()
| 165 | } |
| 166 | |
| 167 | func getPolicyBuilder() (*verify.PolicyBuilder, error) { |
| 168 | // Set up the identity policy |
| 169 | identityPolicies, err := getIdentityPolicies() |
| 170 | if err != nil { |
| 171 | return nil, err |
| 172 | } |
| 173 | |
| 174 | // Set up the artifact policy |
| 175 | artifactDigestBytes, err := hex.DecodeString(*artifactDigest) |
| 176 | if err != nil { |
| 177 | return nil, err |
| 178 | } |
| 179 | artifactPolicy := verify.WithArtifactDigest(*artifactDigestAlgorithm, artifactDigestBytes) |
| 180 | |
| 181 | pb := verify.NewPolicy(artifactPolicy, identityPolicies...) |
| 182 | return &pb, nil |
| 183 | } |
| 184 | |
| 185 | func runVerification(sev *verify.Verifier, pb *verify.PolicyBuilder, b *bundle.Bundle) error { |
| 186 | res, err := sev.Verify(b, *pb) |
no test coverage detected
searching dependent graphs…