extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2024-12-27 17:28:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add integration to disable SLSA verification if there is a current SLSA outage

Browse Source
This commit is contained in:
David Dworken 2022-10-31 17:32:55 -07:00
parent 2183a63f8f
commit 906ef3782b
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
client/lib/slsa.go
View File

@ -46,6 +46,14 @@ func verifyBinary(ctx *context.Context, binaryPath, attestationPath, versionTag
if os.Getenv("HISHTORY_DISABLE_SLSA_ATTESTATION") == "true" {
return nil
}
resp, err := ApiGet("/api/v1/slsa-status?newVersion=" + versionTag)
if err != nil {
return nil
}
if string(resp) != "OK" {
fmt.Printf("SLSA verification is currently broken (%s), skipping SLSA validation...\n", string(resp))
return nil
}
if err := checkForDowngrade(Version, versionTag); err != nil && os.Getenv("HISHTORY_ALLOW_DOWNGRADE") == "true" {
return err