Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat/verification attestation #442

Closed

Conversation

ChaosInTheCRD
Copy link
Collaborator

What this PR does / why we need it

Updated functionality for in-toto/go-witness#55, including the changes required for compatibility with in-toto/go-witness#210.

This PR is not yet ready, as in-toto/go-witness#55 introduces a verification attestation which we currently don't expose to the user correctly (in the way of flags and options for signing and saving it).

This PR cannot be merged before #430

Acceptance Criteria Met

  • Docs changes if needed
  • Testing changes if needed
  • All workflow checks passing (automatically enforced)
  • All review conversations resolved (automatically enforced)
  • DCO Sign-off

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
status)

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
…ess into improve-verify-errors

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Copy link

netlify bot commented May 8, 2024

Deploy Preview for witness-project canceled.

Name Link
🔨 Latest commit 8036848
🔍 Latest deploy log https://app.netlify.com/sites/witness-project/deploys/663e779a8d345e0008ba558e

Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>
@ChaosInTheCRD ChaosInTheCRD marked this pull request as ready for review May 10, 2024 16:16
ChaosInTheCRD and others added 6 commits May 10, 2024 17:16
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: John Kjell <john@testifysec.com>
Signed-off-by: John Kjell <john@testifysec.com>
Signed-off-by: John Kjell <john@testifysec.com>
@jkjell
Copy link
Member

jkjell commented May 10, 2024

It looks like these changes were merged in from somewhere else... 🤔

@jkjell jkjell closed this May 10, 2024
@ChaosInTheCRD
Copy link
Collaborator Author

This is my fault @jkjell.

I was working on multiple branches that depended on this functionality to be there. I synced those branches with this one and these changes must have been introduced when we merged one of the other PRs.

@ChaosInTheCRD
Copy link
Collaborator Author

One other thing to add is that I believe we still haven't added any functionality in the CLI to allow the user to handle the attestation (e.g., push to archivista, output to a file etc.). I'll aim to sort this on Monday morning.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants