The four tests in this file (TestVerifyIntegration, TestVerifyIntegrationCustomIssuer, TestVerifyIntegrationReusableWorkflow, TestVerifyIntegrationReusableWorkflowSignerWorkflow) call NewLiveSigstoreVerifier which requires network access to Sigstore and GitHub TUF servers. Unlike the other integration test files in this package (attestation_integration_test.go, sigstore_integration_test.go, inspect_integration_test.go), this file was missing the //go:build integration tag, causing these tests to run during a regular 'go test ./...' and fail in network-isolated build environments. |
||
|---|---|---|
| .. | ||
| api | ||
| artifact | ||
| auth | ||
| download | ||
| inspect | ||
| io | ||
| test | ||
| trustedroot | ||
| verification | ||
| verify | ||
| attestation.go | ||