Skip to content

Commit

Permalink
Option to configure rekor server.
Browse files Browse the repository at this point in the history
- Provided an option to configure the rekor server.
- Fixes slsa-framework#372

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
  • Loading branch information
naveensrinivasan committed Jun 24, 2022
1 parent 6cab91f commit edde538
Showing 1 changed file with 10 additions and 4 deletions.
14 changes: 10 additions & 4 deletions internal/builders/go/main.go
Original file line number Diff line number Diff line change
Expand Up @@ -73,8 +73,13 @@ func runBuild(dry bool, configFile, evalEnvs string) error {
return nil
}

func runProvenanceGeneration(subject, digest, commands, envs, workingDir string) error {
r := sigstore.NewDefaultRekor()
func runProvenanceGeneration(subject, digest, commands, envs, workingDir, rekor string) error {
var r *sigstore.Rekor
if rekor == "" {
r = sigstore.NewDefaultRekor()
} else {
r = sigstore.NewRekor(rekor)
}
s := sigstore.NewDefaultFulcio()
attBytes, err := pkg.GenerateProvenance(subject, digest,
commands, envs, workingDir, s, r)
Expand All @@ -83,7 +88,7 @@ func runProvenanceGeneration(subject, digest, commands, envs, workingDir string)
}

filename := fmt.Sprintf("%s.intoto.jsonl", subject)
err = ioutil.WriteFile(filename, attBytes, 0600)
err = ioutil.WriteFile(filename, attBytes, 0o600)
if err != nil {
return err
}
Expand Down Expand Up @@ -112,6 +117,7 @@ func main() {
provenanceCommand := provenanceCmd.String("command", "", "command used to compile the binary")
provenanceEnv := provenanceCmd.String("env", "", "env variables used to compile the binary")
provenanceWorkingDir := provenanceCmd.String("workingDir", "", "working directory used to issue compilation commands")
provenanceRekor := provenanceCmd.String("rekor", "", "rekor server to use for provenance")

// Expect a sub-command.
if len(os.Args) < 2 {
Expand All @@ -138,7 +144,7 @@ func main() {
}

err := runProvenanceGeneration(*provenanceName, *provenanceDigest,
*provenanceCommand, *provenanceEnv, *provenanceWorkingDir)
*provenanceCommand, *provenanceEnv, *provenanceWorkingDir, *provenanceRekor)
check(err)

default:
Expand Down

0 comments on commit edde538

Please sign in to comment.