Skip to content

Commit b3a88d2

Browse files
laurentsimonlaurentsimon
committed
update
1 parent 130e6ef commit b3a88d2

7 files changed

+598
-6
lines changed

‎verifiers/internal/gcb/provenance_test.go

+34-6
Original file line numberDiff line numberDiff line change
@@ -124,12 +124,40 @@ func Test_VerifyBuilder(t *testing.T) {
124124
path: "./testdata/gcloud-container-invalid-recipe.type.json",
125125
expected: serrors.ErrorInvalidRecipe,
126126
},
127-
// TODO: add a file built frmo v0.1, and check that it fails with ErrorInvalidBuilderID
128-
// TODO: v02 and v03 from Test_validateRecipeType
129-
// use cloud / step in type for v0.2
130-
// use hosted for v0.3
131-
// use correct cloud or steps in v0.3
132-
// use random name for v0.3
127+
{
128+
name: "v0.1 invalid builder",
129+
path: "./testdata/gcloud-container-invalid-builderv01.json",
130+
builderID: "http://cloudbuild.googleapis.com/[email protected]",
131+
expected: serrors.ErrorInvalidBuilderID,
132+
},
133+
{
134+
name: "invalid v0.2 recipe type CloudBuildSteps",
135+
path: "./testdata/gcloud-container-invalid-recipetypestepsv02.json",
136+
builderID: "https://cloudbuild.googleapis.com/[email protected]",
137+
expected: serrors.ErrorInvalidRecipe,
138+
},
139+
{
140+
name: "invalid v0.2 recipe type CloudBuildYaml",
141+
path: "./testdata/gcloud-container-invalid-recipetypecloudv02.json",
142+
builderID: "https://cloudbuild.googleapis.com/[email protected]",
143+
expected: serrors.ErrorInvalidRecipe,
144+
},
145+
{
146+
name: "valid v0.3 recipe type CloudBuildSteps",
147+
path: "./testdata/gcloud-container-invalid-recipetypestepsv03.json",
148+
builderID: "https://cloudbuild.googleapis.com/[email protected]",
149+
},
150+
{
151+
name: "valid v0.3 recipe type CloudBuildYaml",
152+
path: "./testdata/gcloud-container-invalid-recipetypecloudv03.json",
153+
builderID: "https://cloudbuild.googleapis.com/[email protected]",
154+
},
155+
{
156+
name: "invalid v0.3 recipe type random",
157+
path: "./testdata/gcloud-container-invalid-recipetyperandv03.json",
158+
builderID: "https://cloudbuild.googleapis.com/[email protected]",
159+
expected: serrors.ErrorInvalidRecipe,
160+
},
133161
}
134162
for _, tt := range tests {
135163
tt := tt // Re-initializing variable so it is not changed while executing the closure below

‎verifiers/internal/gcb/testdata/gcloud-container-invalid-builderv01.json

+94
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,94 @@
1+
{
2+
"image_summary": {
3+
"digest": "sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd",
4+
"fully_qualified_digest": "us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd",
5+
"registry": "us-west2-docker.pkg.dev",
6+
"repository": "quickstart-docker-repo"
7+
},
8+
"provenance_summary": {
9+
"provenance": [
10+
{
11+
"build": {
12+
"intotoStatement": {
13+
"_type": "https://in-toto.io/Statement/v0.1",
14+
"predicateType": "https://slsa.dev/provenance/v0.1",
15+
"slsaProvenance": {
16+
"builder": {
17+
"id": "https://cloudbuild.googleapis.com/[email protected]"
18+
},
19+
"materials": [
20+
{
21+
"uri": "https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"
22+
}
23+
],
24+
"metadata": {
25+
"buildFinishedOn": "2022-08-15T22:43:34.366498Z",
26+
"buildInvocationId": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b",
27+
"buildStartedOn": "2022-08-15T22:43:18.700638187Z"
28+
},
29+
"recipe": {
30+
"arguments": {
31+
"@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build",
32+
"id": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b",
33+
"options": {
34+
"dynamicSubstitutions": true,
35+
"logging": "LEGACY",
36+
"pool": {},
37+
"substitutionOption": "ALLOW_LOOSE"
38+
},
39+
"sourceProvenance": {},
40+
"steps": [
41+
{
42+
"args": [
43+
"build",
44+
"-t",
45+
"us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14",
46+
"."
47+
],
48+
"name": "gcr.io/cloud-builders/docker",
49+
"pullTiming": {
50+
"endTime": "2022-08-15T22:43:21.662016533Z",
51+
"startTime": "2022-08-15T22:43:21.657262492Z"
52+
},
53+
"status": "SUCCESS",
54+
"timing": {
55+
"endTime": "2022-08-15T22:43:27.056377441Z",
56+
"startTime": "2022-08-15T22:43:21.657262492Z"
57+
}
58+
}
59+
]
60+
},
61+
"entryPoint": "cloudbuild.yaml",
62+
"type": "https://cloudbuild.googleapis.com/[email protected]"
63+
}
64+
},
65+
"subject": [
66+
{
67+
"digest": {
68+
"sha256": "1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd"
69+
},
70+
"name": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14"
71+
}
72+
]
73+
}
74+
},
75+
"createTime": "2022-08-15T22:43:35.649016Z",
76+
"envelope": {
77+
"payload": "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",
78+
"payloadType": "application/vnd.in-toto+json",
79+
"signatures": [
80+
{
81+
"keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1",
82+
"sig": "MEYCIQD-0xUsdkYnsmKnQL_ndEvXknLfn82zsG-hGyYUd4aYsAIhAP4KSCxN2VPNc-dvfrQIGduMUNmAiHxLttdezqdrSf3F"
83+
}
84+
]
85+
},
86+
"kind": "BUILD",
87+
"name": "projects/gosst-scare-sandbox/occurrences/8ce06798-f94d-4772-a224-04e473163790",
88+
"noteName": "projects/verified-builder/notes/intoto_b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b",
89+
"resourceUri": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd",
90+
"updateTime": "2022-08-15T22:43:35.649016Z"
91+
}
92+
]
93+
}
94+
}

