Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: v2.0.0-rc.0: update adversarial test: Adversarial generic gene… #358

Merged
merged 1 commit into from
Apr 18, 2024

Conversation

ramonpetgrave64
Copy link
Collaborator

@ramonpetgrave64 ramonpetgrave64 merged commit dfe2390 into main Apr 18, 2024
33 checks passed
@ramonpetgrave64
Copy link
Collaborator Author

after changing the binary, expected failure

https://github.com/slsa-framework/example-package/actions/runs/8744806188/job/23998545829#step:2:212

Fetching the builder with ref: refs/tags/v2.0.0-rc.0
Builder version: v2.0.0-rc.0
BUILDER_REPOSITORY: slsa-framework/slsa-github-generator
verifier hash computed is 54e4f40bf120bce1cef1ff123fef3456e8c526f315c47e22ed6acfe02a06b9a8
verifier hash verification has passed
WARNING: Insecure SLSA_VERIFIER_TESTING is enabled.
Verified signature against tlog entry index 86837246 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77a9a84de4c0a982c69eb1264f1d0f38f4d25d5635693e84be9f1a31d8b7458dc84
Verifying artifact slsa-generator-generic-linux-amd64: FAILED: expected hash '5891b5b522d5df086d0ff0b110fbd9d21bb4fc7163af34d08286a2e846f6be03' not found: artifact hash does not match provenance subject
FAILED: SLSA verification failed: expected hash '5891b5b522d5df086d0ff0b110fbd9d21bb4fc7163af34d08286a2e846f6be03' not found: artifact hash does not match provenance subject
Error: Process completed with exit code 6.

@ramonpetgrave64
Copy link
Collaborator Author

after replacing the priginal binary, now passing

https://github.com/slsa-framework/example-package/actions/runs/8744806188/job/23998609165

@ramonpetgrave64 ramonpetgrave64 deleted the ramonpetgrave64-patch-8 branch June 26, 2024 19:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant