in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
https://witness.dev
Apache License 2.0
416 stars 60 forks source link

refactor: allow only subjects to be provided to witness verify #252

Closed mikhailswift closed 1 year ago

mikhailswift commented 1 year ago

witness verify previously required an artifact file to be provided to verify. Additional subjects were also able to be provided, but some users wanted the ability to verify without an artifact file path and only subjects.

coveralls commented 1 year ago

Pull Request Test Coverage Report for Build 4227270633


Changes Missing Coverage Covered Lines Changed/Added Lines %
cmd/verify.go 6 10 60.0%
<!-- Total: 6 10 60.0% -->
Totals Coverage Status
Change from base Build 4208635668: 0.4%
Covered Lines: 114
Relevant Lines: 410

💛 - Coveralls