STACKITGit/cli
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
11279 commits 87 branches 0 tags 160 MiB
Commit graph

174 commits

Author SHA1 Message Date
Trevor Rosen
b808612769 Remove skipped tests 
Signed-off-by: Trevor Rosen <trevrosen@github.com>
 2025-10-24 13:45:16 -05:00
Trevor Rosen
b6013cf409 Make verifier choice more explicit 
Signed-off-by: Trevor Rosen <trevrosen@github.com>
 2025-10-24 13:42:58 -05:00
copilot-swe-agent[bot]
b27889b76b Make PGI verifier initialization non-fatal to allow GitHub attestation verification 
Co-authored-by: trevrosen <1402+trevrosen@users.noreply.github.com>
 2025-10-22 15:03:21 +00:00
Meredith Lancaster
f2f769c23a Merge branch 'trunk' into gh-attestation-tuf-client-retry 2025-05-27 10:14:35 -06:00
Meredith Lancaster
a154ff5cfa replace deprecated func 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-05-27 09:38:46 -06:00
Meredith Lancaster
dcca4b2940 replace deprecated type 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-05-27 09:34:35 -06:00
Meredith Lancaster
75f72bcf93 use constructor 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-05-08 14:22:05 -06:00
Meredith Lancaster
3637f5aa26 add missing http client field in sigstoreConfig 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-05-07 17:11:18 -06:00
Meredith Lancaster
9092a43f20 set custom fetcher in options 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-05-07 16:41:32 -06:00
Meredith Lancaster
6b226754fd pass http client for use with tuf 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-05-07 09:18:43 -06:00
Meredith Lancaster
c5a2defec8 Merge branch 'trunk' into gh-attestation-tuf-client-retry 2025-05-07 08:50:51 -06:00
Meredith Lancaster
050c68c13b
Merge branch 'trunk' into move-predicate-type-filtering 2025-04-30 14:14:42 -06:00
Meredith Lancaster
fcd23dc657 create fetcher with custom http client and retry options 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-24 08:55:57 -06:00
Meredith Lancaster
139e82c68c Revert "temporarily skip non-failing tests" 
This reverts commit de8778797f.
 2025-04-09 07:23:17 -06:00
Meredith Lancaster
de8778797f temporarily skip non-failing tests 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-08 19:09:52 -06:00
Meredith Lancaster
29080dc70a reorganize func 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-08 16:40:52 -06:00
Meredith Lancaster
d63e2830e0 clean up unneeded sigstore verifier fields 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-08 16:35:17 -06:00
Meredith Lancaster
a535cfdbfc flip verifier choice logic 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-08 16:28:56 -06:00
Meredith Lancaster
366485155e initiate custom verifiers when the sgistore verifier is created 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-08 16:23:37 -06:00
Meredith Lancaster
323ea74733 add public good and github verifiers as fields for repeated use instead of creating a new one for every attestation 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-08 15:40:55 -06:00
Meredith Lancaster
261cea2075 update error message 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-08 14:41:18 -06:00
Meredith Lancaster
164a56cb66 move filterAttestations function 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-03 11:02:45 -06:00
Meredith Lancaster
13dafefcb5 add missing nil struct checks and udpate error messages 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-04-01 11:23:25 -06:00
Meredith Lancaster
a856a796f0 remove duplicate predicate filtering code 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-03-24 18:34:54 -06:00
Meredith Lancaster
a9cc7b481e create single fetch by digest client method 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-03-24 18:28:27 -06:00
Meredith Lancaster
5a895b9d72 dedpulicate if else logic 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-03-24 18:12:41 -06:00
Meredith Lancaster
95a61974bf pass params object to api client methods 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-03-24 18:01:57 -06:00
Meredith Lancaster
faef81f4bc reorganize getAttestations func to check for remote gh api fetching first 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-03-24 17:28:50 -06:00
Meredith Lancaster
917a00ddc1
Update pkg/cmd/attestation/verification/attestation.go 
Co-authored-by: Fredrik Skogman <kommendorkapten@github.com>
 2025-03-05 07:31:35 -07:00
Meredith Lancaster
ddc36c8a8e
Update pkg/cmd/attestation/verification/attestation.go 
Co-authored-by: Fredrik Skogman <kommendorkapten@github.com>
 2025-03-05 07:31:28 -07:00
Meredith Lancaster
671c4c23a9 Merge branch 'trunk' into refactor-get-attestations-funcs 2025-03-04 09:33:00 -07:00
Meredith Lancaster
ba5cf8e1ce
Merge branch 'trunk' into attestation-verify-ref-commit-policy-opts 2025-02-24 10:59:58 -07:00
Meredith Lancaster
ce87c746b2 remove signer-ref option 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-02-24 10:44:29 -07:00
William Martin
db823c18b8 Allow injection of TUFMetadataDir in tests 
This avoids multiple tests using the same dir for metadata, which was causing flakes
 2025-02-20 17:04:30 +01:00
William Martin
9c90e3aac9 Use subtests in attestation verification integration tests 2025-02-18 16:44:48 +01:00
Meredith Lancaster
84299b7d57 var naming 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-02-06 12:50:30 -07:00
Meredith Lancaster
5d6ffa3207 dedup local bundle err handling 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-02-06 12:37:23 -07:00
Meredith Lancaster
1c326c74f0 add checks to cert extensions func 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-01-30 08:14:13 -07:00
Meredith Lancaster
c6b5928ddc fix issues causing tests to fail 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-01-30 07:58:42 -07:00
Cody Soyland
6a629ed871
Fix breaking changes from sigstore-go v0.7.0 upgrade 
Signed-off-by: Cody Soyland <codysoyland@github.com>
 2025-01-24 16:35:31 -05:00
Meredith Lancaster
5f6e720a50 reorder policy enforcement criteria print out 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-01-22 13:27:56 -07:00
Meredith Lancaster
1c16e12a66 update test fixtures to include buildConfigURI 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-01-08 11:16:23 -07:00
Meredith Lancaster
9b905d9f18
Merge pull request #9891 from malancas/print-policy-info 2024-12-13 15:14:05 -07:00
Phill MV
dd95e5a863 tweak output of build policy info 2024-12-13 15:55:49 -05:00
Meredith Lancaster
76ffe4fb28
Merge pull request #9999 from malancas/sigstore-verifier-cleanup 
Sigstore verifier logic updates
 2024-12-12 15:10:52 -07:00
Meredith Lancaster
2137a483de include alg with digest when fetching bundles from OCI 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2024-12-05 09:27:14 -07:00
Meredith Lancaster
3b043f6350 comment 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2024-12-03 12:37:42 -07:00
Meredith Lancaster
efca3bdfd9 try switch statement 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2024-12-03 12:34:33 -07:00
Meredith Lancaster
2a6ee87ba0 remove duplicate err checking 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2024-12-03 12:29:35 -07:00
Meredith Lancaster
f0f86ecd23 get bundle issuer in another func 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2024-12-03 12:22:56 -07:00