Skip to content

[NCL-9535]: Slsa Provenance has invalid digest key (commit); add a schema validator to verify provenance compliance#4455

Closed
vibe13 wants to merge 3 commits intoproject-ncl:v3.4.xfrom
vibe13:NCL-9535
Closed

[NCL-9535]: Slsa Provenance has invalid digest key (commit); add a schema validator to verify provenance compliance#4455
vibe13 wants to merge 3 commits intoproject-ncl:v3.4.xfrom
vibe13:NCL-9535

Conversation

@vibe13
Copy link
Copy Markdown
Contributor

@vibe13 vibe13 commented Feb 4, 2026

No description provided.

…hema validator to verify provenance compliance
@github-actions
Copy link
Copy Markdown

github-actions bot commented Feb 4, 2026

REST API CHANGED

No differences. Specifications are equivalent

@vibe13 vibe13 requested a review from michalovjan February 4, 2026 13:48
Comment thread facade/src/main/java/org/jboss/pnc/facade/util/SlsaProvenanceUtils.java Outdated
Comment thread facade/src/main/java/org/jboss/pnc/facade/util/SlsaProvenanceUtils.java Outdated
@michalovjan
Copy link
Copy Markdown
Contributor

retest this please

Copy link
Copy Markdown
Contributor

@michalovjan michalovjan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Didn't you also want to change the PROVENANCE_V1_SCM_COMMIT value from commit to gitCommit?

@michalovjan michalovjan closed this Feb 5, 2026
@michalovjan michalovjan reopened this Feb 5, 2026
@vibe13
Copy link
Copy Markdown
Contributor Author

vibe13 commented Feb 5, 2026

Didn't you also want to change the PROVENANCE_V1_SCM_COMMIT value from commit to gitCommit?

Yes, this is done in https://github.com/project-ncl/pnc/pull/4455/changes#diff-9c5fb3d1b7e3b0f54bc5c4182965c4fe1f9023d449017cece3005d3f90e8e4d8R112 and project-ncl/pnc-api@312d518

@michalovjan
Copy link
Copy Markdown
Contributor

Didn't you also want to change the PROVENANCE_V1_SCM_COMMIT value from commit to gitCommit?

Yes, this is done in https://github.com/project-ncl/pnc/pull/4455/changes#diff-9c5fb3d1b7e3b0f54bc5c4182965c4fe1f9023d449017cece3005d3f90e8e4d8R112 and project-ncl/pnc-api@312d518

Ah, missed that.

@vibe13
Copy link
Copy Markdown
Contributor Author

vibe13 commented Feb 5, 2026

Closing this, and porting fixes in #4456

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants