feat: add vsa e2e #379
feat: add vsa e2e #379
Conversation
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
| declare -a FILE_PATHS | ||
| while IFS= read -r file; do | ||
| FILE_PATHS+=("$file") | ||
| done < <(find ./gke-node-images:238739202978 ./gke-master-images:78064567238 -type f) |
There was a problem hiding this comment.
Would it be better to search for all intoto.jsonl files, so if they add other top level directories in the future, this script will pick them up?
There was a problem hiding this comment.
By the time they add support for container images, I suspect they may change the structure of the directories, so I hesitate to simple look for all intoto.jsonl files.
There was a problem hiding this comment.
Looks like we fail if we find no files, so SG, this should be sufficient and will catch if they make changes in the future.
About 38s to run slsa-verifier against all the VSAs, and about 2m for the whole workflow. |
| declare -a FILE_PATHS | ||
| while IFS= read -r file; do | ||
| FILE_PATHS+=("$file") | ||
| done < <(find ./gke-node-images:238739202978 ./gke-master-images:78064567238 -type f) |
There was a problem hiding this comment.
Looks like we fail if we find no files, so SG, this should be sufficient and will catch if they make changes in the future.
followup to slsa-framework/slsa-verifier#777
adds e2e tests for VSAs
Testing
example successful run
example failed run