Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feat]: Define attestor types that leverage the intelligence gathered by other attestors #422

Open
ChaosInTheCRD opened this issue Mar 25, 2024 · 0 comments

Comments

@ChaosInTheCRD
Copy link
Collaborator

Describe the solution you'd like:

Currently we have a variety of attestor types:

  • PreMaterial
  • Material
  • Execute
  • Product
  • PostProduct

Each attestor type runs at a different point of a witness run invocation, and therefore allows a user to execute the attestor at the appropriate place given its function.

There is an emerging need for some construct in the codebase that represents attestation generation that depends on the metadata generated by other attestors (e.g., Link attestor and SLSA Provenance). Naturally, these attestors need to run at the end, or at least after the attestors that they depend on.

One suggestion that I think I have heard from others is the idea that the existing attestor types are redefined as "collectors" and the attestor types I am referring to in this issue are given their own construct. They can then use the collectors to build up their attestations.

User value:

Witness being able to generate attestations for predicates defined elsewhere in the community (e.g., SLSA Provenance) by simply leveraging the attestors that already exist.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant