extern/hishtory
1
0
Fork 0
mirror of https://github.com/ddworken/hishtory.git synced 2025-06-24 05:51:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Disable SLSA verification pending slsa-verifier bug

Browse Source
This commit is contained in:
David Dworken 2022-10-01 15:26:42 -07:00
parent 010b33f197
commit baf9f7d9c1
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
client/lib/slsa.go
View File

@ -45,6 +45,8 @@ func verifyBinary(ctx *context.Context, binaryPath, attestationPath, versionTag
if os.Getenv("HISHTORY_DISABLE_SLSA_ATTESTATION") == "true" { if os.Getenv("HISHTORY_DISABLE_SLSA_ATTESTATION") == "true" {
return nil return nil
} }
// TODO: Re-enable SLSA verification pending https://github.com/slsa-framework/slsa-verifier/issues/285
return nil
if err := checkForDowngrade(Version, versionTag); err != nil && os.Getenv("HISHTORY_ALLOW_DOWNGRADE") == "true" { if err := checkForDowngrade(Version, versionTag); err != nil && os.Getenv("HISHTORY_ALLOW_DOWNGRADE") == "true" {
return err return err