Skip to content

Commit

Permalink
Update source-uri. (#3009)
Browse files Browse the repository at this point in the history
The provenance generated by cloudbuild is now including https://git+.

Bug: flutter/flutter#133376
  • Loading branch information
godofredoc authored Aug 26, 2023
1 parent 58676a6 commit 36a179c
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions cloud_build/verify_provenance.sh
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
# legitimate, then the script will exit with a non-zero exit code.
PROVENANCE_PATH=$1
BUILDER_ID=https://cloudbuild.googleapis.com/[email protected]
SOURCE_URI=https://github.com/flutter/cocoon
SOURCE_URI=https://git+https://github.com/flutter/cocoon

# Download the jq binary in order to obtain the artifact registry url from the
# docker image provenance.
Expand Down Expand Up @@ -53,7 +53,7 @@ fi
echo "Verifying the provenance is valid and correct..."
echo "Checking for source-uri of git+$SOURCE_URI"
slsa-verifier verify-image $FULLY_QUALIFIED_DIGEST \
--source-uri git+$SOURCE_URI \
--source-uri $SOURCE_URI \
--builder-id=$BUILDER_ID \
--provenance-path $PROVENANCE_PATH

Expand Down

0 comments on commit 36a179c

Please sign in to comment.