options

Jul 11, 2024

Changes in this version

+ type VSAOpts struct

+ ExpectedDigests *[]string

+ ExpectedResourceURI *string

+ ExpectedVerifiedLevels *[]string

+ ExpectedVerifierID *string

+ type VerificationOpts struct

+ PublicKey crypto.PublicKey

+ PublicKeyHashAlgo crypto.Hash

+ PublicKeyID *string

Mar 25, 2024

Changes in this version

type ProvenanceOpts

+ ExpectedProvenanceRepository *string

Aug 24, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Aug 24, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Aug 24, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

May 10, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

May 10, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

May 8, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

May 1, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Apr 20, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Apr 11, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Changes in this version

+ func TestingEnabled() bool

Apr 11, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Mar 6, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Mar 14, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Changes in this version

+ func ExperimentalEnabled() bool

type ProvenanceOpts

+ ExpectedPackageName *string

+ ExpectedPackageVersion *string

Mar 14, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Mar 9, 2023 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Dec 8, 2022 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Changes in this version

+ type BuilderOpts struct

+ ExpectedID *string

+ type ProvenanceOpts struct

+ ExpectedBranch *string

+ ExpectedBuilderID string

+ ExpectedDigest string

+ ExpectedSourceURI string

+ ExpectedTag *string

+ ExpectedVersionedTag *string

+ ExpectedWorkflowInputs map[string]string

Dec 8, 2022 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Dec 6, 2022 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Dec 6, 2022 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

Dec 3, 2022 GO-2023-2188

  GO-2023-2188: slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier