Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

attestation: add initial attestation helpers, integrate into brew install #17049

Merged
merged 15 commits into from
Apr 12, 2024
Merged

attestation: add initial attestation helpers, integrate into brew install #17049

merged 15 commits into from
Apr 12, 2024

Commits on Apr 8, 2024

  1. attestation: add initial attestation helpers 

    Adds the basic attestation verification APIs, as well
as a pre-pour check against `HOMEBREW_VERIFY_ATTESTATIONS`
that verifies the attestation (or backfill as necessary)
for bottles from homebrew-core.

Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    48e39bb View commit details
    Browse the repository at this point in the history

  2. rubocop fixes 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    578c2bc View commit details
    Browse the repository at this point in the history

  3. attestation: more docs 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    1881a1f View commit details
    Browse the repository at this point in the history

  4. typechecking, clearer env usage 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    a99100b View commit details
    Browse the repository at this point in the history

Commits on Apr 9, 2024

  1. Apply suggestions from code review 

    Co-authored-by: Mike McQuaid <[email protected]>
    @woodruffw @MikeMcQuaid
    woodruffw and MikeMcQuaid committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    ca6db49 View commit details
    Browse the repository at this point in the history

  2. attestation: simplify gh bootstrapping 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    e52c253 View commit details
    Browse the repository at this point in the history

  3. attestation: document gh_executable bootstrap cycle 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    a3a5f78 View commit details
    Browse the repository at this point in the history

  4. attestation: document BACKFILL_CUTOFF better 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    5ec3dab View commit details
    Browse the repository at this point in the history

  5. move InvalidAttestationError into Attestation mod 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    2efef36 View commit details
    Browse the repository at this point in the history

  6. attestation: strict typechecking 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    6e10001 View commit details
    Browse the repository at this point in the history

Commits on Apr 10, 2024

  1. attestation: fix a missing arg, add initial specs 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    990b7d7 View commit details
    Browse the repository at this point in the history

  2. attestation_spec: simplify gh_executable test 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    480e48b View commit details
    Browse the repository at this point in the history

Commits on Apr 11, 2024

  1. more attestation coverage 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 11, 2024
    Configuration menu
    Copy the full SHA
    e2b5d93 View commit details
    Browse the repository at this point in the history

  2. handle backfilled attestation subjects correctly 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 11, 2024
    Configuration menu
    Copy the full SHA
    faa00c8 View commit details
    Browse the repository at this point in the history

Commits on Apr 12, 2024

  1. test: add Bottle#filename test 

    Signed-off-by: William Woodruff <[email protected]>
    @woodruffw
    woodruffw committed Apr 12, 2024
    Configuration menu
    Copy the full SHA
    1607d04 View commit details
    Browse the repository at this point in the history