Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -152,7 +152,7 @@ ready: fmt-amend ## Amend current commit with fmt changes

#--------------------------------------------------------------------
# The idea here is to use some real live recorded attestations in our tests.
# If the attestation files in https://github.com/enterprise-contract/hacks/provenance/recordings
# If the attestation files in https://github.com/conforma/hacks/provenance/recordings
# change, you can use `make sync-test-data` to sync the changes to this one local rego file.
RECORDED_ATT_DATA=policy/lib/tekton/recorded_att_data_test.rego

Expand All @@ -174,11 +174,11 @@ _test-data-%:
FILE_LOWER="$${FILE,,}" && \
REGO_VAR="att_$${FILE_LOWER//-/_}" && \
echo -n "$$REGO_VAR := " && \
curl -sL https://raw.githubusercontent.com/enterprise-contract/hacks/main/provenance/recordings/$*/attestation.json | jq . \
curl -sL https://raw.githubusercontent.com/conforma/hacks/main/provenance/recordings/$*/attestation.json | jq . \
) >> $(RECORDED_ATT_DATA)
@opa fmt --write $(RECORDED_ATT_DATA)

# There are some other attestation files in https://github.com/enterprise-contract/hacks/provenance/recordings
# There are some other attestation files in https://github.com/conforma/hacks/provenance/recordings
# but these two are the most useful for testing currently
_sync-test-data-01: _test-data-01-SLSA-v0-2-Pipeline-in-cluster
_sync-test-data-05: _test-data-05-SLSA-v1-0-tekton-build-type-Pipeline-in-cluster
Expand Down
8 changes: 4 additions & 4 deletions policy/lib/tekton/recorded_att_data_test.rego
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ att_01_slsa_v0_2_pipeline_in_cluster := {
"params": [
{
"name": "url",
"value": "https://github.com/enterprise-contract/hacks.git",
"value": "https://github.com/conforma/hacks.git",
},
{
"name": "revision",
Expand All @@ -61,7 +61,7 @@ att_01_slsa_v0_2_pipeline_in_cluster := {
}],
"invocation": {
"configSource": {
"uri": "git+https://github.com/enterprise-contract/hacks.git",
"uri": "git+https://github.com/conforma/hacks.git",
"digest": {"sha1": "4fceb2416020011e794105f113a3913ef659c8ee"},
"entryPoint": "provenance/task/mock-git-clone.yaml",
},
Expand Down Expand Up @@ -261,7 +261,7 @@ att_01_slsa_v0_2_pipeline_in_cluster := {
"digest": {"sha256": "fc300be6adbdf2ca812ad01efd0dee2a3e3f5d33958ad6cd99159e25e9ee1398"},
},
{
"uri": "git+https://github.com/enterprise-contract/hacks.git",
"uri": "git+https://github.com/conforma/hacks.git",
"digest": {"sha1": "4fceb2416020011e794105f113a3913ef659c8ee"},
},
{
Expand Down Expand Up @@ -341,7 +341,7 @@ att_05_slsa_v1_0_tekton_build_type_pipeline_in_cluster := {
},
"resolvedDependencies": [
{
"uri": "git+https://github.com/enterprise-contract/hacks.git",
"uri": "git+https://github.com/conforma/hacks.git",
"digest": {"sha1": "4fceb2416020011e794105f113a3913ef659c8ee"},
"name": "pipelineTask",
"content": "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",
Expand Down