iface

Aug 24, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Changes in this version

+ type Provenance interface

+ BuildType func() (string, error)

+ BuilderID func() (string, error)

+ GetSystemParameters func() (map[string]any, error)

+ Header func() (intoto.StatementHeader, error)

+ Predicate func() (interface{}, error)

+ PredicateType func() (string, error)

+ SourceBranch func() (string, error)

+ SourceTag func() (string, error)

+ SourceURI func() (string, error)

+ Subjects func() ([]intoto.Subject, error)

Aug 24, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Aug 24, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier