Tonis Tiigi
|
5c3551beeb
|
policy: add GitHub attestation verification
Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.
Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
|
2026-02-20 08:56:40 -08:00 |
|