Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: v2.0.0: update adversarial test: Adversarial generic generator #365

Merged
merged 1 commit into from
Apr 22, 2024

Conversation

@ramonpetgrave64 ramonpetgrave64 merged commit 117e4fb into main Apr 22, 2024
33 checks passed
@ramonpetgrave64
Copy link
Collaborator Author

expected error with bad binary

https://github.com/slsa-framework/example-package/actions/runs/8790644048/job/24123110455#step:2:212

Run ./__BUILDER_CHECKOUT_DIR__/.github/actions/generate-builder/generate-builder.sh
Fetching the builder with ref: refs/tags/v2.0.0
Builder version: v2.0.0
BUILDER_REPOSITORY: slsa-framework/slsa-github-generator
verifier hash computed is 54e4f40bf120bce1cef1ff123fef3456e8c526f315c47e22ed6acfe02a06b9a8
verifier hash verification has passed
Verified signature against tlog entry index 87834319 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77a50e9cc4118b9e7ae276a528adadc99327ad9c223e644933546992f20f1d6a312
Verifying artifact slsa-generator-generic-linux-amd64: FAILED: expected hash '5891b5b522d5df086d0ff0b110fbd9d21bb4fc7163af34d08286a2e846f6be03' not found: artifact hash does not match provenance subject
FAILED: SLSA verification failed: expected hash '5891b5b522d5df086d0ff0b110fbd9d21bb4fc7163af34d08286a2e846f6be03' not found: artifact hash does not match provenance subject

@ramonpetgrave64
Copy link
Collaborator Author

Now succeeding with original binary

https://github.com/slsa-framework/example-package/actions/runs/8790660132/job/24123162023#step:2:214

Run ./__BUILDER_CHECKOUT_DIR__/.github/actions/generate-builder/generate-builder.sh
Fetching the builder with ref: refs/tags/v2.0.0
Builder version: v2.0.0
BUILDER_REPOSITORY: slsa-framework/slsa-github-generator
verifier hash computed is 54e4f40bf120bce1cef1ff123fef3456e8c526f315c47e22ed6acfe02a06b9a8
verifier hash verification has passed
Verified signature against tlog entry index 87834319 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77a50e9cc4118b9e7ae276a528adadc99327ad9c223e644933546992f20f1d6a312
Verified build using builder "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@refs/tags/v2.0.0" at commit 5a775b367a56d5bd118a224a811bba288150a563
Verifying artifact slsa-generator-generic-linux-amd64: PASSED

PASSED: Verified SLSA provenance
Builder provenance verified at tag v2.0.0 and commit 5a775b367a56d5bd118a224a811bba288150a563
Run ./__BUILDER_CHECKOUT_DIR__/.github/actions/compute-sha256
Computing sha256 of slsa-generator-generic-linux-amd64
Computed sha256 of slsa-generator-generic-linux-amd64 as 60f56f8296c7d25deda6426aefa1ad888e091e7d7d5d2c8390b99586d8fae8d2

@ramonpetgrave64 ramonpetgrave64 deleted the ramonpetgrave64-patch-14 branch June 26, 2024 19:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant