search

slsa-framework / slsa-verifier

Verify provenance from SLSA compliant builders
Apache License 2.0
215 stars 45 forks source link

Enable regression tests for BYOB #663

Open laurentsimon opened 11 months ago

laurentsimon commented 11 months ago

Several of our e2e tests only use the slsa-verifier at head, e.g. https://github.com/slsa-framework/example-package/blob/main/.github/workflows/scripts/e2e.container-based.default.verify.sh#L56 and https://github.com/slsa-framework/example-package/blob/main/.github/workflows/scripts/e2e.container.default.verify.sh#L39

We need to enable them from a version.

/cc @ianlewis @asraa

laurentsimon commented 11 months ago

We also need regression tests in this repo

laurentsimon commented 11 months ago

https://github.com/slsa-framework/example-package/blob/main/.github/workflows/verifier-e2e.all.workflow_dispatch.main.all.slsa3.yml is for generating regression test as linked in https://github.com/slsa-framework/slsa-github-generator/blob/main/RELEASE.md#update-verifier