63640b16a7
* start updating default verify cmd output Signed-off-by: Meredith Lancaster <malancas@github.com> * start adding support for printing a table of attestation details Signed-off-by: Meredith Lancaster <malancas@github.com> * extract attestation details from verification result Signed-off-by: Meredith Lancaster <malancas@github.com> * condense logging Signed-off-by: Meredith Lancaster <malancas@github.com> * update logging from feedback Signed-off-by: Meredith Lancaster <malancas@github.com> * update error logging Signed-off-by: Meredith Lancaster <malancas@github.com> * cleanup more error logging Signed-off-by: Meredith Lancaster <malancas@github.com> * include test data for printing to table in the mock sigstore verifier response Signed-off-by: Meredith Lancaster <malancas@github.com> * fix linter err Signed-off-by: Meredith Lancaster <malancas@github.com> * Update pkg/cmd/attestation/verification/mock_verifier.go Co-authored-by: Phill MV <phillmv@github.com> --------- Signed-off-by: Meredith Lancaster <malancas@github.com> Co-authored-by: Phill MV <phillmv@github.com>
58 lines
1.5 KiB
Go
58 lines
1.5 KiB
Go
package verification
|
|
|
|
import (
|
|
"fmt"
|
|
"testing"
|
|
|
|
"github.com/cli/cli/v2/pkg/cmd/attestation/api"
|
|
"github.com/cli/cli/v2/pkg/cmd/attestation/test/data"
|
|
"github.com/sigstore/sigstore-go/pkg/fulcio/certificate"
|
|
|
|
"github.com/in-toto/in-toto-golang/in_toto"
|
|
"github.com/sigstore/sigstore-go/pkg/verify"
|
|
)
|
|
|
|
const SLSAPredicateType = "https://slsa.dev/provenance/v1"
|
|
|
|
type MockSigstoreVerifier struct {
|
|
t *testing.T
|
|
}
|
|
|
|
func (v *MockSigstoreVerifier) Verify(attestations []*api.Attestation, policy verify.PolicyBuilder) *SigstoreResults {
|
|
statement := &in_toto.Statement{}
|
|
statement.PredicateType = SLSAPredicateType
|
|
|
|
result := AttestationProcessingResult{
|
|
Attestation: &api.Attestation{
|
|
Bundle: data.SigstoreBundle(v.t),
|
|
},
|
|
VerificationResult: &verify.VerificationResult{
|
|
Statement: statement,
|
|
Signature: &verify.SignatureVerificationResult{
|
|
Certificate: &certificate.Summary{
|
|
Extensions: certificate.Extensions{
|
|
BuildSignerURI: "https://github.com/github/example/.github/workflows/release.yml@refs/heads/main",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
results := []*AttestationProcessingResult{&result}
|
|
|
|
return &SigstoreResults{
|
|
VerifyResults: results,
|
|
}
|
|
}
|
|
|
|
func NewMockSigstoreVerifier(t *testing.T) *MockSigstoreVerifier {
|
|
return &MockSigstoreVerifier{t}
|
|
}
|
|
|
|
type FailSigstoreVerifier struct{}
|
|
|
|
func (v *FailSigstoreVerifier) Verify(attestations []*api.Attestation, policy verify.PolicyBuilder) *SigstoreResults {
|
|
return &SigstoreResults{
|
|
Error: fmt.Errorf("failed to verify attestations"),
|
|
}
|
|
}
|