Merge branch 'main' into renovate/gcr.io-distroless-base-nonroot

slsa-framework · Feb 28, 2023 · 8c1da39 · 8c1da39
2 parents c430148 + 12910ea
commit 8c1da39
Show file tree

Hide file tree

Showing 32 changed files with 157 additions and 34 deletions.
diff --git a/actions/installer/package-lock.json b/actions/installer/package-lock.json
diff --git a/actions/installer/package.json b/actions/installer/package.json
@@ -24,9 +24,9 @@
   },
   "devDependencies": {
     "@types/jasmine": "4.3.1",
-    "@types/node": "18.14.0",
+    "@types/node": "18.14.2",
     "@vercel/ncc": "0.36.1",
-    "eslint": "8.34.0",
+    "eslint": "8.35.0",
     "eslint-plugin-github": "4.6.1",
     "jasmine": "4.5.0",
     "prettier": "2.8.4",

diff --git a/cli/slsa-verifier/main_regression_test.go b/cli/slsa-verifier/main_regression_test.go
@@ -836,7 +836,7 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) {
 					}
 
 					if err != nil {
-						return
+						continue
 					}
 
 					// Validate against test's expected builderID, if provided.
@@ -847,7 +847,7 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) {
 					}
 
 					if bid == nil {
-						return
+						continue
 					}
 
 					// If we have a generated a user-provided bid, then validate it against the

diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.5.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_generic/v1.5.0/binary-linux-amd64-push-v13.0.30