feat: Regression tests for builder v1.10.0 (#745)

We need the pre-submit to pass. Merging can happen after the builder release --------- Signed-off-by: laurentsimon <laurentsimon@google.com>
slsa-framework · Mar 21, 2024 · dc7173b · dc7173b
1 parent 52c099b
commit dc7173b
Show file tree

Hide file tree

Showing 72 changed files with 171 additions and 1 deletion.
diff --git a/cli/slsa-verifier/main_regression_test.go b/cli/slsa-verifier/main_regression_test.go
@@ -801,7 +801,7 @@ func Test_runVerifyGHAArtifactImage(t *testing.T) {
 			source:      "github.com/slsa-framework/example-package",
 			pversiontag: pString("v1"),
 			minversion:  "v1.9.0",
-			err:         serrors.ErrorMismatchTag,
+			err:         serrors.ErrorMismatchVersionedTag,
 		},
 	}
 	for _, tt := range tests {

diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v13.0.30
diff --git a/...r/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v13.0.30.intoto.build.slsa b/...r/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v13.0.30.intoto.build.slsa
diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14
diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14.2
diff --git a/...fier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14.2.intoto.build.slsa b/...fier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14.2.intoto.build.slsa
diff --git a/...rifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14.intoto.build.slsa b/...rifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-push-v14.intoto.build.slsa
diff --git a/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_container-based/v1.10.0/binary-linux-amd64-workflow_dispatch
diff --git a/...stdata/gha_container-based/v1.10.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa b/...stdata/gha_container-based/v1.10.0/binary-linux-amd64-workflow_dispatch.intoto.build.slsa
diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v13.0.30
@@ -0,0 +1 @@
+hello
diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v13.0.30.build.slsa b/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v13.0.30.build.slsa
diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14
@@ -0,0 +1 @@
+hello
diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14.2
@@ -0,0 +1 @@
+hello
diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14.2.build.slsa b/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14.2.build.slsa
diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14.build.slsa b/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-push-v14.build.slsa
diff --git a/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-workflow_dispatch
@@ -0,0 +1 @@
+hello
diff --git a/...a-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-workflow_dispatch.build.slsa b/...a-verifier/testdata/gha_delegator/v1.10.0/binary-linux-amd64-workflow_dispatch.build.slsa
diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v13.0.30 b/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v13.0.30
diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v13.0.30.intoto.jsonl
diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14 b/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14
diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14.2 b/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14.2
diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14.2.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14.2.intoto.jsonl
diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14.intoto.jsonl b/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-push-v14.intoto.jsonl