‎verifiers/internal/gcb/testdata/gcloud-container-invalid-recipetypecloudv02.json

+94
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,94 @@
1+
{
2+
"image_summary": {
3+
"digest": "sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd",
4+
"fully_qualified_digest": "us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd",
5+
"registry": "us-west2-docker.pkg.dev",
6+
"repository": "quickstart-docker-repo"
7+
},
8+
"provenance_summary": {
9+
"provenance": [
10+
{
11+
"build": {
12+
"intotoStatement": {
13+
"_type": "https://in-toto.io/Statement/v0.1",
14+
"predicateType": "https://slsa.dev/provenance/v0.1",
15+
"slsaProvenance": {
16+
"builder": {
17+
"id": "https://cloudbuild.googleapis.com/[email protected]"
18+
},
19+
"materials": [
20+
{
21+
"uri": "https://github.com/laurentsimon/gcb-tests/commit/fbbb98765e85ad464302dc5977968104d36e455e"
22+
}
23+
],
24+
"metadata": {
25+
"buildFinishedOn": "2022-08-15T22:43:34.366498Z",
26+
"buildInvocationId": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b",
27+
"buildStartedOn": "2022-08-15T22:43:18.700638187Z"
28+
},
29+
"recipe": {
30+
"arguments": {
31+
"@type": "type.googleapis.com/google.devtools.cloudbuild.v1.Build",
32+
"id": "b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b",
33+
"options": {
34+
"dynamicSubstitutions": true,
35+
"logging": "LEGACY",
36+
"pool": {},
37+
"substitutionOption": "ALLOW_LOOSE"
38+
},
39+
"sourceProvenance": {},
40+
"steps": [
41+
{
42+
"args": [
43+
"build",
44+
"-t",
45+
"us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14",
46+
"."
47+
],
48+
"name": "gcr.io/cloud-builders/docker",
49+
"pullTiming": {
50+
"endTime": "2022-08-15T22:43:21.662016533Z",
51+
"startTime": "2022-08-15T22:43:21.657262492Z"
52+
},
53+
"status": "SUCCESS",
54+
"timing": {
55+
"endTime": "2022-08-15T22:43:27.056377441Z",
56+
"startTime": "2022-08-15T22:43:21.657262492Z"
57+
}
58+
}
59+
]
60+
},
61+
"entryPoint": "cloudbuild.yaml",
62+
"type": "https://cloudbuild.googleapis.com/[email protected]"
63+
}
64+
},
65+
"subject": [
66+
{
67+
"digest": {
68+
"sha256": "1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd"
69+
},
70+
"name": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image:v14"
71+
}
72+
]
73+
}
74+
},
75+
"createTime": "2022-08-15T22:43:35.649016Z",
76+
"envelope": {
77+
"payload": "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",
78+
"payloadType": "application/vnd.in-toto+json",
79+
"signatures": [
80+
{
81+
"keyid": "projects/verified-builder/locations/global/keyRings/attestor/cryptoKeys/builtByGCB/cryptoKeyVersions/1",
82+
"sig": "MEYCIQD-0xUsdkYnsmKnQL_ndEvXknLfn82zsG-hGyYUd4aYsAIhAP4KSCxN2VPNc-dvfrQIGduMUNmAiHxLttdezqdrSf3F"
83+
}
84+
]
85+
},
86+
"kind": "BUILD",
87+
"name": "projects/gosst-scare-sandbox/occurrences/8ce06798-f94d-4772-a224-04e473163790",
88+
"noteName": "projects/verified-builder/notes/intoto_b6e052a7-5aa4-41bf-a56b-9bc4e4f3058b",
89+
"resourceUri": "https://us-west2-docker.pkg.dev/gosst-scare-sandbox/quickstart-docker-repo/quickstart-image@sha256:1a033b002f89ed2b8ea733162497fb70f1a4049a7f8602d6a33682b4ad9921fd",
90+
"updateTime": "2022-08-15T22:43:35.649016Z"
91+
}
92+
]
93+
}
94+
}

0 commit comments

Comments
 (0)