The four tests in this file (TestVerifyIntegration, TestVerifyIntegrationCustomIssuer, TestVerifyIntegrationReusableWorkflow, TestVerifyIntegrationReusableWorkflowSignerWorkflow) call NewLiveSigstoreVerifier which requires network access to Sigstore and GitHub TUF servers. Unlike the other integration test files in this package (attestation_integration_test.go, sigstore_integration_test.go, inspect_integration_test.go), this file was missing the //go:build integration tag, causing these tests to run during a regular 'go test ./...' and fail in network-isolated build environments. |
||
|---|---|---|
| .. | ||
| attestation.go | ||
| attestation_integration_test.go | ||
| attestation_test.go | ||
| options.go | ||
| options_test.go | ||
| policy.go | ||
| policy_test.go | ||
| verify.go | ||
| verify_integration_test.go | ||
| verify_test.go | ||