diff --git a/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-workflow_dispatch b/cli/slsa-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-workflow_dispatch
diff --git a/...a-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl b/...a-verifier/testdata/gha_generic/v1.10.0/binary-linux-amd64-workflow_dispatch.intoto.jsonl
@@ -0,0 +1 @@
+{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEUCIGOPHGW9p9WTVVXmCZ7dczuR/Im1s9zI7el31SQPzEa+AiEAwmAa2yr3Ytp8P/3+SUofxsuQAyZfIoPGOYjO2AozHCs=","cert":"-----BEGIN CERTIFICATE-----\nMIIHsDCCBzWgAwIBAgIUF0JrINvtXd8HGDhfsiYnIvmW5ZYwCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjQwMzIxMTAzNDAyWhcNMjQwMzIxMTA0NDAyWjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAETFOPm93QDpNAUrOGdc3o6c6lDyEc73MPK3nz\nYjF9zLTzt43ZUysBpGTfdVM9Pqu0g9xry25s4XYn/xJERAHtEqOCBlQwggZQMA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUx9ue\n6DlhgLwRBUwm5YGVfQ3ylXwwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8wgYUGA1UdEQEB/wR7MHmGd2h0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1l\nd29yay9zbHNhLWdpdGh1Yi1nZW5lcmF0b3IvLmdpdGh1Yi93b3JrZmxvd3MvZ2Vu\nZXJhdG9yX2dlbmVyaWNfc2xzYTMueW1sQHJlZnMvdGFncy92MS4xMC4wMDkGCisG\nAQQBg78wAQEEK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVu\ndC5jb20wHwYKKwYBBAGDvzABAgQRd29ya2Zsb3dfZGlzcGF0Y2gwNgYKKwYBBAGD\nvzABAwQoZDM3YTdmNzQwZWU3NDA0OTE0NDU2ZjI0ZGNkOTBlODY1YTA1MDllODBV\nBgorBgEEAYO/MAEEBEcuZ2l0aHViL3dvcmtmbG93cy92ZXJpZmllci1lMmUuYWxs\nLndvcmtmbG93X2Rpc3BhdGNoLm1haW4uYWxsLnNsc2EzLnltbDAsBgorBgEEAYO/\nMAEFBB5zbHNhLWZyYW1ld29yay9leGFtcGxlLXBhY2thZ2UwHQYKKwYBBAGDvzAB\nBgQPcmVmcy9oZWFkcy9tYWluMDsGCisGAQQBg78wAQgELQwraHR0cHM6Ly90b2tl\nbi5hY3Rpb25zLmdpdGh1YnVzZXJjb250ZW50LmNvbTCBhwYKKwYBBAGDvzABCQR5\nDHdodHRwczovL2dpdGh1Yi5jb20vc2xzYS1mcmFtZXdvcmsvc2xzYS1naXRodWIt\nZ2VuZXJhdG9yLy5naXRodWIvd29ya2Zsb3dzL2dlbmVyYXRvcl9nZW5lcmljX3Ns\nc2EzLnltbEByZWZzL3RhZ3MvdjEuMTAuMDA4BgorBgEEAYO/MAEKBCoMKGM3NDdm\nZTc3NjlhZGYzNjU2ZGM3ZDU4OGIxNjFjYjYxNGQ3YWJmZWUwHQYKKwYBBAGDvzAB\nCwQPDA1naXRodWItaG9zdGVkMEEGCisGAQQBg78wAQwEMwwxaHR0cHM6Ly9naXRo\ndWIuY29tL3Nsc2EtZnJhbWV3b3JrL2V4YW1wbGUtcGFja2FnZTA4BgorBgEEAYO/\nMAENBCoMKGQzN2E3Zjc0MGVlNzQwNDkxNDQ1NmYyNGRjZDkwZTg2NWEwNTA5ZTgw\nHwYKKwYBBAGDvzABDgQRDA9yZWZzL2hlYWRzL21haW4wGQYKKwYBBAGDvzABDwQL\nDAk0ODYzMjU4MDkwMQYKKwYBBAGDvzABEAQjDCFodHRwczovL2dpdGh1Yi5jb20v\nc2xzYS1mcmFtZXdvcmswGAYKKwYBBAGDvzABEQQKDAg4MDQzMTE4NzCBmwYKKwYB\nBAGDvzABEgSBjAyBiWh0dHBzOi8vZ2l0aHViLmNvbS9zbHNhLWZyYW1ld29yay9l\neGFtcGxlLXBhY2thZ2UvLmdpdGh1Yi93b3JrZmxvd3MvdmVyaWZpZXItZTJlLmFs\nbC53b3JrZmxvd19kaXNwYXRjaC5tYWluLmFsbC5zbHNhMy55bWxAcmVmcy9oZWFk\ncy9tYWluMDgGCisGAQQBg78wARMEKgwoZDM3YTdmNzQwZWU3NDA0OTE0NDU2ZjI0\nZGNkOTBlODY1YTA1MDllODAhBgorBgEEAYO/MAEUBBMMEXdvcmtmbG93X2Rpc3Bh\ndGNoMGQGCisGAQQBg78wARUEVgxUaHR0cHM6Ly9naXRodWIuY29tL3Nsc2EtZnJh\nbWV3b3JrL2V4YW1wbGUtcGFja2FnZS9hY3Rpb25zL3J1bnMvODM3MzQ4MjYxOC9h\ndHRlbXB0cy8xMBYGCisGAQQBg78wARYECAwGcHVibGljMIGJBgorBgEEAdZ5AgQC\nBHsEeQB3AHUA3T0wasbHETJjGR4cmWc3AqJKXrjePK3/h4pygC8p7o4AAAGOYJMw\nswAABAMARjBEAiBPXNJoBwX/YClOY9wxS0kuPu+8mF1UL0rjR3KxVeOLsQIgO0B2\nk4NX78Cu2c/YsE2cQc/x7nD/eMIvJSVHb9jqzUMwCgYIKoZIzj0EAwMDaQAwZgIx\nAOQSdvHFX/Y8Txc+Y004FD3k9LKH+ouyo1OJ/3Bfe7zg+mv8f1NWHcAAPjPxoqJS\nHAIxAJI2tSjXqw8vFcnygRepX1icPMJR46uwtSy41jIFTTEG5s+vVZz7Bi3u+kd/\nMM+ipA==\n-----END CERTIFICATE-----\n"}]}
diff --git a/cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch.digest b/cli/slsa-verifier/testdata/gha_generic_container/v1.10.0/container_workflow_dispatch.digest
@@ -0,0 +1 @@
+sha256:e0a0a765d690a5104331cfbac88ebbbf01736c1f87aaa3cd455c516a5ea586a5
diff --git a/...ow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c b/...ow_dispatch/blobs/sha256/1e3d9b7d145208fa8fa3ee1c9612d0adaac7255f1bbc9ddea7e461e0b317805c