4dc7cf834a
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Console CI / console-ci (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
VEX Proof Bundles / verify-bundles (push) Has been cancelled
- Introduced sample proof bundle configuration files for testing, including `sample-proof-bundle-config.dsse.json`, `sample-proof-bundle.dsse.json`, and `sample-proof-bundle.json`. - Implemented a verification script `test_verify_sample.sh` to validate proof bundles against specified schemas and catalogs. - Updated existing proof bundle configurations with new metadata, including versioning, created timestamps, and justification details. - Enhanced evidence entries with expiration dates and hashes for better integrity checks. - Ensured all new configurations adhere to the defined schema for consistency and reliability in testing.
39 lines
1000 B
YAML
39 lines
1000 B
YAML
name: VEX Proof Bundles
|
|
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- 'scripts/vex/**'
|
|
- 'tests/Vex/ProofBundles/**'
|
|
- 'docs/benchmarks/vex-evidence-playbook*'
|
|
- '.gitea/workflows/vex-proof-bundles.yml'
|
|
push:
|
|
branches: [ main ]
|
|
paths:
|
|
- 'scripts/vex/**'
|
|
- 'tests/Vex/ProofBundles/**'
|
|
- 'docs/benchmarks/vex-evidence-playbook*'
|
|
- '.gitea/workflows/vex-proof-bundles.yml'
|
|
|
|
jobs:
|
|
verify-bundles:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Python
|
|
uses: actions/setup-python@v5
|
|
with:
|
|
python-version: '3.12'
|
|
|
|
- name: Install deps
|
|
run: pip install --disable-pip-version-check --no-cache-dir -r scripts/vex/requirements.txt
|
|
|
|
- name: Verify proof bundles (offline)
|
|
env:
|
|
PYTHONHASHSEED: "0"
|
|
run: |
|
|
chmod +x tests/Vex/ProofBundles/test_verify_sample.sh
|
|
tests/Vex/ProofBundles/test_verify_sample.sh
|