feat: gcb v1.0 support - Githubissues

slsa-framework / slsa-verifier

Verify provenance from SLSA compliant builders

Apache License 2.0

216 stars 45 forks source link

feat: gcb v1.0 support #691

Closed laurentsimon closed 10 months ago

laurentsimon commented 10 months ago

closes https://github.com/slsa-framework/slsa-verifier/issues/683

This is a large PR, but there is not much new code.

The code adding support for v1.0 is under:

verifiers/internal/gcb/slsaprovenance/v1.0/*
verifiers/internal/gcb/slsaprovenance/provenance.go

The rest is mostly some re-factoring needed

Remaining is regression tests, tracked in https://github.com/slsa-framework/slsa-verifier/issues/690