GO-2023-2188 : slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier
Discover Packages
github.com/slsa-framework/slsa-verifier/v2
cli
experimental
service
command
Version:
v2.3.0-rc.1
Opens a new window with list of versions in this module.
Published: May 1, 2023
License: Apache-2.0
Opens a new window with license information.
Imports: 6
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
README
README
¶
SLSA verifier as a service
This document is WIP.
Command to run the service locally:
$ docker build -t slsa-verifier-rest:latest -f cli/experimental/service/Dockerfile .
$ docker run -p 8000:8000 slsa-verifier-rest:latest # This did not work for me.
$ docker run --network=host slsa-verifier-rest:latest
$ curl -s 127.0.0.1:8000/v1/verify -d @cli/experimental/service/testdata/request.txt
Expand ▾
Collapse ▴
Documentation
¶
There is no documentation for this package.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.