example-package icon indicating copy to clipboard operation
example-package copied to clipboard
verified publisher icon slsa-framework

enable GCB verification for older version

Open laurentsimon opened this issue 2 years ago • 3 comments

We currently only verify at HEAD https://github.com/slsa-framework/example-package/blob/main/.github/workflows/scripts/e2e.gcb.default.verify.sh#L17

laurentsimon avatar Jan 11 '23 21:01 laurentsimon

We enable for v2+, which is where support started.

Right now it's v2.1 to include the git+, but we can backport that to v2.0

asraa avatar Mar 09 '23 14:03 asraa

Given it's a simple fix, is it worth backporting?

laurentsimon avatar Mar 09 '23 19:03 laurentsimon

I filed an issue, yes https://github.com/slsa-framework/slsa-verifier/issues/520

asraa avatar Mar 09 '23 19:03 asraa