3srcGF0aH0iLCAiY29udHJpYnV0b3JzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udHJpYnV0b3JzIiwgImNyZWF0ZWRfYXQiOiAxNjQ0OTM5MjI5LCAiZGVmYXVsdF9icmFuY2giOiAibWFpbiIsICJkZXBsb3ltZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2RlcGxveW1lbnRzIiwgImRlc2NyaXB0aW9uIjogIlRlc3QgZm9yIFNMU0EiLCAiZGlzYWJsZWQiOiBmYWxzZSwgImRvd25sb2Fkc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2Rvd25sb2FkcyIsICJldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ldmVudHMiLCAiZm9yayI6IHRydWUsICJmb3JrcyI6IDAsICJmb3Jrc19jb3VudCI6IDAsICJmb3Jrc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2ZvcmtzIiwgImZ1bGxfbmFtZSI6ICJhc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwgImdpdF9jb21taXRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L2NvbW1pdHN7L3NoYX0iLCAiZ2l0X3JlZnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvcmVmc3svc2hhfSIsICJnaXRfdGFnc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC90YWdzey9zaGF9IiwgImdpdF91cmwiOiAiZ2l0Oi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsICJoYXNfZG93bmxvYWRzIjogdHJ1ZSwgImhhc19pc3N1ZXMiOiBmYWxzZSwgImhhc19wYWdlcyI6IGZhbHNlLCAiaGFzX3Byb2plY3RzIjogdHJ1ZSwgImhhc193aWtpIjogdHJ1ZSwgImhvbWVwYWdlIjogbnVsbCwgImhvb2tzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaG9va3MiLCAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCAiaWQiOiA0NTk2MzkxNTAsICJpc190ZW1wbGF0ZSI6IGZhbHNlLCAiaXNzdWVfY29tbWVudF91cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsICJpc3N1ZV9ldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXMvZXZlbnRzey9udW1iZXJ9IiwgImlzc3Vlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2lzc3Vlc3svbnVtYmVyfSIsICJrZXlzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qva2V5c3sva2V5X2lkfSIsICJsYWJlbHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9sYWJlbHN7L25hbWV9IiwgImxhbmd1YWdlIjogIkdvIiwgImxhbmd1YWdlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2xhbmd1YWdlcyIsICJsaWNlbnNlIjogeyAia2V5IjogImFwYWNoZS0yLjAiLCAibmFtZSI6ICJBcGFjaGUgTGljZW5zZSAyLjAiLCAibm9kZV9pZCI6ICJNRGM2VEdsalpXNXpaVEk9IiwgInNwZHhfaWQiOiAiQXBhY2hlLTIuMCIsICJ1cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIiB9LCAibWFzdGVyX2JyYW5jaCI6ICJtYWluIiwgIm1lcmdlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L21lcmdlcyIsICJtaWxlc3RvbmVzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbWlsZXN0b25lc3svbnVtYmVyfSIsICJtaXJyb3JfdXJsIjogbnVsbCwgIm5hbWUiOiAic2xzYS1vbi1naXRodWItdGVzdCIsICJub2RlX2lkIjogIlJfa2dET0cyV0piZyIsICJub3RpZmljYXRpb25zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvbm90aWZpY2F0aW9uc3s/c2luY2UsYWxsLHBhcnRpY2lwYXRpbmd9IiwgIm9wZW5faXNzdWVzIjogMCwgIm9wZW5faXNzdWVzX2NvdW50IjogMCwgIm93bmVyIjogeyAiYXZhdGFyX3VybCI6ICJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvNTE5NDU2OT92PTQiLCAiZW1haWwiOiAiYXNyYWFAZ29vZ2xlLmNvbSIsICJldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsICJmb2xsb3dlcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93ZXJzIiwgImZvbGxvd2luZ191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwgImdpc3RzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsICJncmF2YXRhcl9pZCI6ICIiLCAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwgImlkIjogNTE5NDU2OSwgImxvZ2luIjogImFzcmFhIiwgIm5hbWUiOiAiYXNyYWEiLCAibm9kZV9pZCI6ICJNRFE2VlhObGNqVXhPVFExTmprPSIsICJvcmdhbml6YXRpb25zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL29yZ3MiLCAicmVjZWl2ZWRfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsICJyZXBvc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZXBvcyIsICJzaXRlX2FkbWluIjogZmFsc2UsICJzdGFycmVkX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCAic3Vic2NyaXB0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdWJzY3JpcHRpb25zIiwgInR5cGUiOiAiVXNlciIsICJ1cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSIgfSwgInByaXZhdGUiOiBmYWxzZSwgInB1bGxzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcHVsbHN7L251bWJlcn0iLCAicHVzaGVkX2F0IjogMTY1MTUxNDc0NywgInJlbGVhc2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcmVsZWFzZXN7L2lkfSIsICJzaXplIjogMTIxNCwgInNzaF91cmwiOiAiZ2l0QGdpdGh1Yi5jb206YXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLCAic3RhcmdhemVycyI6IDAsICJzdGFyZ2F6ZXJzX2NvdW50IjogMCwgInN0YXJnYXplcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGFyZ2F6ZXJzIiwgInN0YXR1c2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhdHVzZXMve3NoYX0iLCAic3Vic2NyaWJlcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpYmVycyIsICJzdWJzY3JpcHRpb25fdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpcHRpb24iLCAic3ZuX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsICJ0YWdzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGFncyIsICJ0ZWFtc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3RlYW1zIiwgInRvcGljcyI6IFtdLCAidHJlZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdHJlZXN7L3NoYX0iLCAidXBkYXRlZF9hdCI6ICIyMDIyLTAyLTE1VDE1OjM2OjQxWiIsICJ1cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCAidmlzaWJpbGl0eSI6ICJwdWJsaWMiLCAid2F0Y2hlcnMiOiAwLCAid2F0Y2hlcnNfY291bnQiOiAwIH0sICJzZW5kZXIiOiB7ICJhdmF0YXJfdXJsIjogImh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS81MTk0NTY5P3Y9NCIsICJldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsICJmb2xsb3dlcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93ZXJzIiwgImZvbGxvd2luZ191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwgImdpc3RzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsICJncmF2YXRhcl9pZCI6ICIiLCAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwgImlkIjogNTE5NDU2OSwgImxvZ2luIjogImFzcmFhIiwgIm5vZGVfaWQiOiAiTURRNlZYTmxjalV4T1RRMU5qaz0iLCAib3JnYW5pemF0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwgInJlY2VpdmVkX2V2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZWNlaXZlZF9ldmVudHMiLCAicmVwb3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVwb3MiLCAic2l0ZV9hZG1pbiI6IGZhbHNlLCAic3RhcnJlZF91cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdGFycmVkey9vd25lcn17L3JlcG99IiwgInN1YnNjcmlwdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3Vic2NyaXB0aW9ucyIsICJ0eXBlIjogIlVzZXIiLCAidXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEiIH0gfSwgIkdJVEhVQl9SRUYiOiAicmVmcy90YWdzL3Nsc2ExIiwgIkdJVEhVQl9SRUZfVFlQRSI6ICJ0YWciLCAiR0lUSFVCX1JVTl9BVFRFTVBUIjogIjEiLCAiR0lUSFVCX1JOTl9JRCI6ICIyMjU5NzA5MDc5IiwgIkdJVEhVQl9SVU5fTlVNQkVSIjogIjEyNyIsICJHSVRIVUJfU0hBIjogImEyODgwZDY0ZDEyYjI5NTc2MTg5OWQ1MjNlMzNjMjI2NzA5ODIwNTQiLCAiSU1BR0VfT1MiOiAidWJ1bnR1MjAiIH0gfSwgInJ1bkRldGFpbHMiOiB7ICJidWlsZGVyIjogeyAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL0F0dGVzdGF0aW9ucy9HaXRIdWJIb3N0ZWRBY3Rpb25zQHYxIiB9LCAibWV0YWRhdGEiOiB7ICJpbnZvY2F0aW9uSWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hY3Rpb25zL3J1bnMvNDEzNTQ2Mzc0MS9hdHRlbXB0cy8xIiB9IH0gfSB9Cg==", "signatures": [ { "keyid": "", "sig": "MEQCIHq5jMEDDCjNbWKSiXAtKUUP+Emsd8PgVmriuoGaWLOzAiAoElOb2LzO9fAcT426g8RKi9YO6C4W1Ds15jvMwPUoSw==" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-branch2-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-branch2-tag.intoto.jsonl deleted file mode 100644 index d9634a6a2..000000000 --- a/verifiers/internal/gha/testdata/dsse-branch2-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJiaW5hcnktbGludXgtYW1kNjQiLCJkaWdlc3QiOnsic2hhMjU2IjoiNmRiOTM3ZjA3YzE0ZDMwOWQ0MDNlNTYxZTJiNDAyOTcyZTJhNmVkYjMyZjQ1MjZlMWI2YjliYTg1NWZkODU3NCJ9fV0sInByZWRpY2F0ZSI6eyJidWlsZGVyIjp7ImlkIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nby8uZ2l0aHViL3dvcmtmbG93cy9zbHNhM19idWlsZGVyLnltbEByZWZzL2hlYWRzL21haW4ifSwiYnVpbGRUeXBlIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nb0B2MSIsImludm9jYXRpb24iOnsiY29uZmlnU291cmNlIjp7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdEByZWZzL3RhZ3Mvc2xzYTEiLCJkaWdlc3QiOnsic2hhMSI6ImY2MmE4MTg4ODU1MTc4YWJkZjE1YTA3MDc2OTAwYWM0YmJlOTUxZWUifSwiZW50cnlQb2ludCI6IlRlc3QgU0xTQSJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6ImFzcmFhIiwiZ2l0aHViX2Jhc2VfcmVmIjoiIiwiZ2l0aHViX2V2ZW50X25hbWUiOiJwdXNoIiwiZ2l0aHViX2V2ZW50X3BheWxvYWQiOnsiYWZ0ZXIiOiJmNjJhODE4ODg1NTE3OGFiZGYxNWEwNzA3NjkwMGFjNGJiZTk1MWVlIiwiYmFzZV9yZWYiOiJyZWZzL2hlYWRzL2JyYW5jaDIiLCJiZWZvcmUiOiIwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwiY29tbWl0cyI6W10sImNvbXBhcmUiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21wYXJlL3Nsc2ExIiwiY3JlYXRlZCI6dHJ1ZSwiZGVsZXRlZCI6ZmFsc2UsImZvcmNlZCI6ZmFsc2UsImhlYWRfY29tbWl0Ijp7ImF1dGhvciI6eyJlbWFpbCI6ImFzcmFhQGdvb2dsZS5jb20iLCJuYW1lIjoiQXNyYSBBbGkiLCJ1c2VybmFtZSI6ImFzcmFhIn0sImNvbW1pdHRlciI6eyJlbWFpbCI6ImFzcmFhQGdvb2dsZS5jb20iLCJuYW1lIjoiQXNyYSBBbGkiLCJ1c2VybmFtZSI6ImFzcmFhIn0sImRpc3RpbmN0Ijp0cnVlLCJpZCI6ImY2MmE4MTg4ODU1MTc4YWJkZjE1YTA3MDc2OTAwYWM0YmJlOTUxZWUiLCJtZXNzYWdlIjoiYWRkIHdvcmtmbG93XG5cblNpZ25lZC1vZmYtYnk6IEFzcmEgQWxpIFx1MDAzY2FzcmFhQGdvb2dsZS5jb21cdTAwM2UiLCJ0aW1lc3RhbXAiOiIyMDIyLTA1LTAyVDEzOjA0OjUzLTA1OjAwIiwidHJlZV9pZCI6IjY5ZDA2OWFlZGYxZDA5MTQ0NWQyMzUwZWFiMDQyYTVkNTljNjY1Y2MiLCJ1cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXQvZjYyYTgxODg4NTUxNzhhYmRmMTVhMDcwNzY5MDBhYzRiYmU5NTFlZSJ9LCJwdXNoZXIiOnsiZW1haWwiOiJhc3JhYUBnb29nbGUuY29tIiwibmFtZSI6ImFzcmFhIn0sInJlZiI6InJlZnMvdGFncy9zbHNhMSIsInJlcG9zaXRvcnkiOnsiYWxsb3dfZm9ya2luZyI6dHJ1ZSwiYXJjaGl2ZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsImFyY2hpdmVkIjpmYWxzZSwiYXNzaWduZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9hc3NpZ25lZXN7L3VzZXJ9IiwiYmxvYnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9ibG9ic3svc2hhfSIsImJyYW5jaGVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9icmFuY2hlc3svYnJhbmNofSIsImNsb25lX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsImNvbGxhYm9yYXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbGxhYm9yYXRvcnN7L2NvbGxhYm9yYXRvcn0iLCJjb21tZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tbWVudHN7L251bWJlcn0iLCJjb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXRzey9zaGF9IiwiY29tcGFyZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS97YmFzZX0uLi57aGVhZH0iLCJjb250ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udGVudHMveytwYXRofSIsImNvbnRyaWJ1dG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udHJpYnV0b3JzIiwiY3JlYXRlZF9hdCI6MTY0NDkzOTIyOSwiZGVmYXVsdF9icmFuY2giOiJtYWluIiwiZGVwbG95bWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2RlcGxveW1lbnRzIiwiZGVzY3JpcHRpb24iOiJUZXN0IGZvciBTTFNBIiwiZGlzYWJsZWQiOmZhbHNlLCJkb3dubG9hZHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2Rvd25sb2FkcyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZXZlbnRzIiwiZm9yayI6dHJ1ZSwiZm9ya3MiOjAsImZvcmtzX2NvdW50IjowLCJmb3Jrc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZm9ya3MiLCJmdWxsX25hbWUiOiJhc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwiZ2l0X2NvbW1pdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9jb21taXRzey9zaGF9IiwiZ2l0X3JlZnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9yZWZzey9zaGF9IiwiZ2l0X3RhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC90YWdzey9zaGF9IiwiZ2l0X3VybCI6ImdpdDovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLCJoYXNfZG93bmxvYWRzIjp0cnVlLCJoYXNfaXNzdWVzIjpmYWxzZSwiaGFzX3BhZ2VzIjpmYWxzZSwiaGFzX3Byb2plY3RzIjp0cnVlLCJoYXNfd2lraSI6dHJ1ZSwiaG9tZXBhZ2UiOm51bGwsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ob29rcyIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCJpZCI6NDU5NjM5MTUwLCJpc190ZW1wbGF0ZSI6ZmFsc2UsImlzc3VlX2NvbW1lbnRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsImlzc3VlX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzL2V2ZW50c3svbnVtYmVyfSIsImlzc3Vlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzey9udW1iZXJ9Iiwia2V5c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qva2V5c3sva2V5X2lkfSIsImxhYmVsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbGFiZWxzey9uYW1lfSIsImxhbmd1YWdlIjoiR28iLCJsYW5ndWFnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2xhbmd1YWdlcyIsImxpY2Vuc2UiOnsia2V5IjoiYXBhY2hlLTIuMCIsIm5hbWUiOiJBcGFjaGUgTGljZW5zZSAyLjAiLCJub2RlX2lkIjoiTURjNlRHbGpaVzV6WlRJPSIsInNwZHhfaWQiOiJBcGFjaGUtMi4wIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIn0sIm1hc3Rlcl9icmFuY2giOiJtYWluIiwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9tZXJnZXMiLCJtaWxlc3RvbmVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9taWxlc3RvbmVzey9udW1iZXJ9IiwibWlycm9yX3VybCI6bnVsbCwibmFtZSI6InNsc2Etb24tZ2l0aHViLXRlc3QiLCJub2RlX2lkIjoiUl9rZ0RPRzJXSmJnIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvbm90aWZpY2F0aW9uc3s/c2luY2UsYWxsLHBhcnRpY2lwYXRpbmd9Iiwib3Blbl9pc3N1ZXMiOjAsIm9wZW5faXNzdWVzX2NvdW50IjowLCJvd25lciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwiZW1haWwiOiJhc3JhYUBnb29nbGUuY29tIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsImZvbGxvd2Vyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLCJnaXN0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsImdyYXZhdGFyX2lkIjoiIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEiLCJpZCI6NTE5NDU2OSwibG9naW4iOiJhc3JhYSIsIm5hbWUiOiJhc3JhYSIsIm5vZGVfaWQiOiJNRFE2VlhObGNqVXhPVFExTmprPSIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdWJzY3JpcHRpb25zIiwidHlwZSI6IlVzZXIiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhIn0sInByaXZhdGUiOmZhbHNlLCJwdWxsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcHVsbHN7L251bWJlcn0iLCJwdXNoZWRfYXQiOjE2NTE1MTQ3NDcsInJlbGVhc2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6MTIxNCwic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOmFzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0Iiwic3RhcmdhemVycyI6MCwic3RhcmdhemVyc19jb3VudCI6MCwic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGF0dXNlcy97c2hhfSIsInN1YnNjcmliZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwidGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdHJlZXN7L3NoYX0iLCJ1cGRhdGVkX2F0IjoiMjAyMi0wMi0xNVQxNTozNjo0MVoiLCJ1cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsInZpc2liaWxpdHkiOiJwdWJsaWMiLCJ3YXRjaGVycyI6MCwid2F0Y2hlcnNfY291bnQiOjB9LCJzZW5kZXIiOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS81MTk0NTY5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwiaWQiOjUxOTQ1NjksImxvZ2luIjoiYXNyYWEiLCJub2RlX2lkIjoiTURRNlZYTmxjalV4T1RRMU5qaz0iLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSJ9fSwiZ2l0aHViX2hlYWRfcmVmIjoiIiwiZ2l0aHViX3JlZiI6InJlZnMvdGFncy9zbHNhMSIsImdpdGh1Yl9yZWZfdHlwZSI6InRhZyIsImdpdGh1Yl9ydW5fYXR0ZW1wdCI6IjEiLCJnaXRodWJfcnVuX2lkIjoiMjI1OTU2OTExOCIsImdpdGh1Yl9ydW5fbnVtYmVyIjoiMSIsImdpdGh1Yl9zaGExIjoiZjYyYTgxODg4NTUxNzhhYmRmMTVhMDcwNzY5MDBhYzRiYmU5NTFlZSIsIm9zIjoidWJ1bnR1MjAifX0sImJ1aWxkQ29uZmlnIjp7InZlcnNpb24iOjEsInN0ZXBzIjpbeyJjb21tYW5kIjpbIi9vcHQvaG9zdGVkdG9vbGNhY2hlL2dvLzEuMTcuOS94NjQvYmluL2dvIiwiYnVpbGQiLCItbW9kPXZlbmRvciIsIi10cmltcGF0aCIsIi10YWdzPW5ldGdvIiwiLW8iLCJiaW5hcnktbGludXgtYW1kNjQiXSwiZW52IjpbIkdPT1M9bGludXgiLCJHT0FSQ0g9YW1kNjQiLCJHTzExMU1PRFVMRT1vbiIsIkNHT19FTkFCTEVEPTAiXX1dfSwibWV0YWRhdGEiOnsiY29tcGxldGVuZXNzIjp7InBhcmFtZXRlcnMiOnRydWUsImVudmlyb25tZW50IjpmYWxzZSwibWF0ZXJpYWxzIjpmYWxzZX0sInJlcHJvZHVjaWJsZSI6ZmFsc2V9LCJtYXRlcmlhbHMiOlt7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdEByZWZzL3RhZ3Mvc2xzYTEiLCJkaWdlc3QiOnsic2hhMSI6ImY2MmE4MTg4ODU1MTc4YWJkZjE1YTA3MDc2OTAwYWM0YmJlOTUxZWUifX0seyJ1cmkiOiJodHRwczovL2dpdGh1Yi5jb20vYWN0aW9ucy92aXJ0dWFsLWVudmlyb25tZW50cy9yZWxlYXNlcy90YWcvdWJ1bnR1MjAvMjAyMjA0MjUuMSJ9XX19","signatures":[{"keyid":"","sig":"MEQCIHq5jMEDDCjNbWKSiXAtKUUP+Emsd8PgVmriuoGaWLOzAiAoElOb2LzO9fAcT426g8RKi9YO6C4W1Ds15jvMwPUoSw=="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-branch3-ref-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-branch3-ref-v1.intoto.jsonl deleted file mode 100644 index a55ea7859..000000000 --- a/verifiers/internal/gha/testdata/dsse-branch3-ref-v1.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEQCIBO/t/MjFal4P4pPgklZu5LF/1gA1761TB42NQH5tJ1aAiAVwD7Wn2zLNz9KNn99NGfU1jwumMhFWIpJqKpBseYHsA==" - } - ] -} diff --git a/verifiers/internal/gha/testdata/dsse-branch3-ref.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-branch3-ref.intoto.jsonl deleted file mode 100644 index 29fbf55e5..000000000 --- a/verifiers/internal/gha/testdata/dsse-branch3-ref.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJiaW5hcnktbGludXgtYW1kNjQiLCJkaWdlc3QiOnsic2hhMjU2IjoiNmRiOTM3ZjA3YzE0ZDMwOWQ0MDNlNTYxZTJiNDAyOTcyZTJhNmVkYjMyZjQ1MjZlMWI2YjliYTg1NWZkODU3NCJ9fV0sInByZWRpY2F0ZSI6eyJidWlsZGVyIjp7ImlkIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nby8uZ2l0aHViL3dvcmtmbG93cy9zbHNhM19idWlsZGVyLnltbEByZWZzL2hlYWRzL21haW4ifSwiYnVpbGRUeXBlIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nb0B2MSIsImludm9jYXRpb24iOnsiY29uZmlnU291cmNlIjp7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdEByZWZzL2hlYWRzL2JyYW5jaDMiLCJkaWdlc3QiOnsic2hhMSI6ImE1ZjQ4ZmRiNDMzODg0YTNiNDNjYmZjNjUyMThmZmU0NTU5ZjBiMTcifSwiZW50cnlQb2ludCI6IlRlc3QgU0xTQSJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6ImFzcmFhIiwiZ2l0aHViX2Jhc2VfcmVmIjoiIiwiZ2l0aHViX2V2ZW50X25hbWUiOiJ3b3JrZmxvd19kaXNwYXRjaCIsImdpdGh1Yl9ldmVudF9wYXlsb2FkIjp7ImlucHV0cyI6bnVsbCwicmVmIjoicmVmcy9oZWFkcy9icmFuY2gzIiwicmVwb3NpdG9yeSI6eyJhbGxvd19mb3JraW5nIjp0cnVlLCJhcmNoaXZlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC97YXJjaGl2ZV9mb3JtYXR9ey9yZWZ9IiwiYXJjaGl2ZWQiOmZhbHNlLCJhc3NpZ25lZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2Fzc2lnbmVlc3svdXNlcn0iLCJibG9ic191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L2Jsb2Jzey9zaGF9IiwiYnJhbmNoZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2JyYW5jaGVzey9icmFuY2h9IiwiY2xvbmVfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0IiwiY29sbGFib3JhdG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29sbGFib3JhdG9yc3svY29sbGFib3JhdG9yfSIsImNvbW1lbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21tZW50c3svbnVtYmVyfSIsImNvbW1pdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbW1pdHN7L3NoYX0iLCJjb21wYXJlX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21wYXJlL3tiYXNlfS4uLntoZWFkfSIsImNvbnRlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb250ZW50cy97K3BhdGh9IiwiY29udHJpYnV0b3JzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb250cmlidXRvcnMiLCJjcmVhdGVkX2F0IjoiMjAyMi0wMi0xNVQxNTozMzo0OVoiLCJkZWZhdWx0X2JyYW5jaCI6Im1haW4iLCJkZXBsb3ltZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZGVwbG95bWVudHMiLCJkZXNjcmlwdGlvbiI6IlRlc3QgZm9yIFNMU0EiLCJkaXNhYmxlZCI6ZmFsc2UsImRvd25sb2Fkc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZG93bmxvYWRzIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ldmVudHMiLCJmb3JrIjp0cnVlLCJmb3JrcyI6MCwiZm9ya3NfY291bnQiOjAsImZvcmtzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9mb3JrcyIsImZ1bGxfbmFtZSI6ImFzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCJnaXRfY29tbWl0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L2NvbW1pdHN7L3NoYX0iLCJnaXRfcmVmc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L3JlZnN7L3NoYX0iLCJnaXRfdGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L3RhZ3N7L3NoYX0iLCJnaXRfdXJsIjoiZ2l0Oi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsImhhc19kb3dubG9hZHMiOnRydWUsImhhc19pc3N1ZXMiOmZhbHNlLCJoYXNfcGFnZXMiOmZhbHNlLCJoYXNfcHJvamVjdHMiOnRydWUsImhhc193aWtpIjp0cnVlLCJob21lcGFnZSI6bnVsbCwiaG9va3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2hvb2tzIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsImlkIjo0NTk2MzkxNTAsImlzX3RlbXBsYXRlIjpmYWxzZSwiaXNzdWVfY29tbWVudF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzL2NvbW1lbnRzey9udW1iZXJ9IiwiaXNzdWVfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXMvZXZlbnRzey9udW1iZXJ9IiwiaXNzdWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXN7L251bWJlcn0iLCJrZXlzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9rZXlzey9rZXlfaWR9IiwibGFiZWxzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9sYWJlbHN7L25hbWV9IiwibGFuZ3VhZ2UiOiJHbyIsImxhbmd1YWdlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbGFuZ3VhZ2VzIiwibGljZW5zZSI6eyJrZXkiOiJhcGFjaGUtMi4wIiwibmFtZSI6IkFwYWNoZSBMaWNlbnNlIDIuMCIsIm5vZGVfaWQiOiJNRGM2VEdsalpXNXpaVEk9Iiwic3BkeF9pZCI6IkFwYWNoZS0yLjAiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL2xpY2Vuc2VzL2FwYWNoZS0yLjAifSwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9tZXJnZXMiLCJtaWxlc3RvbmVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9taWxlc3RvbmVzey9udW1iZXJ9IiwibWlycm9yX3VybCI6bnVsbCwibmFtZSI6InNsc2Etb24tZ2l0aHViLXRlc3QiLCJub2RlX2lkIjoiUl9rZ0RPRzJXSmJnIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvbm90aWZpY2F0aW9uc3s/c2luY2UsYWxsLHBhcnRpY2lwYXRpbmd9Iiwib3Blbl9pc3N1ZXMiOjAsIm9wZW5faXNzdWVzX2NvdW50IjowLCJvd25lciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsImZvbGxvd2Vyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLCJnaXN0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsImdyYXZhdGFyX2lkIjoiIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEiLCJpZCI6NTE5NDU2OSwibG9naW4iOiJhc3JhYSIsIm5vZGVfaWQiOiJNRFE2VlhObGNqVXhPVFExTmprPSIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdWJzY3JpcHRpb25zIiwidHlwZSI6IlVzZXIiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhIn0sInByaXZhdGUiOmZhbHNlLCJwdWxsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcHVsbHN7L251bWJlcn0iLCJwdXNoZWRfYXQiOiIyMDIyLTA1LTAzVDE5OjQ1OjI3WiIsInJlbGVhc2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6MTIxNSwic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOmFzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0Iiwic3RhcmdhemVyc19jb3VudCI6MCwic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGF0dXNlcy97c2hhfSIsInN1YnNjcmliZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwidGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdHJlZXN7L3NoYX0iLCJ1cGRhdGVkX2F0IjoiMjAyMi0wMi0xNVQxNTozNjo0MVoiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCJ2aXNpYmlsaXR5IjoicHVibGljIiwid2F0Y2hlcnMiOjAsIndhdGNoZXJzX2NvdW50IjowfSwic2VuZGVyIjp7ImF2YXRhcl91cmwiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvNTE5NDU2OT92PTQiLCJldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9ldmVudHN7L3ByaXZhY3l9IiwiZm9sbG93ZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93ZXJzIiwiZm9sbG93aW5nX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsImdpc3RzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZ2lzdHN7L2dpc3RfaWR9IiwiZ3JhdmF0YXJfaWQiOiIiLCJodG1sX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYSIsImlkIjo1MTk0NTY5LCJsb2dpbiI6ImFzcmFhIiwibm9kZV9pZCI6Ik1EUTZWWE5sY2pVeE9UUTFOams9Iiwib3JnYW5pemF0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL29yZ3MiLCJyZWNlaXZlZF9ldmVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZWNlaXZlZF9ldmVudHMiLCJyZXBvc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlcG9zIiwic2l0ZV9hZG1pbiI6ZmFsc2UsInN0YXJyZWRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdGFycmVkey9vd25lcn17L3JlcG99Iiwic3Vic2NyaXB0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N1YnNjcmlwdGlvbnMiLCJ0eXBlIjoiVXNlciIsInVybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEifSwid29ya2Zsb3ciOiIuZ2l0aHViL3dvcmtmbG93cy9zbHNhLXJldXNhYmxlLnlhbWwifSwiZ2l0aHViX2hlYWRfcmVmIjoiIiwiZ2l0aHViX3JlZiI6InJlZnMvaGVhZHMvYnJhbmNoMyIsImdpdGh1Yl9yZWZfdHlwZSI6ImJyYW5jaCIsImdpdGh1Yl9ydW5fYXR0ZW1wdCI6IjEiLCJnaXRodWJfcnVuX2lkIjoiMjI2NjA0NTcxNSIsImdpdGh1Yl9ydW5fbnVtYmVyIjoiMTMxIiwiZ2l0aHViX3NoYTEiOiJhNWY0OGZkYjQzMzg4NGEzYjQzY2JmYzY1MjE4ZmZlNDU1OWYwYjE3Iiwib3MiOiJ1YnVudHUyMCJ9fSwiYnVpbGRDb25maWciOnsidmVyc2lvbiI6MSwic3RlcHMiOlt7ImNvbW1hbmQiOlsiL29wdC9ob3N0ZWR0b29sY2FjaGUvZ28vMS4xNy45L3g2NC9iaW4vZ28iLCJidWlsZCIsIi1tb2Q9dmVuZG9yIiwiLXRyaW1wYXRoIiwiLXRhZ3M9bmV0Z28iLCItbyIsImJpbmFyeS1saW51eC1hbWQ2NCJdLCJlbnYiOlsiR09PUz1saW51eCIsIkdPQVJDSD1hbWQ2NCIsIkdPMTExTU9EVUxFPW9uIiwiQ0dPX0VOQUJMRUQ9MCJdfV19LCJtZXRhZGF0YSI6eyJjb21wbGV0ZW5lc3MiOnsicGFyYW1ldGVycyI6dHJ1ZSwiZW52aXJvbm1lbnQiOmZhbHNlLCJtYXRlcmlhbHMiOmZhbHNlfSwicmVwcm9kdWNpYmxlIjpmYWxzZX0sIm1hdGVyaWFscyI6W3sidXJpIjoiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0QHJlZnMvaGVhZHMvYnJhbmNoMyIsImRpZ2VzdCI6eyJzaGExIjoiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyJ9fSx7InVyaSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hY3Rpb25zL3ZpcnR1YWwtZW52aXJvbm1lbnRzL3JlbGVhc2VzL3RhZy91YnVudHUyMC8yMDIyMDQyNS4xIn1dfX0=","signatures":[{"keyid":"","sig":"MEQCIBO/t/MjFal4P4pPgklZu5LF/1gA1761TB42NQH5tJ1aAiAVwD7Wn2zLNz9KNn99NGfU1jwumMhFWIpJqKpBseYHsA=="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-invalid-ref-type-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-invalid-ref-type-v1.intoto.jsonl deleted file mode 100644 index aad8ef537..000000000 --- a/verifiers/internal/gha/testdata/dsse-invalid-ref-type-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "eyAiX3R5cGUiOiAiaHR0cHM6Ly9pbi10b3RvLmlvL1N0YXRlbWVudC92MC4xIiwgInN1YmplY3QiOiBbIHsgImRpZ2VzdCI6IHsgInNoYTI1NiI6ICIwYWU3ZTRmYTcxNjg2NTM4NDQwMDEyZWUzNmEyNjM0ZGJhYTE5ZGYyZGQxNmE0NjZmNTI0MTFmYjM0OGJiYzRlIiB9LCAibmFtZSI6ICJiaW5hcnktbGludXgtYW1kNjQiIH0gXSwgInByZWRpY2F0ZVR5cGUiOiAiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6IHsgImJ1aWxkRGVmaW5pdGlvbiI6IHsgImJ1aWxkVHlwZSI6ICJodHRwczovL2dpdGh1Yi5jb20vQXR0ZXN0YXRpb25zL0dpdEh1YkFjdGlvbnNXb3JrZmxvd0B2MSIsICJleHRlcm5hbFBhcmFtZXRlcnMiOiB7ICJzb3VyY2UiOiB7ICJ1cmkiOiAiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCAiZGlnZXN0IjogeyAic2hhMSI6ICI0ZTZjNWY2ZDBiNGExMjZmYTIzNzNkN2U1N2I3YTBhZjA1MTA4NzkxIiB9IH0gfSwgImludGVybmFsUGFyYW1ldGVycyI6IHsgIlJVTk5FUl9BUkNIIjogIlg2NCIsICJHSVRIVUJfQUNUT1IiOiAiYXNyYWEiLCAiR0lUSFVCX0JBU0VfUkVGIjogIiIsICJHSVRIVUJfRVZFTlRfTkFNRSI6ICJ3b3JrZmxvd19kaXNwYXRjaCIsICJHSVRIVUJfRVZFTlRfUEFZTE9BRCI6IHsgImlucHV0cyI6IG51bGwsICJyZWYiOiAicmVmcy9oZWFkcy9tYWluIiwgInJlcG9zaXRvcnkiOiB7ICJhbGxvd19mb3JraW5nIjogdHJ1ZSwgImFyY2hpdmVfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC97YXJjaGl2ZV9mb3JtYXR9ey9yZWZ9IiwgImFyY2hpdmVkIjogZmFsc2UsICJhc3NpZ25lZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9hc3NpZ25lZXN7L3VzZXJ9IiwgImJsb2JzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L2Jsb2Jzey9zaGF9IiwgImJyYW5jaGVzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvYnJhbmNoZXN7L2JyYW5jaH0iLCAiY2xvbmVfdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsICJjb2xsYWJvcmF0b3JzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29sbGFib3JhdG9yc3svY29sbGFib3JhdG9yfSIsICJjb21tZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbW1lbnRzey9udW1iZXJ9IiwgImNvbW1pdHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXRzey9zaGF9IiwgImNvbXBhcmVfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21wYXJlL3tiYXNlfS4uLntoZWFkfSIsICJjb250ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbnRlbnRzL3srcGF0aH0iLCAiY29udHJpYnV0b3JzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udHJpYnV0b3JzIiwgImNyZWF0ZWRfYXQiOiAiMjAyMi0wMi0xNVQxNTozMzo0OVoiLCAiZGVmYXVsdF9icmFuY2giOiAibWFpbiIsICJkZXBsb3ltZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2RlcGxveW1lbnRzIiwgImRlc2NyaXB0aW9uIjogIlRlc3QgZm9yIFNMU0EiLCAiZGlzYWJsZWQiOiBmYWxzZSwgImRvd25sb2Fkc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2Rvd25sb2FkcyIsICJldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ldmVudHMiLCAiZm9yayI6IHRydWUsICJmb3JrcyI6IDAsICJmb3Jrc19jb3VudCI6IDAsICJmb3Jrc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2ZvcmtzIiwgImZ1bGxfbmFtZSI6ICJhc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwgImdpdF9jb21taXRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L2NvbW1pdHN7L3NoYX0iLCAiZ2l0X3JlZnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvcmVmc3svc2hhfSIsICJnaXRfdGFnc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC90YWdzey9zaGF9IiwgImdpdF91cmwiOiAiZ2l0Oi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsICJoYXNfZG93bmxvYWRzIjogdHJ1ZSwgImhhc19pc3N1ZXMiOiBmYWxzZSwgImhhc19wYWdlcyI6IGZhbHNlLCAiaGFzX3Byb2plY3RzIjogdHJ1ZSwgImhhc193aWtpIjogdHJ1ZSwgImhvbWVwYWdlIjogbnVsbCwgImhvb2tzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaG9va3MiLCAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCAiaWQiOiA0NTk2MzkxNTAsICJpc190ZW1wbGF0ZSI6IGZhbHNlLCAiaXNzdWVfY29tbWVudF91cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsICJpc3N1ZV9ldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXMvZXZlbnRzey9udW1iZXJ9IiwgImlzc3Vlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2lzc3Vlc3svbnVtYmVyfSIsICJrZXlzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qva2V5c3sva2V5X2lkfSIsICJsYWJlbHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9sYWJlbHN7L25hbWV9IiwgImxhbmd1YWdlIjogIkdvIiwgImxhbmd1YWdlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2xhbmd1YWdlcyIsICJsaWNlbnNlIjogeyAia2V5IjogImFwYWNoZS0yLjAiLCAibmFtZSI6ICJBcGFjaGUgTGljZW5zZSAyLjAiLCAibm9kZV9pZCI6ICJNRGM2VEdsalpXNXpaVEk9IiwgInNwZHhfaWQiOiAiQXBhY2hlLTIuMCIsICJ1cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIiB9LCAibWVyZ2VzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbWVyZ2VzIiwgIm1pbGVzdG9uZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9taWxlc3RvbmVzey9udW1iZXJ9IiwgIm1pcnJvcl91cmwiOiBudWxsLCAibmFtZSI6ICJzbHNhLW9uLWdpdGh1Yi10ZXN0IiwgIm5vZGVfaWQiOiAiUl9rZ0RPRzJXSmJnIiwgIm5vdGlmaWNhdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ub3RpZmljYXRpb25zez9zaW5jZSxhbGwscGFydGljaXBhdGluZ30iLCAib3Blbl9pc3N1ZXMiOiAwLCAib3Blbl9pc3N1ZXNfY291bnQiOiAwLCAib3duZXIiOiB7ICJhdmF0YXJfdXJsIjogImh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS81MTk0NTY5P3Y9NCIsICJldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsICJmb2xsb3dlcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93ZXJzIiwgImZvbGxvd2luZ191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwgImdpc3RzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsICJncmF2YXRhcl9pZCI6ICIiLCAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwgImlkIjogNTE5NDU2OSwgImxvZ2luIjogImFzcmFhIiwgIm5vZGVfaWQiOiAiTURRNlZYTmxjalV4T1RRMU5qaz0iLCAib3JnYW5pemF0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwgInJlY2VpdmVkX2V2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZWNlaXZlZF9ldmVudHMiLCAicmVwb3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVwb3MiLCAic2l0ZV9hZG1pbiI6IGZhbHNlLCAic3RhcnJlZF91cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdGFycmVkey9vd25lcn17L3JlcG99IiwgInN1YnNjcmlwdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3Vic2NyaXB0aW9ucyIsICJ0eXBlIjogIlVzZXIiLCAidXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEiIH0sICJwcml2YXRlIjogZmFsc2UsICJwdWxsc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3B1bGxzey9udW1iZXJ9IiwgInB1c2hlZF9hdCI6ICIyMDIyLTA1LTAyVDE4OjA1OjQ3WiIsICJyZWxlYXNlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3JlbGVhc2Vzey9pZH0iLCAic2l6ZSI6IDEyMTQsICJzc2hfdXJsIjogImdpdEBnaXRodWIuY29tOmFzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0IiwgInN0YXJnYXplcnNfY291bnQiOiAwLCAic3RhcmdhemVyc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3N0YXJnYXplcnMiLCAic3RhdHVzZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGF0dXNlcy97c2hhfSIsICJzdWJzY3JpYmVyc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3N1YnNjcmliZXJzIiwgInN1YnNjcmlwdGlvbl91cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3N1YnNjcmlwdGlvbiIsICJzdm5fdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwgInRhZ3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC90YWdzIiwgInRlYW1zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGVhbXMiLCAidG9waWNzIjogW10sICJ0cmVlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC90cmVlc3svc2hhfSIsICJ1cGRhdGVkX2F0IjogIjIwMjItMDItMTVUMTU6MzY6NDFaIiwgInVybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCAidmlzaWJpbGl0eSI6ICJwdWJsaWMiLCAid2F0Y2hlcnMiOiAwLCAid2F0Y2hlcnNfY291bnQiOiAwIH0sICJzZW5kZXIiOiB7ICJhdmF0YXJfdXJsIjogImh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS81MTk0NTY5P3Y9NCIsICJldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsICJmb2xsb3dlcnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93ZXJzIiwgImZvbGxvd2luZ191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwgImdpc3RzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsICJncmF2YXRhcl9pZCI6ICIiLCAiaHRtbF91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwgImlkIjogNTE5NDU2OSwgImxvZ2luIjogImFzcmFhIiwgIm5vZGVfaWQiOiAiTURRNlZYTmxjalV4T1RRMU5qaz0iLCAib3JnYW5pemF0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwgInJlY2VpdmVkX2V2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZWNlaXZlZF9ldmVudHMiLCAicmVwb3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVwb3MiLCAic2l0ZV9hZG1pbiI6IGZhbHNlLCAic3RhcnJlZF91cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdGFycmVkey9vd25lcn17L3JlcG99IiwgInN1YnNjcmlwdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3Vic2NyaXB0aW9ucyIsICJ0eXBlIjogIlVzZXIiLCAidXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEiIH0sICJ3b3JrZmxvdyI6ICIuZ2l0aHViL3dvcmtmbG93cy9zbHNhLXJldXNhYmxlLnlhbWwiIH0sICJHSVRIVUJfUkVGIjogInJlZnMvaGVhZHMvbWFpbiIsICJHSVRIVUJfUkVGX1RZUEUiOiAidW5rbm93biIsICJHSVRIVUJfUlVOX0FUVEVNUFQiOiAiMSIsICJHSVRIVUJfUk5OX0lEIjogIjIyNTk3MDkwNzkiLCAiR0lUSFVCX1JVTl9OVU1CRVIiOiAiMTI3IiwgIkdJVEhVQl9TSEEiOiAiYTI4ODBkNjRkMTJiMjk1NzYxODk5ZDUyM2UzM2MyMjY3MDk4MjA1NCIsICJJTUFHRV9PUyI6ICJ1YnVudHUyMCIgfSB9LCAicnVuRGV0YWlscyI6IHsgImJ1aWxkZXIiOiB7ICJpZCI6ICJodHRwczovL2dpdGh1Yi5jb20vQXR0ZXN0YXRpb25zL0dpdEh1Ykhvc3RlZEFjdGlvbnNAdjEiIH0sICJtZXRhZGF0YSI6IHsgImludm9jYXRpb25JZCI6ICJodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvZXhhbXBsZS1wYWNrYWdlL2FjdGlvbnMvcnVucy80MTM1NDYzNzQxL2F0dGVtcHRzLzEiIH0gfSB9IH0K", "signatures": [ { "keyid": "", "sig": "MEUCIEwWbVseiTC9e2Ry29kJgihB7KtS9rwqQz8cAs4NLTVRAiEA8CYarEs2Ri+iIgJ82Hjr3Ht999ZP0H/EbOm1ZWiEUeY=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-invalid-ref-type.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-invalid-ref-type.intoto.jsonl deleted file mode 100644 index 8faca5995..000000000 --- a/verifiers/internal/gha/testdata/dsse-invalid-ref-type.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIEwWbVseiTC9e2Ry29kJgihB7KtS9rwqQz8cAs4NLTVRAiEA8CYarEs2Ri+iIgJ82Hjr3Ht999ZP0H/EbOm1ZWiEUeY=" - } - ] -} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-main-ref-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-main-ref-v1.intoto.jsonl deleted file mode 100644 index 97cc58992..000000000 --- a/verifiers/internal/gha/testdata/dsse-main-ref-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIQCK4oDlkJj6MVx97cAJteccWxOyHNSGECxNOvG8MWcktgIgdpbPJP7EZvKPcP9KW3t8Ekd1sQjVpSau/JFiHL8V8y8=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-main-ref.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-main-ref.intoto.jsonl deleted file mode 100644 index 070392aca..000000000 --- a/verifiers/internal/gha/testdata/dsse-main-ref.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCK4oDlkJj6MVx97cAJteccWxOyHNSGECxNOvG8MWcktgIgdpbPJP7EZvKPcP9KW3t8Ekd1sQjVpSau/JFiHL8V8y8="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-no-subject-hash-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-no-subject-hash-v1.intoto.jsonl deleted file mode 100644 index 31393cc9e..000000000 --- a/verifiers/internal/gha/testdata/dsse-no-subject-hash-v1.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} diff --git a/verifiers/internal/gha/testdata/dsse-no-subject-hash.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-no-subject-hash.intoto.jsonl deleted file mode 100644 index c3b8d421c..000000000 --- a/verifiers/internal/gha/testdata/dsse-no-subject-hash.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-no-subject-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-no-subject-v1.intoto.jsonl deleted file mode 100644 index f843bcc84..000000000 --- a/verifiers/internal/gha/testdata/dsse-no-subject-v1.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJwcmVkaWNhdGUiOiB7CiAgICAiYnVpbGRUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9BdHRlc3RhdGlvbnMvR2l0SHViQWN0aW9uc1dvcmtmbG93QHYxIiwKICAgICJidWlsZGVyIjogewogICAgICAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL0F0dGVzdGF0aW9ucy9HaXRIdWJIb3N0ZWRBY3Rpb25zQHYxIgogICAgfSwKICAgICJpbnZvY2F0aW9uIjogewogICAgICAiY29uZmlnU291cmNlIjogewogICAgICAgICJkaWdlc3QiOiB7CiAgICAgICAgICAiU0hBMSI6ICI0NTA2MjkwZTJlOGZlYjFmMzRiMjdhMDQ0ZjdjYzg2M2M4MzBlZjZiIgogICAgICAgIH0sCiAgICAgICAgImVudHJ5UG9pbnQiOiAiVGVzdCBTTFNBIiwKICAgICAgICAidXJpIjogImdpdCthc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIKICAgICAgfSwKICAgICAgImVudmlyb25tZW50IjogewogICAgICAgICJhcmNoIjogImFtZDY0IiwKICAgICAgICAiZW52IjogewogICAgICAgICAgIkdJVEhVQl9FVkVOVF9OQU1FIjogIndvcmtmbG93X2Rpc3BhdGNoIiwKICAgICAgICAgICJHSVRIVUJfUlVOX0lEIjogIjE4OTM3OTkyMjAiLAogICAgICAgICAgIkdJVEhVQl9SVU5fTlVNQkVSIjogIjc2IgogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICJtYXRlcmlhbHMiOiBbCiAgICAgIHsKICAgICAgICAiZGlnZXN0IjogewogICAgICAgICAgIlNIQTEiOiAiNDUwNjI5MGUyZThmZWIxZjM0YjI3YTA0NGY3Y2M4NjNjODMwZWY2YiIKICAgICAgICB9LAogICAgICAgICJ1cmkiOiAiZ2l0K2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0IgogICAgICB9CiAgICBdCiAgfSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsCn0K", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} diff --git a/verifiers/internal/gha/testdata/dsse-no-subject.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-no-subject.intoto.jsonl deleted file mode 100644 index 0404feed7..000000000 --- a/verifiers/internal/gha/testdata/dsse-no-subject.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "ewogICJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YwLjEiLAogICJwcmVkaWNhdGUiOiB7CiAgICAiYnVpbGRUeXBlIjogImh0dHBzOi8vZ2l0aHViLmNvbS9BdHRlc3RhdGlvbnMvR2l0SHViQWN0aW9uc1dvcmtmbG93QHYxIiwKICAgICJidWlsZGVyIjogewogICAgICAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL0F0dGVzdGF0aW9ucy9HaXRIdWJIb3N0ZWRBY3Rpb25zQHYxIgogICAgfSwKICAgICJpbnZvY2F0aW9uIjogewogICAgICAiY29uZmlnU291cmNlIjogewogICAgICAgICJkaWdlc3QiOiB7CiAgICAgICAgICAiU0hBMSI6ICI0NTA2MjkwZTJlOGZlYjFmMzRiMjdhMDQ0ZjdjYzg2M2M4MzBlZjZiIgogICAgICAgIH0sCiAgICAgICAgImVudHJ5UG9pbnQiOiAiVGVzdCBTTFNBIiwKICAgICAgICAidXJpIjogImdpdCthc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIKICAgICAgfSwKICAgICAgImVudmlyb25tZW50IjogewogICAgICAgICJhcmNoIjogImFtZDY0IiwKICAgICAgICAiZW52IjogewogICAgICAgICAgIkdJVEhVQl9FVkVOVF9OQU1FIjogIndvcmtmbG93X2Rpc3BhdGNoIiwKICAgICAgICAgICJHSVRIVUJfUlVOX0lEIjogIjE4OTM3OTkyMjAiLAogICAgICAgICAgIkdJVEhVQl9SVU5fTlVNQkVSIjogIjc2IgogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICJtYXRlcmlhbHMiOiBbCiAgICAgIHsKICAgICAgICAiZGlnZXN0IjogewogICAgICAgICAgIlNIQTEiOiAiNDUwNjI5MGUyZThmZWIxZjM0YjI3YTA0NGY3Y2M4NjNjODMwZWY2YiIKICAgICAgICB9LAogICAgICAgICJ1cmkiOiAiZ2l0K2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0IgogICAgICB9CiAgICBdCiAgfSwKICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsCiAgInN1YmplY3QiOiBbXQp9Cg==", - "signatures": [ - { - "keyid": "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", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-not-slsa-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-not-slsa-v1.intoto.jsonl deleted file mode 100644 index 5f91519f0..000000000 --- a/verifiers/internal/gha/testdata/dsse-not-slsa-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-not-slsa.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-not-slsa.intoto.jsonl deleted file mode 100644 index 1e0c315e2..000000000 --- a/verifiers/internal/gha/testdata/dsse-not-slsa.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1-tag-v1.intoto.jsonl deleted file mode 100644 index 378180285..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIQDOJ6RZ0bdsfNebunBpm/t3iGvoB9QzxdgTqczV3UwvSAIgGNV8KjAOxlT5r4uFFd05b3aGPKRE/mgmMsfI3CPsTw4=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-v1-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1-tag.intoto.jsonl deleted file mode 100644 index 9d6749d13..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJiaW5hcnktbGludXgtYW1kNjQiLCJkaWdlc3QiOnsic2hhMjU2IjoiNmRiOTM3ZjA3YzE0ZDMwOWQ0MDNlNTYxZTJiNDAyOTcyZTJhNmVkYjMyZjQ1MjZlMWI2YjliYTg1NWZkODU3NCJ9fV0sInByZWRpY2F0ZSI6eyJidWlsZGVyIjp7ImlkIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nby8uZ2l0aHViL3dvcmtmbG93cy9zbHNhM19idWlsZGVyLnltbEByZWZzL2hlYWRzL21haW4ifSwiYnVpbGRUeXBlIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nb0B2MSIsImludm9jYXRpb24iOnsiY29uZmlnU291cmNlIjp7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdEByZWZzL3RhZ3MvdjEiLCJkaWdlc3QiOnsic2hhMSI6ImE1ZjQ4ZmRiNDMzODg0YTNiNDNjYmZjNjUyMThmZmU0NTU5ZjBiMTcifSwiZW50cnlQb2ludCI6IlRlc3QgU0xTQSJ9LCJwYXJhbWV0ZXJzIjp7fSwiZW52aXJvbm1lbnQiOnsiYXJjaCI6Ilg2NCIsImdpdGh1Yl9hY3RvciI6ImFzcmFhIiwiZ2l0aHViX2Jhc2VfcmVmIjoiIiwiZ2l0aHViX2V2ZW50X25hbWUiOiJwdXNoIiwiZ2l0aHViX2V2ZW50X3BheWxvYWQiOnsiYWZ0ZXIiOiJhNWY0OGZkYjQzMzg4NGEzYjQzY2JmYzY1MjE4ZmZlNDU1OWYwYjE3IiwiYmFzZV9yZWYiOiJyZWZzL2hlYWRzL21haW4iLCJiZWZvcmUiOiIwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwiY29tbWl0cyI6W10sImNvbXBhcmUiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21wYXJlL3YxIiwiY3JlYXRlZCI6dHJ1ZSwiZGVsZXRlZCI6ZmFsc2UsImZvcmNlZCI6ZmFsc2UsImhlYWRfY29tbWl0Ijp7ImF1dGhvciI6eyJlbWFpbCI6ImFzcmFhQGdvb2dsZS5jb20iLCJuYW1lIjoiQXNyYSBBbGkiLCJ1c2VybmFtZSI6ImFzcmFhIn0sImNvbW1pdHRlciI6eyJlbWFpbCI6ImFzcmFhQGdvb2dsZS5jb20iLCJuYW1lIjoiQXNyYSBBbGkiLCJ1c2VybmFtZSI6ImFzcmFhIn0sImRpc3RpbmN0Ijp0cnVlLCJpZCI6ImE1ZjQ4ZmRiNDMzODg0YTNiNDNjYmZjNjUyMThmZmU0NTU5ZjBiMTciLCJtZXNzYWdlIjoidXBkYXRlXG5cblNpZ25lZC1vZmYtYnk6IEFzcmEgQWxpIFx1MDAzY2FzcmFhQGdvb2dsZS5jb21cdTAwM2UiLCJ0aW1lc3RhbXAiOiIyMDIyLTA1LTAzVDE0OjI3OjM1LTA1OjAwIiwidHJlZV9pZCI6IjJkM2E3ODk0YzkzMGFmZDZiZjBlMzY3Yzk2OGVjYmE0MmY3NDQ4MWYiLCJ1cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXQvYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyJ9LCJwdXNoZXIiOnsiZW1haWwiOiJhc3JhYUBnb29nbGUuY29tIiwibmFtZSI6ImFzcmFhIn0sInJlZiI6InJlZnMvdGFncy92MSIsInJlcG9zaXRvcnkiOnsiYWxsb3dfZm9ya2luZyI6dHJ1ZSwiYXJjaGl2ZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsImFyY2hpdmVkIjpmYWxzZSwiYXNzaWduZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9hc3NpZ25lZXN7L3VzZXJ9IiwiYmxvYnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9ibG9ic3svc2hhfSIsImJyYW5jaGVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9icmFuY2hlc3svYnJhbmNofSIsImNsb25lX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsImNvbGxhYm9yYXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbGxhYm9yYXRvcnN7L2NvbGxhYm9yYXRvcn0iLCJjb21tZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tbWVudHN7L251bWJlcn0iLCJjb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXRzey9zaGF9IiwiY29tcGFyZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS97YmFzZX0uLi57aGVhZH0iLCJjb250ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udGVudHMveytwYXRofSIsImNvbnRyaWJ1dG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udHJpYnV0b3JzIiwiY3JlYXRlZF9hdCI6MTY0NDkzOTIyOSwiZGVmYXVsdF9icmFuY2giOiJtYWluIiwiZGVwbG95bWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2RlcGxveW1lbnRzIiwiZGVzY3JpcHRpb24iOiJUZXN0IGZvciBTTFNBIiwiZGlzYWJsZWQiOmZhbHNlLCJkb3dubG9hZHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2Rvd25sb2FkcyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZXZlbnRzIiwiZm9yayI6dHJ1ZSwiZm9ya3MiOjAsImZvcmtzX2NvdW50IjowLCJmb3Jrc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZm9ya3MiLCJmdWxsX25hbWUiOiJhc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwiZ2l0X2NvbW1pdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9jb21taXRzey9zaGF9IiwiZ2l0X3JlZnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9yZWZzey9zaGF9IiwiZ2l0X3RhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC90YWdzey9zaGF9IiwiZ2l0X3VybCI6ImdpdDovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLCJoYXNfZG93bmxvYWRzIjp0cnVlLCJoYXNfaXNzdWVzIjpmYWxzZSwiaGFzX3BhZ2VzIjpmYWxzZSwiaGFzX3Byb2plY3RzIjp0cnVlLCJoYXNfd2lraSI6dHJ1ZSwiaG9tZXBhZ2UiOm51bGwsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ob29rcyIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCJpZCI6NDU5NjM5MTUwLCJpc190ZW1wbGF0ZSI6ZmFsc2UsImlzc3VlX2NvbW1lbnRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsImlzc3VlX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzL2V2ZW50c3svbnVtYmVyfSIsImlzc3Vlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzey9udW1iZXJ9Iiwia2V5c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qva2V5c3sva2V5X2lkfSIsImxhYmVsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbGFiZWxzey9uYW1lfSIsImxhbmd1YWdlIjoiR28iLCJsYW5ndWFnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2xhbmd1YWdlcyIsImxpY2Vuc2UiOnsia2V5IjoiYXBhY2hlLTIuMCIsIm5hbWUiOiJBcGFjaGUgTGljZW5zZSAyLjAiLCJub2RlX2lkIjoiTURjNlRHbGpaVzV6WlRJPSIsInNwZHhfaWQiOiJBcGFjaGUtMi4wIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIn0sIm1hc3Rlcl9icmFuY2giOiJtYWluIiwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9tZXJnZXMiLCJtaWxlc3RvbmVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9taWxlc3RvbmVzey9udW1iZXJ9IiwibWlycm9yX3VybCI6bnVsbCwibmFtZSI6InNsc2Etb24tZ2l0aHViLXRlc3QiLCJub2RlX2lkIjoiUl9rZ0RPRzJXSmJnIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvbm90aWZpY2F0aW9uc3s/c2luY2UsYWxsLHBhcnRpY2lwYXRpbmd9Iiwib3Blbl9pc3N1ZXMiOjAsIm9wZW5faXNzdWVzX2NvdW50IjowLCJvd25lciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwiZW1haWwiOiJhc3JhYUBnb29nbGUuY29tIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsImZvbGxvd2Vyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLCJnaXN0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsImdyYXZhdGFyX2lkIjoiIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEiLCJpZCI6NTE5NDU2OSwibG9naW4iOiJhc3JhYSIsIm5hbWUiOiJhc3JhYSIsIm5vZGVfaWQiOiJNRFE2VlhObGNqVXhPVFExTmprPSIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdWJzY3JpcHRpb25zIiwidHlwZSI6IlVzZXIiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhIn0sInByaXZhdGUiOmZhbHNlLCJwdWxsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcHVsbHN7L251bWJlcn0iLCJwdXNoZWRfYXQiOjE2NTE2MDYzNDEsInJlbGVhc2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6MTIxNSwic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOmFzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0Iiwic3RhcmdhemVycyI6MCwic3RhcmdhemVyc19jb3VudCI6MCwic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGF0dXNlcy97c2hhfSIsInN1YnNjcmliZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwidGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdHJlZXN7L3NoYX0iLCJ1cGRhdGVkX2F0IjoiMjAyMi0wMi0xNVQxNTozNjo0MVoiLCJ1cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsInZpc2liaWxpdHkiOiJwdWJsaWMiLCJ3YXRjaGVycyI6MCwid2F0Y2hlcnNfY291bnQiOjB9LCJzZW5kZXIiOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS81MTk0NTY5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwiaWQiOjUxOTQ1NjksImxvZ2luIjoiYXNyYWEiLCJub2RlX2lkIjoiTURRNlZYTmxjalV4T1RRMU5qaz0iLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSJ9fSwiZ2l0aHViX2hlYWRfcmVmIjoiIiwiZ2l0aHViX3JlZiI6InJlZnMvdGFncy92MSIsImdpdGh1Yl9yZWZfdHlwZSI6InRhZyIsImdpdGh1Yl9ydW5fYXR0ZW1wdCI6IjEiLCJnaXRodWJfcnVuX2lkIjoiMjI2NTkzMzgzNSIsImdpdGh1Yl9ydW5fbnVtYmVyIjoiMyIsImdpdGh1Yl9zaGExIjoiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIsIm9zIjoidWJ1bnR1MjAifX0sImJ1aWxkQ29uZmlnIjp7InZlcnNpb24iOjEsInN0ZXBzIjpbeyJjb21tYW5kIjpbIi9vcHQvaG9zdGVkdG9vbGNhY2hlL2dvLzEuMTcuOS94NjQvYmluL2dvIiwiYnVpbGQiLCItbW9kPXZlbmRvciIsIi10cmltcGF0aCIsIi10YWdzPW5ldGdvIiwiLW8iLCJiaW5hcnktbGludXgtYW1kNjQiXSwiZW52IjpbIkdPT1M9bGludXgiLCJHT0FSQ0g9YW1kNjQiLCJHTzExMU1PRFVMRT1vbiIsIkNHT19FTkFCTEVEPTAiXX1dfSwibWV0YWRhdGEiOnsiY29tcGxldGVuZXNzIjp7InBhcmFtZXRlcnMiOnRydWUsImVudmlyb25tZW50IjpmYWxzZSwibWF0ZXJpYWxzIjpmYWxzZX0sInJlcHJvZHVjaWJsZSI6ZmFsc2V9LCJtYXRlcmlhbHMiOlt7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdEByZWZzL3RhZ3MvdjEiLCJkaWdlc3QiOnsic2hhMSI6ImE1ZjQ4ZmRiNDMzODg0YTNiNDNjYmZjNjUyMThmZmU0NTU5ZjBiMTcifX0seyJ1cmkiOiJodHRwczovL2dpdGh1Yi5jb20vYWN0aW9ucy92aXJ0dWFsLWVudmlyb25tZW50cy9yZWxlYXNlcy90YWcvdWJ1bnR1MjAvMjAyMjA0MjUuMSJ9XX19","signatures":[{"keyid":"","sig":"MEUCIQDOJ6RZ0bdsfNebunBpm/t3iGvoB9QzxdgTqczV3UwvSAIgGNV8KjAOxlT5r4uFFd05b3aGPKRE/mgmMsfI3CPsTw4="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2-tag-v1.intoto.jsonl deleted file mode 100644 index d89f9b553..