Skip to content

feat: add VSA (Verification Summary Attestation) validation command #2928

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
joejstuart wants to merge 21 commits into
base: main
Choose a base branch
from
Draft

feat: add VSA (Verification Summary Attestation) validation command #2928

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
13612df
feat(vsa): add core VSA validation logic
joejstuart Sep 5, 2025
48f7b27
feat(vsa): add VSA data retrieval infrastructure
joejstuart Sep 5, 2025
cd366c1
feat(evaluator): enhance rule discovery for VSA support
joejstuart Sep 5, 2025
6a2a775
feat(appsnapshot): add VSA support to application snapshots
joejstuart Sep 5, 2025
2ecbc30
feat(cli): add VSA validation command
joejstuart Sep 5, 2025
5e61bc4
docs: add VSA validation documentation and integration
joejstuart Sep 5, 2025
b5b3f81
chore: update dependencies and configuration for VSA
joejstuart Sep 5, 2025
365903f
feat(vsa): add VSA types and data structures
joejstuart Sep 5, 2025
a68c91c
test(vsa): add VSA data retriever tests
joejstuart Sep 5, 2025
0c062ca
refactor(vsa): improve VSA implementation structure
joejstuart Sep 5, 2025
4b10516
Performance improvements
joejstuart Sep 5, 2025
39c9061
Unit tests for validate vsa command
joejstuart Sep 5, 2025
45b2ca4
use dsse envelope
joejstuart Sep 11, 2025
92e2c48
signature verification working
joejstuart Sep 12, 2025
2a8ce44
remove hardcoded uuid
joejstuart Sep 12, 2025
220cfbb
full validation working
joejstuart Sep 12, 2025
8aafcfd
cleanup
joejstuart Sep 12, 2025
2f1b794
function cleanup
joejstuart Sep 12, 2025
53a175c
file retriever was not using correct payload
joejstuart Sep 12, 2025
04fb70b
remove logs
joejstuart Sep 12, 2025
b6031a9
integer overflow protection
joejstuart Sep 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
386 changes: 97 additions & 289 deletions .cursor/rules/package_filtering_process.mdc
View file
Open in desktop

Large diffs are not rendered by default.

3 changes: 0 additions & 3 deletions cmd/validate/image_integration_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,9 +44,6 @@ import (
func TestEvaluatorLifecycle(t *testing.T) {
noEvaluators := 100

// Clear the download cache to ensure a clean state for this test
// source.ClearDownloadCache()

ctx := utils.WithFS(context.Background(), afero.NewMemMapFs())
client := fake.FakeClient{}
commonMockClient(&client)
Expand Down
2 changes: 2 additions & 0 deletions cmd/validate/validate.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,7 @@ import (
"github.com/conforma/cli/internal/input"
"github.com/conforma/cli/internal/policy"
_ "github.com/conforma/cli/internal/rego"
"github.com/conforma/cli/internal/validate/vsa"
)

var ValidateCmd *cobra.Command
Expand All @@ -35,6 +36,7 @@ func init() {
ValidateCmd.AddCommand(validateImageCmd(image.ValidateImage))
ValidateCmd.AddCommand(validateInputCmd(input.ValidateInput))
ValidateCmd.AddCommand(ValidatePolicyCmd(policy.ValidatePolicy))
ValidateCmd.AddCommand(validateVSACmd(vsa.ValidateVSA))
}

func NewValidateCmd() *cobra.Command {
Expand Down
Loading
Loading