extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2025-01-23 06:38:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

Revert "Disable SLSA verification pending slsa-verifier bug"

Browse Source 
This reverts commit baf9f7d9c1.
This commit is contained in:
David Dworken 2022-10-02 19:37:07 -07:00
parent 93a9045c21
commit 1d8973ed2a
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
client/lib/slsa.go
View File

@ -45,8 +45,6 @@ func verifyBinary(ctx *context.Context, binaryPath, attestationPath, versionTag
if os.Getenv("HISHTORY_DISABLE_SLSA_ATTESTATION") == "true" { if os.Getenv("HISHTORY_DISABLE_SLSA_ATTESTATION") == "true" {
return nil return nil
} }
// TODO: Re-enable SLSA verification pending https://github.com/slsa-framework/slsa-verifier/issues/285
return nil
if err := checkForDowngrade(Version, versionTag); err != nil && os.Getenv("HISHTORY_ALLOW_DOWNGRADE") == "true" { if err := checkForDowngrade(Version, versionTag); err != nil && os.Getenv("HISHTORY_ALLOW_DOWNGRADE") == "true" {
return err return err