Drew Roen

https://dart-internal-review.git.corp.google.com/c/dart-internal/+/4100 has been merged

In regards to impact, this is preventing us from doing any deployments of our Flutter infra applications. Is there a workaround or flag we can set to ignore the `sourceProvenance`...

Yes, here's the provenance of one of an artifact that failed validation today: ``` { "image_summary": { "digest": "sha256:7c8a71a843ee128ff4baadab3a05076d07ffb8d47d8affc759a87a60b1d9153c", "fully_qualified_digest": "us-docker.pkg.dev/flutter-dashboard/appengine/default.version-27ecaf6@sha256:7c8a71a843ee128ff4baadab3a05076d07ffb8d47d8affc759a87a60b1d9153c", "registry": "us-docker.pkg.dev", "repository": "appengine" }, "provenance_summary": { "provenance": [...

Thank you both for your help with this! We can try something similar to what @asraa mentioned in regards to only looking to update `slsa-verifier` for now and see if...