Skip to content

docs: add attestation documentation and E2E tests#99

Merged
github-actions[bot] merged 1 commit into
integrationfrom
docs/attestation-docs-fresh
Jan 18, 2026
Merged

docs: add attestation documentation and E2E tests#99
github-actions[bot] merged 1 commit into
integrationfrom
docs/attestation-docs-fresh

Conversation

@aRustyDev
Copy link
Copy Markdown
Owner

@aRustyDev aRustyDev commented Jan 18, 2026

Summary

Add comprehensive attestation and provenance documentation with E2E tests.

Documentation Added

docs/src/attestation/

File Purpose
index.md Overview of attestations, pipeline flow, security model
verification.md Verification commands for GHCR, GitHub Releases, Helm repo
lineage.md Complete provenance chain tracing with scripts
limitations.md What attestations don't prove, trust boundaries

Key Topics

  • Verification methods by distribution channel
  • Confidence level tables for verification depth
  • Full lineage tracing from release to contributor PR
  • Security model with clear trust boundaries
  • Limitations and "what it isn't"

E2E Tests Added

Test Purpose
E2E-5 Missing attestation map handling
E2E-6 K8s test failure blocks release
E2E-7 Lint failure blocks release
E2E-8 Version bump failure handling
E2E-9 Attestation verification failure detection
E2E-10 Full lineage trace verification

Test plan

  • Documentation renders correctly
  • All markdown links are valid
  • SUMMARY.md updated

🤖 Generated with Claude Code

Add comprehensive attestation and provenance documentation:
- docs/src/attestation/index.md: Overview and concepts
- docs/src/attestation/verification.md: Verification methods by channel
- docs/src/attestation/lineage.md: Complete provenance chain tracing
- docs/src/attestation/limitations.md: What attestations don't prove

Add E2E tests for attestation validation in test plan:
- E2E-5 through E2E-10 covering attestation failure scenarios

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@github-actions github-actions Bot merged commit c0b1e5a into integration Jan 18, 2026
14 checks passed
@github-actions github-actions Bot deleted the docs/attestation-docs-fresh branch January 18, 2026 22:35
aRustyDev added a commit that referenced this pull request Jan 18, 2026
Add comprehensive attestation and provenance documentation:
- docs/src/attestation/index.md: Overview and concepts
- docs/src/attestation/verification.md: Verification methods by channel
- docs/src/attestation/lineage.md: Complete provenance chain tracing
- docs/src/attestation/limitations.md: What attestations don't prove

Add E2E tests for attestation validation in test plan:
- E2E-5 through E2E-10 covering attestation failure scenarios

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
aRustyDev added a commit that referenced this pull request Jan 18, 2026
docs: add attestation documentation and E2E tests

Add comprehensive attestation and provenance documentation:
- docs/src/attestation/index.md: Overview and concepts
- docs/src/attestation/verification.md: Verification methods by channel
- docs/src/attestation/lineage.md: Complete provenance chain tracing
- docs/src/attestation/limitations.md: What attestations don't prove

Add E2E tests for attestation validation in test plan.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant