Skip to content

Commit

Permalink
Update attestaion ruletype name
Browse files Browse the repository at this point in the history
Signed-off-by: Adolfo García Veytia (Puerco) <[email protected]>
  • Loading branch information
puerco committed May 2, 2024
1 parent 3018f7c commit d542263
Showing 1 changed file with 12 additions and 5 deletions.
17 changes: 12 additions & 5 deletions rule-types/github/artifact_attestation_slsa.yaml
Original file line number Diff line number Diff line change
@@ -1,16 +1,18 @@
---
version: v1
type: rule-type
name: attestation_slsa_github
name: artifact_attestation_slsa
context:
provider: github
description: |
Verifies a provenance attestation with a GitHub build definition matches the
expected values.
Verifies a SLSA provenance attestation
guidance: |
Provenance attestation capture the build environment and parameters where a
Provenance attestations capture the build environment and parameters where a
software artifact was created. By controlling the build environment, developers
can make sure no malicious artifacts where injected into the build process.
can check the integity of the build environment and that no malicious code
was injected into the build process.
For more information visit https://slsa.dev
def:
# Defines the section of the pipeline the rule will appear in.
# This will affect the template used to render multiple parts
Expand Down Expand Up @@ -85,6 +87,11 @@ def:
default allow := false
default skip := false
# Defaults
workflow_ref := input.profile.workflow_ref
default workflow_ref := "refs/heads/main"
artifacts_github_provenance = {artifact |
some artifact in input.ingested
Expand Down

0 comments on commit d542263

Please sign in to comment.