Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add GITHUB_BASE_REF in env list for BYOB #2471

Merged
merged 2 commits into from
Jul 25, 2023

Conversation

laurentsimon
Copy link
Collaborator

This env variable is missing, yet necessary during verification when verifying the branch on tag triggers https://github.com/slsa-framework/slsa-verifier/blob/main/verifiers/internal/gha/slsaprovenance/common/common.go#L96-L99

Signed-off-by: laurentsimon <laurentsimon@google.com>
Signed-off-by: laurentsimon <laurentsimon@google.com>
@ianlewis ianlewis merged commit 389ab52 into slsa-framework:main Jul 25, 2023
74 checks passed
ianlewis pushed a commit that referenced this pull request Jul 26, 2023
#2471 added
the base_ref in verify-token but this value may be empty.

This PR allows the base_ref to be empty string.

Signed-off-by: laurentsimon <laurentsimon@google.com>
enteraga6 pushed a commit to enteraga6/slsa-github-generator that referenced this pull request Aug 8, 2023
This env variable is missing, yet necessary during verification when
verifying the branch on tag triggers
https://github.com/slsa-framework/slsa-verifier/blob/main/verifiers/internal/gha/slsaprovenance/common/common.go#L96-L99

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
Signed-off-by: Noah Elzner <elzner@google.com>
enteraga6 pushed a commit to enteraga6/slsa-github-generator that referenced this pull request Aug 8, 2023
slsa-framework#2471 added
the base_ref in verify-token but this value may be empty.

This PR allows the base_ref to be empty string.

Signed-off-by: laurentsimon <laurentsimon@google.com>
Signed-off-by: Noah Elzner <elzner@google.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants