diff --git a/test/integration/attestation-cmd/verify-oci-bundle.sh b/test/integration/attestation-cmd/verify-oci-bundle.sh new file mode 100644 index 000000000..22f9e29bf --- /dev/null +++ b/test/integration/attestation-cmd/verify-oci-bundle.sh @@ -0,0 +1,14 @@ +#!/usr/bin/env bash +set -euo pipefail + +# Get the root directory of the repository +rootDir="$(git rev-parse --show-toplevel)" + +ghBuildPath="$rootDir/bin/gh" + +# Verify an OCI artifact with bundles stored on the GHCR OCI registry +echo "Testing with package $sigstore02PackageFile and attestation $sigstore02AttestationFile" +if ! $ghBuildPath attestation verify oci://ghcr.io/malancas/attest-demo:latest --owner=malancas --bundle-from-oci; then + echo "Failed to verify oci://ghcr.io/malancas/attest-demo:latest with bundles from the GHCR OCI registry" + exit 1 +fi