Skip to content

Store information about the provenance asset #819

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
behnazh-w opened this issue Aug 12, 2024 · 0 comments · May be fixed by #975
Open

Store information about the provenance asset #819

behnazh-w opened this issue Aug 12, 2024 · 0 comments · May be fixed by #975
Assignees
@benmss
Labels
slsa-provenance The issues related to SLSA provenances

Comments

@behnazh-w
Copy link
Member

With this PR, we have more accurate provenance discovery and support various places that provenances may get stored, including GitHub release assets. With this refactoring, the information about the the provenance, such as the name and asset URL is not retained, however.

We need to refactor the AnalyzeContext.dynamic_data["provenance"] to retain the information related to the provenance.
@behnazh-w behnazh-w added the slsa-provenance The issues related to SLSA provenances label Aug 12, 2024
@behnazh-w behnazh-w mentioned this issue Aug 12, 2024
Merged
@behnazh-w behnazh-w mentioned this issue Aug 19, 2024
Merged
@benmss benmss linked a pull request Feb 3, 2025 that will close this issue
Open
@benmss benmss linked a pull request Apr 30, 2025 that will close this issue
chore: store provenance asset info #975
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@benmss benmss

Labels
slsa-provenance The issues related to SLSA provenances
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore: store provenance asset info oracle/macaron
2 participants
@benmss @behnazh-w