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "eyAiX3R5cGUiOiAiaHR0cHM6Ly9pbi10b3RvLmlvL1N0YXRlbWVudC92MC4xIiwgInN1YmplY3QiOiBbIHsgImRpZ2VzdCI6IHsgInNoYTI1NiI6ICIwYWU3ZTRmYTcxNjg2NTM4NDQwMDEyZWUzNmEyNjM0ZGJhYTE5ZGYyZGQxNmE0NjZmNTI0MTFmYjM0OGJiYzRlIiB9LCAibmFtZSI6ICJiaW5hcnktbGludXgtYW1kNjQiIH0gXSwgInByZWRpY2F0ZVR5cGUiOiAiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6IHsgImJ1aWxkRGVmaW5pdGlvbiI6IHsgImJ1aWxkVHlwZSI6ICJodHRwczovL2dpdGh1Yi5jb20vQXR0ZXN0YXRpb25zL0dpdEh1YkFjdGlvbnNXb3JrZmxvd0B2MSIsICJleHRlcm5hbFBhcmFtZXRlcnMiOiB7ICJzb3VyY2UiOiB7ICJ1cmkiOiAiZ2l0K2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UiLCAiZGlnZXN0IjogeyAic2hhMSI6ICI0ZTZjNWY2ZDBiNGExMjZmYTIzNzNkN2U1N2I3YTBhZjA1MTA4NzkxIiB9IH0gfSwgImludGVybmFsUGFyYW1ldGVycyI6IHsgIlJVTk5FUl9BUkNIIjogIlg2NCIsICJHSVRIVUJfQUNUT1IiOiAiYXNyYWEiLCAiR0lUSFVCX0JBU0VfUkVGIjogIiIsICJHSVRIVUJfRVZFTlRfTkFNRSI6ICJwdXNoIiwgIkdJVEhVQl9FVkVOVF9QQVlMT0FEIjogeyAiYWZ0ZXIiOiAiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIsICJiYXNlX3JlZiI6ICJyZWZzL2hlYWRzL21haW4iLCAiYmVmb3JlIjogIjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCAiY29tbWl0cyI6IFtdLCAiY29tcGFyZSI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21wYXJlL3YxLjIiLCAiY3JlYXRlZCI6IHRydWUsICJkZWxldGVkIjogZmFsc2UsICJmb3JjZWQiOiBmYWxzZSwgImhlYWRfY29tbWl0IjogeyAiYXV0aG9yIjogeyAiZW1haWwiOiAiYXNyYWFAZ29vZ2xlLmNvbSIsICJuYW1lIjogIkFzcmEgQWxpIiwgInVzZXJuYW1lIjogImFzcmFhIiB9LCAiY29tbWl0dGVyIjogeyAiZW1haWwiOiAiYXNyYWFAZ29vZ2xlLmNvbSIsICJuYW1lIjogIkFzcmEgQWxpIiwgInVzZXJuYW1lIjogImFzcmFhIiB9LCAiZGlzdGluY3QiOiB0cnVlLCAiaWQiOiAiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIsICJtZXNzYWdlIjogInVwZGF0ZVxuXG5TaWduZWQtb2ZmLWJ5OiBBc3JhIEFsaSA8YXNyYWFAZ29vZ2xlLmNvbT4iLCAidGltZXN0YW1wIjogIjIwMjItMDUtMDNUMTQ6Mjc6MzUtMDU6MDAiLCAidHJlZV9pZCI6ICIyZDNhNzg5NGM5MzBhZmQ2YmYwZTM2N2M5NjhlY2JhNDJmNzQ0ODFmIiwgInVybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXQvYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIgfSwgInB1c2hlciI6IHsgImVtYWlsIjogImFzcmFhQGdvb2dsZS5jb20iLCAibmFtZSI6ICJhc3JhYSIgfSwgInJlZiI6ICJyZWZzL3RhZ3MvdjEuMiIsICJyZXBvc2l0b3J5IjogeyAiYWxsb3dfZm9ya2luZyI6IHRydWUsICJhcmNoaXZlX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsICJhcmNoaXZlZCI6IGZhbHNlLCAiYXNzaWduZWVzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvYXNzaWduZWVzey91c2VyfSIsICJibG9ic191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9ibG9ic3svc2hhfSIsICJicmFuY2hlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2JyYW5jaGVzey9icmFuY2h9IiwgImNsb25lX3VybCI6ICJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLCAiY29sbGFib3JhdG9yc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbGxhYm9yYXRvcnN7L2NvbGxhYm9yYXRvcn0iLCAiY29tbWVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21tZW50c3svbnVtYmVyfSIsICJjb21taXRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tbWl0c3svc2hhfSIsICJjb21wYXJlX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS97YmFzZX0uLi57aGVhZH0iLCAiY29udGVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb250ZW50cy97K3BhdGh9IiwgImNvbnRyaWJ1dG9yc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbnRyaWJ1dG9ycyIsICJjcmVhdGVkX2F0IjogMTY0NDkzOTIyOSwgImRlZmF1bHRfYnJhbmNoIjogIm1haW4iLCAiZGVwbG95bWVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9kZXBsb3ltZW50cyIsICJkZXNjcmlwdGlvbiI6ICJUZXN0IGZvciBTTFNBIiwgImRpc2FibGVkIjogZmFsc2UsICJkb3dubG9hZHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9kb3dubG9hZHMiLCAiZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZXZlbnRzIiwgImZvcmsiOiB0cnVlLCAiZm9ya3MiOiAwLCAiZm9ya3NfY291bnQiOiAwLCAiZm9ya3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9mb3JrcyIsICJmdWxsX25hbWUiOiAiYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsICJnaXRfY29tbWl0c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9jb21taXRzey9zaGF9IiwgImdpdF9yZWZzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L3JlZnN7L3NoYX0iLCAiZ2l0X3RhZ3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdGFnc3svc2hhfSIsICJnaXRfdXJsIjogImdpdDovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLCAiaGFzX2Rvd25sb2FkcyI6IHRydWUsICJoYXNfaXNzdWVzIjogZmFsc2UsICJoYXNfcGFnZXMiOiBmYWxzZSwgImhhc19wcm9qZWN0cyI6IHRydWUsICJoYXNfd2lraSI6IHRydWUsICJob21lcGFnZSI6IG51bGwsICJob29rc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2hvb2tzIiwgImh0bWxfdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwgImlkIjogNDU5NjM5MTUwLCAiaXNfdGVtcGxhdGUiOiBmYWxzZSwgImlzc3VlX2NvbW1lbnRfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXMvY29tbWVudHN7L251bWJlcn0iLCAiaXNzdWVfZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzL2V2ZW50c3svbnVtYmVyfSIsICJpc3N1ZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9pc3N1ZXN7L251bWJlcn0iLCAia2V5c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2tleXN7L2tleV9pZH0iLCAibGFiZWxzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbGFiZWxzey9uYW1lfSIsICJsYW5ndWFnZSI6ICJHbyIsICJsYW5ndWFnZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9sYW5ndWFnZXMiLCAibGljZW5zZSI6IHsgImtleSI6ICJhcGFjaGUtMi4wIiwgIm5hbWUiOiAiQXBhY2hlIExpY2Vuc2UgMi4wIiwgIm5vZGVfaWQiOiAiTURjNlRHbGpaVzV6WlRJPSIsICJzcGR4X2lkIjogIkFwYWNoZS0yLjAiLCAidXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vbGljZW5zZXMvYXBhY2hlLTIuMCIgfSwgIm1hc3Rlcl9icmFuY2giOiAibWFpbiIsICJtZXJnZXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9tZXJnZXMiLCAibWlsZXN0b25lc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L21pbGVzdG9uZXN7L251bWJlcn0iLCAibWlycm9yX3VybCI6IG51bGwsICJuYW1lIjogInNsc2Etb24tZ2l0aHViLXRlc3QiLCAibm9kZV9pZCI6ICJSX2tnRE9HMldKYmciLCAibm90aWZpY2F0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L25vdGlmaWNhdGlvbnN7P3NpbmNlLGFsbCxwYXJ0aWNpcGF0aW5nfSIsICJvcGVuX2lzc3VlcyI6IDAsICJvcGVuX2lzc3Vlc19jb3VudCI6IDAsICJvd25lciI6IHsgImF2YXRhcl91cmwiOiAiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwgImVtYWlsIjogImFzcmFhQGdvb2dsZS5jb20iLCAiZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2V2ZW50c3svcHJpdmFjeX0iLCAiZm9sbG93ZXJzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsICJmb2xsb3dpbmdfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsICJnaXN0c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9naXN0c3svZ2lzdF9pZH0iLCAiZ3JhdmF0YXJfaWQiOiAiIiwgImh0bWxfdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYSIsICJpZCI6IDUxOTQ1NjksICJsb2dpbiI6ICJhc3JhYSIsICJuYW1lIjogImFzcmFhIiwgIm5vZGVfaWQiOiAiTURRNlZYTmxjalV4T1RRMU5qaz0iLCAib3JnYW5pemF0aW9uc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwgInJlY2VpdmVkX2V2ZW50c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZWNlaXZlZF9ldmVudHMiLCAicmVwb3NfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVwb3MiLCAic2l0ZV9hZG1pbiI6IGZhbHNlLCAic3RhcnJlZF91cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdGFycmVkey9vd25lcn17L3JlcG99IiwgInN1YnNjcmlwdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3Vic2NyaXB0aW9ucyIsICJ0eXBlIjogIlVzZXIiLCAidXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEiIH0sICJwcml2YXRlIjogZmFsc2UsICJwdWxsc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3B1bGxzey9udW1iZXJ9IiwgInB1c2hlZF9hdCI6IDE2NTE2MDYzNjksICJyZWxlYXNlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3JlbGVhc2Vzey9pZH0iLCAic2l6ZSI6IDEyMTUsICJzc2hfdXJsIjogImdpdEBnaXRodWIuY29tOmFzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0IiwgInN0YXJnYXplcnMiOiAwLCAic3RhcmdhemVyc19jb3VudCI6IDAsICJzdGFyZ2F6ZXJzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhcmdhemVycyIsICJzdGF0dXNlc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3N0YXR1c2VzL3tzaGF9IiwgInN1YnNjcmliZXJzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3Vic2NyaWJlcnMiLCAic3Vic2NyaXB0aW9uX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3Vic2NyaXB0aW9uIiwgInN2bl91cmwiOiAiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCAidGFnc191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L3RhZ3MiLCAidGVhbXNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC90ZWFtcyIsICJ0b3BpY3MiOiBbXSwgInRyZWVzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZ2l0L3RyZWVzey9zaGF9IiwgInVwZGF0ZWRfYXQiOiAiMjAyMi0wMi0xNVQxNTozNjo0MVoiLCAidXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwgInZpc2liaWxpdHkiOiAicHVibGljIiwgIndhdGNoZXJzIjogMCwgIndhdGNoZXJzX2NvdW50IjogMCB9LCAic2VuZGVyIjogeyAiYXZhdGFyX3VybCI6ICJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvNTE5NDU2OT92PTQiLCAiZXZlbnRzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2V2ZW50c3svcHJpdmFjeX0iLCAiZm9sbG93ZXJzX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsICJmb2xsb3dpbmdfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZm9sbG93aW5ney9vdGhlcl91c2VyfSIsICJnaXN0c191cmwiOiAiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9naXN0c3svZ2lzdF9pZH0iLCAiZ3JhdmF0YXJfaWQiOiAiIiwgImh0bWxfdXJsIjogImh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYSIsICJpZCI6IDUxOTQ1NjksICJsb2dpbiI6ICJhc3JhYSIsICJub2RlX2lkIjogIk1EUTZWWE5sY2pVeE9UUTFOams9IiwgIm9yZ2FuaXphdGlvbnNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvb3JncyIsICJyZWNlaXZlZF9ldmVudHNfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVjZWl2ZWRfZXZlbnRzIiwgInJlcG9zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlcG9zIiwgInNpdGVfYWRtaW4iOiBmYWxzZSwgInN0YXJyZWRfdXJsIjogImh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsICJzdWJzY3JpcHRpb25zX3VybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N1YnNjcmlwdGlvbnMiLCAidHlwZSI6ICJVc2VyIiwgInVybCI6ICJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhIiB9IH0sICJHSVRIVUJfUkVGIjogInJlZnMvdGFncy92MS4yIiwgIkdJVEhVQl9SRUZfVFlQRSI6ICJ0YWciLCAiR0lUSFVCX1JVTl9BVFRFTVBUIjogIjEiLCAiR0lUSFVCX1JOTl9JRCI6ICIyMjU5NzA5MDc5IiwgIkdJVEhVQl9SVU5fTlVNQkVSIjogIjEyNyIsICJHSVRIVUJfU0hBIjogImEyODgwZDY0ZDEyYjI5NTc2MTg5OWQ1MjNlMzNjMjI2NzA5ODIwNTQiLCAiSU1BR0VfT1MiOiAidWJ1bnR1MjAiIH0gfSwgInJ1bkRldGFpbHMiOiB7ICJidWlsZGVyIjogeyAiaWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL0F0dGVzdGF0aW9ucy9HaXRIdWJIb3N0ZWRBY3Rpb25zQHYxIiB9LCAibWV0YWRhdGEiOiB7ICJpbnZvY2F0aW9uSWQiOiAiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hY3Rpb25zL3J1bnMvNDEzNTQ2Mzc0MS9hdHRlbXB0cy8xIiB9IH0gfSB9Cg==", "signatures": [ { "keyid": "", "sig": "MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-v1.2-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2-tag.intoto.jsonl deleted file mode 100644 index 90ff48bc1..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag-v1.intoto.jsonl deleted file mode 100644 index e29103509..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIQCBJVcEpEfRQNlxr1s/HBk2Vrr/RpnXgnwKZjnOZeDrSAIgcDJwM7awJvFKfiNukhYeN/jek7BhQOACUXFGsG36vyA=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag.intoto.jsonl deleted file mode 100644 index bbcfd451c..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3+123-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCBJVcEpEfRQNlxr1s/HBk2Vrr/RpnXgnwKZjnOZeDrSAIgcDJwM7awJvFKfiNukhYeN/jek7BhQOACUXFGsG36vyA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag-v1.intoto.jsonl deleted file mode 100644 index 1982cb87b..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag.intoto.jsonl deleted file mode 100644 index bfdcdee8d..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha+123-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag-v1.intoto.jsonl deleted file mode 100644 index 37dca40de..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl deleted file mode 100644 index 4d50d0f54..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3-alpha-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQCy1h/YbJdRTCCnVdCmW25Tb4ccjncOnJTJvyxjU10D/AIgRmz8QSbcKpUZ5ZKOTpdPEryg2vMEwoQgALl709J/TvA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-tag-v1.intoto.jsonl deleted file mode 100644 index d72a9c213..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIQCBJVcEpEfRQNlxr1s/HBk2Vrr/RpnXgnwKZjnOZeDrSAIgcDJwM7awJvFKfiNukhYeN/jek7BhQOACUXFGsG36vyA=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-v1.2.3-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v1.2.3-tag.intoto.jsonl deleted file mode 100644 index 994ec8eab..000000000 --- a/verifiers/internal/gha/testdata/dsse-v1.2.3-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIsInN1YmplY3QiOlt7Im5hbWUiOiJiaW5hcnktbGludXgtYW1kNjQiLCJkaWdlc3QiOnsic2hhMjU2IjoiNmRiOTM3ZjA3YzE0ZDMwOWQ0MDNlNTYxZTJiNDAyOTcyZTJhNmVkYjMyZjQ1MjZlMWI2YjliYTg1NWZkODU3NCJ9fV0sInByZWRpY2F0ZSI6eyJidWlsZGVyIjp7ImlkIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nby8uZ2l0aHViL3dvcmtmbG93cy9zbHNhM19idWlsZGVyLnltbEByZWZzL2hlYWRzL21haW4ifSwiYnVpbGRUeXBlIjoiaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJhbWV3b3JrL3Nsc2EtZ2l0aHViLWdlbmVyYXRvci1nb0B2MSIsImludm9jYXRpb24iOnsiY29uZmlnU291cmNlIjp7InVyaSI6ImdpdCtodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdEByZWZzL3RhZ3MvdjEuMi4zIiwiZGlnZXN0Ijp7InNoYTEiOiJhNWY0OGZkYjQzMzg4NGEzYjQzY2JmYzY1MjE4ZmZlNDU1OWYwYjE3In0sImVudHJ5UG9pbnQiOiJUZXN0IFNMU0EifSwicGFyYW1ldGVycyI6e30sImVudmlyb25tZW50Ijp7ImFyY2giOiJYNjQiLCJnaXRodWJfYWN0b3IiOiJhc3JhYSIsImdpdGh1Yl9iYXNlX3JlZiI6IiIsImdpdGh1Yl9ldmVudF9uYW1lIjoicHVzaCIsImdpdGh1Yl9ldmVudF9wYXlsb2FkIjp7ImFmdGVyIjoiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIsImJhc2VfcmVmIjoicmVmcy9oZWFkcy9tYWluIiwiYmVmb3JlIjoiMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMCIsImNvbW1pdHMiOltdLCJjb21wYXJlIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS92MS4yLjMiLCJjcmVhdGVkIjp0cnVlLCJkZWxldGVkIjpmYWxzZSwiZm9yY2VkIjpmYWxzZSwiaGVhZF9jb21taXQiOnsiYXV0aG9yIjp7ImVtYWlsIjoiYXNyYWFAZ29vZ2xlLmNvbSIsIm5hbWUiOiJBc3JhIEFsaSIsInVzZXJuYW1lIjoiYXNyYWEifSwiY29tbWl0dGVyIjp7ImVtYWlsIjoiYXNyYWFAZ29vZ2xlLmNvbSIsIm5hbWUiOiJBc3JhIEFsaSIsInVzZXJuYW1lIjoiYXNyYWEifSwiZGlzdGluY3QiOnRydWUsImlkIjoiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyIsIm1lc3NhZ2UiOiJ1cGRhdGVcblxuU2lnbmVkLW9mZi1ieTogQXNyYSBBbGkgXHUwMDNjYXNyYWFAZ29vZ2xlLmNvbVx1MDAzZSIsInRpbWVzdGFtcCI6IjIwMjItMDUtMDNUMTQ6Mjc6MzUtMDU6MDAiLCJ0cmVlX2lkIjoiMmQzYTc4OTRjOTMwYWZkNmJmMGUzNjdjOTY4ZWNiYTQyZjc0NDgxZiIsInVybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbW1pdC9hNWY0OGZkYjQzMzg4NGEzYjQzY2JmYzY1MjE4ZmZlNDU1OWYwYjE3In0sInB1c2hlciI6eyJlbWFpbCI6ImFzcmFhQGdvb2dsZS5jb20iLCJuYW1lIjoiYXNyYWEifSwicmVmIjoicmVmcy90YWdzL3YxLjIuMyIsInJlcG9zaXRvcnkiOnsiYWxsb3dfZm9ya2luZyI6dHJ1ZSwiYXJjaGl2ZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qve2FyY2hpdmVfZm9ybWF0fXsvcmVmfSIsImFyY2hpdmVkIjpmYWxzZSwiYXNzaWduZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9hc3NpZ25lZXN7L3VzZXJ9IiwiYmxvYnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9ibG9ic3svc2hhfSIsImJyYW5jaGVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9icmFuY2hlc3svYnJhbmNofSIsImNsb25lX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0LmdpdCIsImNvbGxhYm9yYXRvcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2NvbGxhYm9yYXRvcnN7L2NvbGxhYm9yYXRvcn0iLCJjb21tZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tbWVudHN7L251bWJlcn0iLCJjb21taXRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9jb21taXRzey9zaGF9IiwiY29tcGFyZV91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29tcGFyZS97YmFzZX0uLi57aGVhZH0iLCJjb250ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udGVudHMveytwYXRofSIsImNvbnRyaWJ1dG9yc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvY29udHJpYnV0b3JzIiwiY3JlYXRlZF9hdCI6MTY0NDkzOTIyOSwiZGVmYXVsdF9icmFuY2giOiJtYWluIiwiZGVwbG95bWVudHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2RlcGxveW1lbnRzIiwiZGVzY3JpcHRpb24iOiJUZXN0IGZvciBTTFNBIiwiZGlzYWJsZWQiOmZhbHNlLCJkb3dubG9hZHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2Rvd25sb2FkcyIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZXZlbnRzIiwiZm9yayI6dHJ1ZSwiZm9ya3MiOjAsImZvcmtzX2NvdW50IjowLCJmb3Jrc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvZm9ya3MiLCJmdWxsX25hbWUiOiJhc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwiZ2l0X2NvbW1pdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9jb21taXRzey9zaGF9IiwiZ2l0X3JlZnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC9yZWZzey9zaGF9IiwiZ2l0X3RhZ3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2dpdC90YWdzey9zaGF9IiwiZ2l0X3VybCI6ImdpdDovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC5naXQiLCJoYXNfZG93bmxvYWRzIjp0cnVlLCJoYXNfaXNzdWVzIjpmYWxzZSwiaGFzX3BhZ2VzIjpmYWxzZSwiaGFzX3Byb2plY3RzIjp0cnVlLCJoYXNfd2lraSI6dHJ1ZSwiaG9tZXBhZ2UiOm51bGwsImhvb2tzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9ob29rcyIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QiLCJpZCI6NDU5NjM5MTUwLCJpc190ZW1wbGF0ZSI6ZmFsc2UsImlzc3VlX2NvbW1lbnRfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2lzc3Vlcy9jb21tZW50c3svbnVtYmVyfSIsImlzc3VlX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzL2V2ZW50c3svbnVtYmVyfSIsImlzc3Vlc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvaXNzdWVzey9udW1iZXJ9Iiwia2V5c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qva2V5c3sva2V5X2lkfSIsImxhYmVsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvbGFiZWxzey9uYW1lfSIsImxhbmd1YWdlIjoiR28iLCJsYW5ndWFnZXNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9yZXBvcy9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0L2xhbmd1YWdlcyIsImxpY2Vuc2UiOnsia2V5IjoiYXBhY2hlLTIuMCIsIm5hbWUiOiJBcGFjaGUgTGljZW5zZSAyLjAiLCJub2RlX2lkIjoiTURjNlRHbGpaVzV6WlRJPSIsInNwZHhfaWQiOiJBcGFjaGUtMi4wIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS9saWNlbnNlcy9hcGFjaGUtMi4wIn0sIm1hc3Rlcl9icmFuY2giOiJtYWluIiwibWVyZ2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9tZXJnZXMiLCJtaWxlc3RvbmVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9taWxlc3RvbmVzey9udW1iZXJ9IiwibWlycm9yX3VybCI6bnVsbCwibmFtZSI6InNsc2Etb24tZ2l0aHViLXRlc3QiLCJub2RlX2lkIjoiUl9rZ0RPRzJXSmJnIiwibm90aWZpY2F0aW9uc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvbm90aWZpY2F0aW9uc3s/c2luY2UsYWxsLHBhcnRpY2lwYXRpbmd9Iiwib3Blbl9pc3N1ZXMiOjAsIm9wZW5faXNzdWVzX2NvdW50IjowLCJvd25lciI6eyJhdmF0YXJfdXJsIjoiaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVzZXJjb250ZW50LmNvbS91LzUxOTQ1Njk/dj00IiwiZW1haWwiOiJhc3JhYUBnb29nbGUuY29tIiwiZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvZXZlbnRzey9wcml2YWN5fSIsImZvbGxvd2Vyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2VycyIsImZvbGxvd2luZ191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2ZvbGxvd2luZ3svb3RoZXJfdXNlcn0iLCJnaXN0c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2dpc3Rzey9naXN0X2lkfSIsImdyYXZhdGFyX2lkIjoiIiwiaHRtbF91cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEiLCJpZCI6NTE5NDU2OSwibG9naW4iOiJhc3JhYSIsIm5hbWUiOiJhc3JhYSIsIm5vZGVfaWQiOiJNRFE2VlhObGNqVXhPVFExTmprPSIsIm9yZ2FuaXphdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9vcmdzIiwicmVjZWl2ZWRfZXZlbnRzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVjZWl2ZWRfZXZlbnRzIiwicmVwb3NfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9yZXBvcyIsInNpdGVfYWRtaW4iOmZhbHNlLCJzdGFycmVkX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3RhcnJlZHsvb3duZXJ9ey9yZXBvfSIsInN1YnNjcmlwdGlvbnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9zdWJzY3JpcHRpb25zIiwidHlwZSI6IlVzZXIiLCJ1cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhIn0sInByaXZhdGUiOmZhbHNlLCJwdWxsc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvcHVsbHN7L251bWJlcn0iLCJwdXNoZWRfYXQiOjE2NTE2MDYzNzYsInJlbGVhc2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9yZWxlYXNlc3svaWR9Iiwic2l6ZSI6MTIxNSwic3NoX3VybCI6ImdpdEBnaXRodWIuY29tOmFzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QuZ2l0Iiwic3RhcmdhemVycyI6MCwic3RhcmdhemVyc19jb3VudCI6MCwic3RhcmdhemVyc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3RhcmdhemVycyIsInN0YXR1c2VzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdGF0dXNlcy97c2hhfSIsInN1YnNjcmliZXJzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9zdWJzY3JpYmVycyIsInN1YnNjcmlwdGlvbl91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3Qvc3Vic2NyaXB0aW9uIiwic3ZuX3VybCI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hc3JhYS9zbHNhLW9uLWdpdGh1Yi10ZXN0IiwidGFnc191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3JlcG9zL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3QvdGFncyIsInRlYW1zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC90ZWFtcyIsInRvcGljcyI6W10sInRyZWVzX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vcmVwb3MvYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdC9naXQvdHJlZXN7L3NoYX0iLCJ1cGRhdGVkX2F0IjoiMjAyMi0wMi0xNVQxNTozNjo0MVoiLCJ1cmwiOiJodHRwczovL2dpdGh1Yi5jb20vYXNyYWEvc2xzYS1vbi1naXRodWItdGVzdCIsInZpc2liaWxpdHkiOiJwdWJsaWMiLCJ3YXRjaGVycyI6MCwid2F0Y2hlcnNfY291bnQiOjB9LCJzZW5kZXIiOnsiYXZhdGFyX3VybCI6Imh0dHBzOi8vYXZhdGFycy5naXRodWJ1c2VyY29udGVudC5jb20vdS81MTk0NTY5P3Y9NCIsImV2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL2V2ZW50c3svcHJpdmFjeX0iLCJmb2xsb3dlcnNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dlcnMiLCJmb2xsb3dpbmdfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9mb2xsb3dpbmd7L290aGVyX3VzZXJ9IiwiZ2lzdHNfdXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYS9naXN0c3svZ2lzdF9pZH0iLCJncmF2YXRhcl9pZCI6IiIsImh0bWxfdXJsIjoiaHR0cHM6Ly9naXRodWIuY29tL2FzcmFhIiwiaWQiOjUxOTQ1NjksImxvZ2luIjoiYXNyYWEiLCJub2RlX2lkIjoiTURRNlZYTmxjalV4T1RRMU5qaz0iLCJvcmdhbml6YXRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvb3JncyIsInJlY2VpdmVkX2V2ZW50c191cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3JlY2VpdmVkX2V2ZW50cyIsInJlcG9zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvcmVwb3MiLCJzaXRlX2FkbWluIjpmYWxzZSwic3RhcnJlZF91cmwiOiJodHRwczovL2FwaS5naXRodWIuY29tL3VzZXJzL2FzcmFhL3N0YXJyZWR7L293bmVyfXsvcmVwb30iLCJzdWJzY3JpcHRpb25zX3VybCI6Imh0dHBzOi8vYXBpLmdpdGh1Yi5jb20vdXNlcnMvYXNyYWEvc3Vic2NyaXB0aW9ucyIsInR5cGUiOiJVc2VyIiwidXJsIjoiaHR0cHM6Ly9hcGkuZ2l0aHViLmNvbS91c2Vycy9hc3JhYSJ9fSwiZ2l0aHViX2hlYWRfcmVmIjoiIiwiZ2l0aHViX3JlZiI6InJlZnMvdGFncy92MS4yLjMiLCJnaXRodWJfcmVmX3R5cGUiOiJ0YWciLCJnaXRodWJfcnVuX2F0dGVtcHQiOiIxIiwiZ2l0aHViX3J1bl9pZCI6IjIyNjU5MzY5MTEiLCJnaXRodWJfcnVuX251bWJlciI6IjUiLCJnaXRodWJfc2hhMSI6ImE1ZjQ4ZmRiNDMzODg0YTNiNDNjYmZjNjUyMThmZmU0NTU5ZjBiMTciLCJvcyI6InVidW50dTIwIn19LCJidWlsZENvbmZpZyI6eyJ2ZXJzaW9uIjoxLCJzdGVwcyI6W3siY29tbWFuZCI6WyIvb3B0L2hvc3RlZHRvb2xjYWNoZS9nby8xLjE3LjkveDY0L2Jpbi9nbyIsImJ1aWxkIiwiLW1vZD12ZW5kb3IiLCItdHJpbXBhdGgiLCItdGFncz1uZXRnbyIsIi1vIiwiYmluYXJ5LWxpbnV4LWFtZDY0Il0sImVudiI6WyJHT09TPWxpbnV4IiwiR09BUkNIPWFtZDY0IiwiQ0dPX0VOQUJMRUQ9MCIsIkdPMTExTU9EVUxFPW9uIl19XX0sIm1ldGFkYXRhIjp7ImNvbXBsZXRlbmVzcyI6eyJwYXJhbWV0ZXJzIjp0cnVlLCJlbnZpcm9ubWVudCI6ZmFsc2UsIm1hdGVyaWFscyI6ZmFsc2V9LCJyZXByb2R1Y2libGUiOmZhbHNlfSwibWF0ZXJpYWxzIjpbeyJ1cmkiOiJnaXQraHR0cHM6Ly9naXRodWIuY29tL2FzcmFhL3Nsc2Etb24tZ2l0aHViLXRlc3RAcmVmcy90YWdzL3YxLjIuMyIsImRpZ2VzdCI6eyJzaGExIjoiYTVmNDhmZGI0MzM4ODRhM2I0M2NiZmM2NTIxOGZmZTQ1NTlmMGIxNyJ9fSx7InVyaSI6Imh0dHBzOi8vZ2l0aHViLmNvbS9hY3Rpb25zL3ZpcnR1YWwtZW52aXJvbm1lbnRzL3JlbGVhc2VzL3RhZy91YnVudHUyMC8yMDIyMDQyNS4xIn1dfX0=","signatures":[{"keyid":"","sig":"MEUCIQCBJVcEpEfRQNlxr1s/HBk2Vrr/RpnXgnwKZjnOZeDrSAIgcDJwM7awJvFKfiNukhYeN/jek7BhQOACUXFGsG36vyA="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-v10.0.1-release-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v10.0.1-release-v1.intoto.jsonl deleted file mode 100644 index b6c535fc4..000000000 --- a/verifiers/internal/gha/testdata/dsse-v10.0.1-release-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEQCIDOfrIqWkHmrHJcW3qx7csxTndprBX/Y/QuDiL5KHa0FAiBGoYBFK/4lrXDpzG2ch+WAqU4WPxgx7nRulmyLhWVxIg==" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-v10.0.1-release.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-v10.0.1-release.intoto.jsonl deleted file mode 100644 index 1cd0d85c3..000000000 --- a/verifiers/internal/gha/testdata/dsse-v10.0.1-release.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIDOfrIqWkHmrHJcW3qx7csxTndprBX/Y/QuDiL5KHa0FAiBGoYBFK/4lrXDpzG2ch+WAqU4WPxgx7nRulmyLhWVxIg=="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-valid-multi-subjects-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-valid-multi-subjects-v1.intoto.jsonl deleted file mode 100644 index 7004ca4ff..000000000 --- a/verifiers/internal/gha/testdata/dsse-valid-multi-subjects-v1.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} diff --git a/verifiers/internal/gha/testdata/dsse-valid-multi-subjects.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-valid-multi-subjects.intoto.jsonl deleted file mode 100644 index b905ac230..000000000 --- a/verifiers/internal/gha/testdata/dsse-valid-multi-subjects.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} diff --git a/verifiers/internal/gha/testdata/dsse-valid-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-valid-v1.intoto.jsonl deleted file mode 100644 index b79b74be1..000000000 --- a/verifiers/internal/gha/testdata/dsse-valid-v1.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} diff --git a/verifiers/internal/gha/testdata/dsse-valid.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-valid.intoto.jsonl deleted file mode 100644 index 6d1325813..000000000 --- a/verifiers/internal/gha/testdata/dsse-valid.intoto.jsonl +++ /dev/null @@ -1,10 +0,0 @@ -{ - "payloadType": "application/vnd.in-toto+json", - "payload": "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", - "signatures": [ - { - "keyid": "", - "sig": "MEUCIGIitQ1z1kUQEEaYdGLUtremEsfBzJyGm+Wp2t3PtzSSAiEAiibeJkqt6tTWcxbHNQqUKmtcteyH49NO8U7KiWtu+yc=" - } - ] -} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-vslsa1-tag-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-vslsa1-tag-v1.intoto.jsonl deleted file mode 100644 index b6dc2951d..000000000 --- a/verifiers/internal/gha/testdata/dsse-vslsa1-tag-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEQCIDOfrIqWkHmrHJcW3qx7csxTndprBX/Y/QuDiL5KHa0FAiBGoYBFK/4lrXDpzG2ch+WAqU4WPxgx7nRulmyLhWVxIg==" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-vslsa1-tag.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-vslsa1-tag.intoto.jsonl deleted file mode 100644 index 5d97ffc8a..000000000 --- a/verifiers/internal/gha/testdata/dsse-vslsa1-tag.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIDOfrIqWkHmrHJcW3qx7csxTndprBX/Y/QuDiL5KHa0FAiBGoYBFK/4lrXDpzG2ch+WAqU4WPxgx7nRulmyLhWVxIg=="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-workflow-inputs-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-workflow-inputs-v1.intoto.jsonl deleted file mode 100644 index 05223a019..000000000 --- a/verifiers/internal/gha/testdata/dsse-workflow-inputs-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIHBtbLeV5WMsyLpPrZcxFU1wuEYHFUrJnzizsg17dL4hAiEAkoTLa49Vrf/g5mSaWY6Oab99YNvqByNgR773ikJXQ5I=", "cert": "-----BEGIN CERTIFICATE-----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\nMp6YQZUiSMwzUohrr7V3nJsMPcLgETGyiZoR3UijZG74FobZ/+3pCw==\n-----END CERTIFICATE-----\n" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl deleted file mode 100644 index 378180285..000000000 --- a/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger-v1.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{ "payloadType": "application/vnd.in-toto+json", "payload": "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", "signatures": [ { "keyid": "", "sig": "MEUCIQDOJ6RZ0bdsfNebunBpm/t3iGvoB9QzxdgTqczV3UwvSAIgGNV8KjAOxlT5r4uFFd05b3aGPKRE/mgmMsfI3CPsTw4=" } ] } diff --git a/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger.intoto.jsonl deleted file mode 100644 index 9d6749d13..000000000 --- a/verifiers/internal/gha/testdata/dsse-workflow-inputs-wrong-trigger.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQDOJ6RZ0bdsfNebunBpm/t3iGvoB9QzxdgTqczV3UwvSAIgGNV8KjAOxlT5r4uFFd05b3aGPKRE/mgmMsfI3CPsTw4="}]} \ No newline at end of file diff --git a/verifiers/internal/gha/testdata/dsse-workflow-inputs.intoto.jsonl b/verifiers/internal/gha/testdata/dsse-workflow-inputs.intoto.jsonl deleted file mode 100644 index ffa3baac1..000000000 --- a/verifiers/internal/gha/testdata/dsse-workflow-inputs.intoto.jsonl +++ /dev/null @@ -1 +0,0 @@ -{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIHBtbLeV5WMsyLpPrZcxFU1wuEYHFUrJnzizsg17dL4hAiEAkoTLa49Vrf/g5mSaWY6Oab99YNvqByNgR773ikJXQ5I=","cert":"-----BEGIN CERTIFICATE-----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\nMp6YQZUiSMwzUohrr7V3nJsMPcLgETGyiZoR3UijZG74FobZ/+3pCw==\n-----END CERTIFICATE-----\n"}]} \ No newline at end of file diff --git a/verifiers/internal/gha/verifier.go b/verifiers/internal/gha/verifier.go index 34b6d7cbb..d8168be4e 100644 --- a/verifiers/internal/gha/verifier.go +++ b/verifiers/internal/gha/verifier.go @@ -16,6 +16,7 @@ import ( serrors "github.com/slsa-framework/slsa-verifier/v2/errors" "github.com/slsa-framework/slsa-verifier/v2/options" "github.com/slsa-framework/slsa-verifier/v2/register" + "github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha/slsaprovenance/common" "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils" "github.com/slsa-framework/slsa-verifier/v2/verifiers/utils/container" ) @@ -54,7 +55,7 @@ func verifyEnvAndCert(env *dsse.Envelope, } // Verify the builder identity. - builderID, err := VerifyBuilderIdentity(workflowInfo, builderOpts, defaultBuilders) + verifiedBuilderID, byob, err := VerifyBuilderIdentity(workflowInfo, builderOpts, defaultBuilders) if err != nil { return nil, nil, err } @@ -66,21 +67,34 @@ func verifyEnvAndCert(env *dsse.Envelope, // Verify properties of the SLSA provenance. // Unpack and verify info in the provenance, including the subject Digest. - provenanceOpts.ExpectedBuilderID = builderID.String() - if err := VerifyProvenance(env, provenanceOpts); err != nil { + provenanceOpts.ExpectedBuilderID = verifiedBuilderID.String() + // There is a corner-case to handle: if the verified builder ID from the cert + // is a delegator builder, the user MUST provide an expected builder ID + // and we MUST match it against the content of the provenance. + + if err := VerifyProvenance(env, provenanceOpts, verifiedBuilderID, byob, builderOpts.ExpectedID); err != nil { return nil, nil, err } - fmt.Fprintf(os.Stderr, "Verified build using builder https://github.com%s at commit %s\n", - workflowInfo.SubjectWorkflowRef, + if byob { + // Overwrite the builderID to match the one in the provenance. + verifiedBuilderID, err = builderID(env, verifiedBuilderID) + if err != nil { + return nil, nil, err + } + } + + fmt.Fprintf(os.Stderr, "Verified build using builder %q at commit %s\n", + verifiedBuilderID.String(), workflowInfo.SourceSha1) + // Return verified provenance. r, err := base64.StdEncoding.DecodeString(env.Payload) if err != nil { return nil, nil, err } - return r, builderID, nil + return r, verifiedBuilderID, nil } func verifyNpmEnvAndCert(env *dsse.Envelope, @@ -100,20 +114,17 @@ func verifyNpmEnvAndCert(env *dsse.Envelope, // We verify against the delegator re-usable workflow, not the user-provided // builder. This is because the signing identity for delegator-based builders // is *always* the delegator workflow. - expectedDelegatorWorkflow := httpsGithubCom + delegatorLowPermsGenericReusableWorkflow + expectedDelegatorWorkflow := httpsGithubCom + common.GenericLowPermsDelegatorBuilderID delegatorBuilderOpts := options.BuilderOpts{ ExpectedID: &expectedDelegatorWorkflow, } - trustedBuilderID, err := VerifyBuilderIdentity(workflowInfo, &delegatorBuilderOpts, defaultBuilders) + trustedBuilderID, byob, err := VerifyBuilderIdentity(workflowInfo, &delegatorBuilderOpts, defaultBuilders) // We accept a non-trusted builder for the default npm builder // that uses npm CLI. if err != nil && !errors.Is(err, serrors.ErrorUntrustedReusableWorkflow) { return nil, err } - // TODO(#493): retrieve certificate information to match - // with the provenance. - // Today it's not possible due to lack of information in the cert. // Verify the source repository from the certificate. if err := VerifyCertficateSourceRepository(workflowInfo, provenanceOpts.ExpectedSourceURI); err != nil { return nil, err @@ -132,6 +143,9 @@ func verifyNpmEnvAndCert(env *dsse.Envelope, // we compare against in the call to VerifyBuilderIdentity() above. // The delegator workflow will set the builder ID to the caller's path, // which is what users match against. + if !byob { + return nil, fmt.Errorf("%w: byob is false", serrors.ErrorInternal) + } provenanceOpts.ExpectedBuilderID = *builderOpts.ExpectedID if workflowInfo.SubjectHosted != nil && *workflowInfo.SubjectHosted != HostedGitHub { @@ -154,20 +168,20 @@ func verifyNpmEnvAndCert(env *dsse.Envelope, // Verify that the value provided is consistent with certificate information. if workflowInfo.SubjectHosted == nil { - return nil, fmt.Errorf("%w: hosted status unknonwn", serrors.ErrorNotSupported) + return nil, fmt.Errorf("%w: hosted status unknown", serrors.ErrorNotSupported) } switch *builderOpts.ExpectedID { - case builderLegacyGitHubRunnerID, builderGitHubHostedRunnerID: + case common.NpmCLILegacyBuilderID, common.NpmCLIHostedBuilderID: if *workflowInfo.SubjectHosted != HostedGitHub { return nil, fmt.Errorf("%w: re-usable workflow is self-hosted", serrors.ErrorMismatchBuilderID) } - case builderSelfHostedRunnerID: + case common.NpmCLISelfHostedBuilderID: if *workflowInfo.SubjectHosted != HostedSelf { return nil, fmt.Errorf("%w: re-usable workflow is GitHub-hosted", serrors.ErrorMismatchBuilderID) } default: return nil, fmt.Errorf("%w: builder %v. Expected one of %v, %v", serrors.ErrorNotSupported, *builderOpts.ExpectedID, - builderSelfHostedRunnerID, builderGitHubHostedRunnerID) + common.NpmCLISelfHostedBuilderID, common.NpmCLIHostedBuilderID) } trustedBuilderID, err = utils.TrustedBuilderIDNew(*builderOpts.ExpectedID, false) @@ -181,7 +195,7 @@ func verifyNpmEnvAndCert(env *dsse.Envelope, // Verify properties of the SLSA provenance. // Unpack and verify info in the provenance, including the Subject Digest. - if err := VerifyNpmPackageProvenance(env, workflowInfo, provenanceOpts, isTrustedBuilder); err != nil { + if err := VerifyNpmPackageProvenance(env, workflowInfo, provenanceOpts, trustedBuilderID, isTrustedBuilder); err != nil { return nil, err } @@ -199,9 +213,6 @@ func (v *GHAVerifier) VerifyArtifact(ctx context.Context, builderOpts *options.BuilderOpts, ) ([]byte, *utils.TrustedBuilderID, error) { isSigstoreBundle := IsSigstoreBundle(provenance) - if isSigstoreBundle && !options.ExperimentalEnabled() { - return nil, nil, errors.New("sigstore bundle support is only provided in SLSA_VERIFIER_EXPERIMENTAL mode") - } // This includes a default retry count of 3. rClient, err := client.GetRekorClient(defaultRekorAddr) @@ -228,7 +239,7 @@ func (v *GHAVerifier) VerifyArtifact(ctx context.Context, return verifyEnvAndCert(signedAtt.Envelope, signedAtt.SigningCert, provenanceOpts, builderOpts, - defaultArtifactTrustedReusableWorkflows) + utils.MergeMaps(defaultArtifactTrustedReusableWorkflows, defaultBYOBReusableWorkflows)) } // VerifyImage verifies provenance for an OCI image. @@ -321,6 +332,14 @@ func (v *GHAVerifier) VerifyNpmPackage(ctx context.Context, return nil, nil, err } + // Verify builder information. + builder, err := npm.verifyBuilderID( + provenanceOpts, builderOpts, + defaultBYOBReusableWorkflows) + if err != nil { + return nil, nil, err + } + // Verify attestation headers. if err := npm.verifyIntotoHeaders(); err != nil { return nil, nil, err @@ -337,15 +356,6 @@ func (v *GHAVerifier) VerifyNpmPackage(ctx context.Context, } } - // Verify certificate information. - builder, err := verifyNpmEnvAndCert(npm.ProvenanceEnvelope(), - npm.ProvenanceLeafCertificate(), - provenanceOpts, builderOpts, - defaultBYOBReusableWorkflows) - if err != nil { - return nil, nil, err - } - prov, err := npm.verifiedProvenanceBytes() if err != nil { return nil, nil, err diff --git a/verifiers/utils/builder.go b/verifiers/utils/builder.go index 8cc361717..9978d0523 100644 --- a/verifiers/utils/builder.go +++ b/verifiers/utils/builder.go @@ -4,6 +4,8 @@ import ( "fmt" "strings" + "golang.org/x/mod/semver" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" ) @@ -100,6 +102,7 @@ func (b *TrustedBuilderID) String() string { return fmt.Sprintf("%s@%s", b.name, b.version) } +// ParseBuilderID parses the builder ID into the URI and ref parts. func ParseBuilderID(id string, needVersion bool) (string, string, error) { parts := strings.Split(id, "@") if len(parts) == 2 { @@ -118,16 +121,55 @@ func ParseBuilderID(id string, needVersion bool) (string, string, error) { serrors.ErrorInvalidFormat, id) } -func ValidateGitHubTagRef(tag string) error { - if !strings.HasPrefix(tag, "refs/tags/") { - return fmt.Errorf("%w: %s: not of the form 'refs/tags/name'", serrors.ErrorInvalidRef, tag) +// IsValidBuilderTag validates if the given ref is a valid builder tag. +func IsValidBuilderTag(ref string, testing bool) error { + // Extract the pin. + pin, err := TagFromGitRef(ref) + if err != nil { + return err + } + + if testing { + // Tags on trusted repositories should be a valid semver with version + // core including all three parts and no build identifier. + versionCore := strings.Split(pin, "-")[0] + if !semver.IsValid(pin) || + len(strings.Split(versionCore, ".")) != 3 || + semver.Build(pin) != "" { + return fmt.Errorf("%w: %s: version tag not valid", serrors.ErrorInvalidRef, pin) + } + return nil + } + + // Valid semver of the form vX.Y.Z with no metadata. + if !semver.IsValid(pin) || + len(strings.Split(pin, ".")) != 3 || + semver.Prerelease(pin) != "" || + semver.Build(pin) != "" { + return fmt.Errorf("%w: %s: not of the form vX.Y.Z", serrors.ErrorInvalidRef, pin) } return nil } -func TagFromGitHubRef(ref string) (string, error) { - if err := ValidateGitHubTagRef(ref); err != nil { - return "", err +func IsValidJreleaserBuilderTag(ref string) error { + // Extract the pin. + pin, err := TagFromGitRef(ref) + if err != nil { + return err } - return strings.TrimPrefix(ref, "refs/tags/"), nil + + // Valid semver of the form vX.Y.Z- with no metadata. + // NOTE: When adding a language, update the corresponding + // unit test. + languages := map[string]bool{ + "-java": true, + } + _, validLanguage := languages[semver.Prerelease(pin)] + if !semver.IsValid(pin) || + len(strings.Split(pin, ".")) != 3 || + !validLanguage || + semver.Build(pin) != "" { + return fmt.Errorf("%w: %s: not of the form vX.Y.Z-", serrors.ErrorInvalidRef, pin) + } + return nil } diff --git a/verifiers/utils/builder_test.go b/verifiers/utils/builder_test.go index 730d6baae..bebd6393d 100644 --- a/verifiers/utils/builder_test.go +++ b/verifiers/utils/builder_test.go @@ -648,3 +648,180 @@ func Test_MatchesFull(t *testing.T) { }) } } + +func Test_IsValidBuilderTag(t *testing.T) { + t.Parallel() + tests := []struct { + name string + ref string + testing bool + err error + }{ + // not testing + { + name: "valid full semver", + ref: "refs/tags/v1.2.3", + }, + { + name: "valid semver: no patch", + ref: "refs/tags/v1.2", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: no minor", + ref: "refs/tags/v1", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: pre-release", + ref: "refs/tags/v1.2.3-rc.0", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: pre-release w/ build", + ref: "refs/tags/v1.2.3-rc.0+build1", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: build", + ref: "refs/tags/v1.2.3+build1", + err: serrors.ErrorInvalidRef, + }, + { + name: "invalid semver", + ref: "refs/tags/1.2.3", + err: serrors.ErrorInvalidRef, + }, + { + name: "invalid ref", + ref: "refs/v1.2.3", + err: serrors.ErrorInvalidRef, + }, + + // testing + { + name: "valid full semver (testing)", + ref: "refs/tags/v1.2.3", + testing: true, + }, + { + name: "valid semver: no patch (testing)", + ref: "refs/tags/v1.2", + testing: true, + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: no minor (testing)", + ref: "refs/tags/v1", + testing: true, + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: no minor (testing)", + ref: "refs/tags/v1", + testing: true, + err: serrors.ErrorInvalidRef, + }, + { + // NOTE: pre-releases are ok when testing. + name: "valid semver: pre-release (testing)", + ref: "refs/tags/v1.2.3-rc.0", + testing: true, + }, + { + name: "valid semver: pre-release w/ build (testing)", + ref: "refs/tags/v1.2.3-rc.0+build1", + testing: true, + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: build (testing)", + ref: "refs/tags/v1.2.3+build1", + testing: true, + err: serrors.ErrorInvalidRef, + }, + { + name: "invalid semver (testing)", + ref: "refs/tags/1.2.3", + testing: true, + err: serrors.ErrorInvalidRef, + }, + { + name: "invalid ref (testing)", + ref: "refs/v1.2.3", + testing: true, + err: serrors.ErrorInvalidRef, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + err := IsValidBuilderTag(tt.ref, tt.testing) + if !cmp.Equal(err, tt.err, cmpopts.EquateErrors()) { + t.Errorf(cmp.Diff(err, tt.err)) + } + }) + } +} + +func Test_IsValidJreleaserBuilderTag(t *testing.T) { + t.Parallel() + tests := []struct { + name string + ref string + err error + }{ + { + name: "valid full semver and language", + ref: "refs/tags/v1.2.3-java", + }, + { + name: "valid semver: no patch", + ref: "refs/tags/v1.2-java", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: no minor", + ref: "refs/tags/v1-java", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: pre-release", + ref: "refs/tags/v1.2.3-rc.0+java", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: pre-release w/ build", + ref: "refs/tags/v1.2.3-rc.0+build1", + err: serrors.ErrorInvalidRef, + }, + { + name: "valid semver: build", + ref: "refs/tags/v1.2.3-java+build1", + err: serrors.ErrorInvalidRef, + }, + { + name: "invalid semver", + ref: "refs/tags/1.2.3-java", + err: serrors.ErrorInvalidRef, + }, + { + name: "invalid ref", + ref: "refs/v1.2.3-java", + err: serrors.ErrorInvalidRef, + }, + } + for _, tt := range tests { + tt := tt // Re-initializing variable so it is not changed while executing the closure below + + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + err := IsValidJreleaserBuilderTag(tt.ref) + if !cmp.Equal(err, tt.err, cmpopts.EquateErrors()) { + t.Errorf(cmp.Diff(err, tt.err)) + } + }) + } +} diff --git a/verifiers/utils/git.go b/verifiers/utils/git.go new file mode 100644 index 000000000..12f586e8e --- /dev/null +++ b/verifiers/utils/git.go @@ -0,0 +1,68 @@ +package utils + +import ( + "fmt" + "strings" + + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" +) + +// NormalizeGitURI normalizes a git URI to include a git+https:// prefix. +func NormalizeGitURI(s string) string { + if !strings.HasPrefix(s, "git+") { + if !strings.Contains(s, "://") { + return "git+https://" + s + } + return "git+" + s + } + return s +} + +// ParseGitURIAndRef retrieves the URI and ref from the given URI. +func ParseGitURIAndRef(uri string) (string, string, error) { + if uri == "" { + return "", "", fmt.Errorf("%w: empty uri", serrors.ErrorMalformedURI) + } + if !strings.HasPrefix(uri, "git+") { + return "", "", fmt.Errorf("%w: not a git URI: %q", serrors.ErrorMalformedURI, uri) + } + + r := strings.SplitN(uri, "@", 2) + if len(r) < 2 { + return r[0], "", nil + } + + return r[0], r[1], nil +} + +// ParseGitRef parses the git ref and returns its type and name. +func ParseGitRef(ref string) (string, string) { + parts := strings.SplitN(ref, "/", 3) + if len(parts) < 3 || parts[0] != "refs" { + return "", ref + } + return parts[1], parts[2] +} + +// ValidateGitRef validates that the given git ref is a valid ref of the given type and returns its name. +func ValidateGitRef(refType, ref string) (string, error) { + typ, name := ParseGitRef(ref) + if typ != refType { + return "", fmt.Errorf("%w: %q: unexpected ref type: %q", serrors.ErrorInvalidRef, ref, typ) + } + if name == "" { + return "", fmt.Errorf("%w: %q: empty ref name", serrors.ErrorInvalidRef, ref) + } + + return name, nil +} + +// TagFromGitRef returns the tagname from a tag ref. +func TagFromGitRef(ref string) (string, error) { + return ValidateGitRef("tags", ref) +} + +// BranchFromGitRef returns the tagname from a tag ref. +func BranchFromGitRef(ref string) (string, error) { + return ValidateGitRef("heads", ref) +} diff --git a/verifiers/utils/git_test.go b/verifiers/utils/git_test.go new file mode 100644 index 000000000..d8d3a6704 --- /dev/null +++ b/verifiers/utils/git_test.go @@ -0,0 +1,269 @@ +package utils + +import ( + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + serrors "github.com/slsa-framework/slsa-verifier/v2/errors" +) + +func Test_NormalizeGitURI(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + uri string + expected string + }{ + { + name: "empty uri", + uri: "", + expected: "git+https://", + }, + { + name: "https scheme", + uri: "https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + expected: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + { + name: "http scheme", + uri: "http://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + expected: "git+http://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + { + name: "git+https scheme", + uri: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + expected: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + { + name: "no scheme", + uri: "github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + expected: "git+https://github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + { + name: "git+ scheme", + uri: "git+github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + expected: "git+github.com/kubernetes/kubernetes@refs/tags/v1.0.0", + }, + { + name: "https scheme no ref", + uri: "https://github.com/kubernetes/kubernetes", + expected: "git+https://github.com/kubernetes/kubernetes", + }, + { + name: "http scheme no ref", + uri: "http://github.com/kubernetes/kubernetes", + expected: "git+http://github.com/kubernetes/kubernetes", + }, + { + name: "git+https scheme no ref", + uri: "git+https://github.com/kubernetes/kubernetes", + expected: "git+https://github.com/kubernetes/kubernetes", + }, + { + name: "no scheme no ref", + uri: "github.com/kubernetes/kubernetes", + expected: "git+https://github.com/kubernetes/kubernetes", + }, + { + name: "git+ scheme no ref", + uri: "git+github.com/kubernetes/kubernetes", + expected: "git+github.com/kubernetes/kubernetes", + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + if got, want := NormalizeGitURI(tt.uri), tt.expected; got != want { + t.Errorf("unexpected value, got: %q, want: %q", got, want) + } + }) + } +} + +func Test_ParseGitURIAndRef(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + uri string + expectedURI string + expectedRef string + err error + }{ + { + name: "empty uri", + uri: "", + err: serrors.ErrorMalformedURI, + }, + { + name: "no scheme with ref", + uri: "github.com/kubernetes/kubernetes@v1.0.0", + err: serrors.ErrorMalformedURI, + }, + { + name: "https scheme with ref", + uri: "https://github.com/kubernetes/kubernetes@v1.0.0", + err: serrors.ErrorMalformedURI, + }, + { + name: "git+https scheme with ref", + uri: "git+https://github.com/kubernetes/kubernetes@v1.0.0", + expectedURI: "git+https://github.com/kubernetes/kubernetes", + expectedRef: "v1.0.0", + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + uri, ref, err := ParseGitURIAndRef(tt.uri) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error: %v", err) + } + + if want, got := tt.expectedURI, uri; got != want { + t.Fatalf("unexpected uri, got: %q, want: %q", got, want) + } + + if want, got := tt.expectedRef, ref; got != want { + t.Fatalf("unexpected ref, got: %q, want: %q", got, want) + } + }) + } +} + +func Test_ParseGitRef(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + ref string + expectedType string + expectedRef string + }{ + { + name: "empty ref", + ref: "", + expectedType: "", + expectedRef: "", + }, + { + name: "no type ", + ref: "v1.0.0", + expectedType: "", + expectedRef: "v1.0.0", + }, + { + name: "no type with slash", + ref: "tags/v1.0.0", + expectedType: "", + expectedRef: "tags/v1.0.0", + }, + { + name: "type without slash", + ref: "refs/mytype/v1.0.0", + expectedType: "mytype", + expectedRef: "v1.0.0", + }, + { + name: "type with slash", + ref: "refs/mytype/feat/v1.0.0", + expectedType: "mytype", + expectedRef: "feat/v1.0.0", + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + typ, ref := ParseGitRef(tt.ref) + if want, got := tt.expectedType, typ; got != want { + t.Fatalf("unexpected type, got: %q, want: %q", got, want) + } + + if want, got := tt.expectedRef, ref; got != want { + t.Fatalf("unexpected ref, got: %q, want: %q", got, want) + } + }) + } +} + +func Test_ValidateGitRef(t *testing.T) { + t.Parallel() + + testCases := []struct { + name string + ref string + typ string + expectedRef string + err error + }{ + { + name: "empty ref", + ref: "", + typ: "", + err: serrors.ErrorInvalidRef, + }, + { + name: "no type ", + ref: "v1.0.0", + typ: "", + expectedRef: "v1.0.0", + }, + { + name: "no type with slash", + ref: "tags/v1.0.0", + typ: "", + expectedRef: "tags/v1.0.0", + }, + { + name: "type without slash", + ref: "refs/mytype/v1.0.0", + typ: "mytype", + expectedRef: "v1.0.0", + }, + { + name: "mismatch type", + ref: "refs/mytype/v1.0.0", + typ: "tags", + err: serrors.ErrorInvalidRef, + }, + { + name: "type with slash", + ref: "refs/mytype/feat/v1.0.0", + typ: "mytype", + expectedRef: "feat/v1.0.0", + }, + { + name: "mismatch type with slash", + ref: "refs/mytype/feat/v1.0.0", + typ: "tags", + err: serrors.ErrorInvalidRef, + }, + } + + for i := range testCases { + tt := testCases[i] + t.Run(tt.name, func(t *testing.T) { + t.Parallel() + + ref, err := ValidateGitRef(tt.typ, tt.ref) + if diff := cmp.Diff(tt.err, err, cmpopts.EquateErrors()); diff != "" { + t.Fatalf("unexpected error: %v", err) + } + + if want, got := tt.expectedRef, ref; got != want { + t.Fatalf("unexpected ref, got: %q, want: %q", got, want) + } + }) + } +} diff --git a/verifiers/utils/structures.go b/verifiers/utils/structures.go new file mode 100644 index 000000000..34906cc83 --- /dev/null +++ b/verifiers/utils/structures.go @@ -0,0 +1,12 @@ +package utils + +func MergeMaps[K comparable, V any](m1, m2 map[K]V) map[K]V { + m := make(map[K]V, len(m1)+len(m2)) + for k, v := range m2 { + m[k] = v + } + for k, v := range m1 { + m[k] = v + } + return m +}