Add sample proof bundle configurations and verification script
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Console CI / console-ci (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
VEX Proof Bundles / verify-bundles (push) Has been cancelled
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Console CI / console-ci (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
VEX Proof Bundles / verify-bundles (push) Has been cancelled
- Introduced sample proof bundle configuration files for testing, including `sample-proof-bundle-config.dsse.json`, `sample-proof-bundle.dsse.json`, and `sample-proof-bundle.json`. - Implemented a verification script `test_verify_sample.sh` to validate proof bundles against specified schemas and catalogs. - Updated existing proof bundle configurations with new metadata, including versioning, created timestamps, and justification details. - Enhanced evidence entries with expiration dates and hashes for better integrity checks. - Ensured all new configurations adhere to the defined schema for consistency and reliability in testing.
This commit is contained in:
17
tests/Vex/ProofBundles/test_verify_sample.sh
Normal file
17
tests/Vex/ProofBundles/test_verify_sample.sh
Normal file
@@ -0,0 +1,17 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../.." && pwd)"
|
||||
|
||||
schema="$repo_root/docs/benchmarks/vex-evidence-playbook.schema.json"
|
||||
catalog="$repo_root/docs/benchmarks/vex-justifications.catalog.json"
|
||||
cas_root="$repo_root/tests/Vex/ProofBundles/cas"
|
||||
|
||||
for bundle in "$repo_root"/tests/Vex/ProofBundles/*proof-bundle*.json; do
|
||||
[[ "$bundle" == *.dsse.json ]] && continue
|
||||
python "$repo_root/scripts/vex/verify_proof_bundle.py" \
|
||||
--bundle "$bundle" \
|
||||
--schema "$schema" \
|
||||
--catalog "$catalog" \
|
||||
--cas-root "$cas_root"
|
||||
done
|
||||
Reference in New Issue
Block a user