feat(targets): require plugin artifact attestations (#3383)

2026-08-27 15:37:02 +00:00 · 2026-06-12 14:13:41 +08:00
parent 8df38ea12c
commit 249a0b56ea
4 changed files with 134 additions and 7 deletions
@@ -55,6 +55,8 @@ pub fn example_external_webhook_plugin() -> ExampleInstallableTargetPlugin {
                target_triple: "x86_64-unknown-linux-gnu",
                download_uri: "https://plugins.example.test/webhook-sidecar.tar.zst",
                digest_sha256: "0123456789abcdef0123456789abcdef",
+                signature_uri: "https://plugins.example.test/webhook-sidecar.tar.zst.sig",
+                provenance_uri: "https://plugins.example.test/webhook-sidecar.tar.zst.intoto.jsonl",
                size_bytes: 8192,
            }],
        },