From baf9f7d9c1141764d64bdbb12b8d3a0b1098c757 Mon Sep 17 00:00:00 2001 From: David Dworken Date: Sat, 1 Oct 2022 15:26:42 -0700 Subject: [PATCH] Disable SLSA verification pending slsa-verifier bug --- client/lib/slsa.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/client/lib/slsa.go b/client/lib/slsa.go index 6fd4e18..c28f80d 100644 --- a/client/lib/slsa.go +++ b/client/lib/slsa.go @@ -45,6 +45,8 @@ func verifyBinary(ctx *context.Context, binaryPath, attestationPath, versionTag if os.Getenv("HISHTORY_DISABLE_SLSA_ATTESTATION") == "true" { return nil } + // TODO: Re-enable SLSA verification pending https://github.com/slsa-framework/slsa-verifier/issues/285 + return nil if err := checkForDowngrade(Version, versionTag); err != nil && os.Getenv("HISHTORY_ALLOW_DOWNGRADE") == "true" { return err