Merge pull request #14 from asgrim/specify-predicate-type

asgrim · web-flow · commit fa81efb3f6f8 · 2025-11-27T15:31:24.000Z
Specify `predicate_type` when fetching attestation
diff --git a/src/Verification/VerifyAttestationWithOpenSsl.php b/src/Verification/VerifyAttestationWithOpenSsl.php
@@ -322,7 +322,7 @@ private function assertDigestFromAttestationMatchesActual(FilenameWithChecksum $
     private function downloadAttestations(FilenameWithChecksum $file, string $owner): array
     {
         $attestationUrl = sprintf(
-            '%s/orgs/%s/attestations/sha256:%s',
+            '%s/orgs/%s/attestations/sha256:%s?predicate_type=provenance',
             $this->githubApiBaseUrl,
             $owner,
             $file->checksum(),

Original file line number	Diff line number	Diff line change
`@@ -322,7 +322,7 @@ private function assertDigestFromAttestationMatchesActual(FilenameWithChecksum $`
`322`	`322`	`private function downloadAttestations(FilenameWithChecksum $file, string $owner): array`
`323`	`323`	`{`
`324`	`324`	`$attestationUrl = sprintf(`
`325`		`- '%s/orgs/%s/attestations/sha256:%s',`
	`325`	`+ '%s/orgs/%s/attestations/sha256:%s?predicate_type=provenance',`
`326`	`326`	`$this->githubApiBaseUrl,`
`327`	`327`	`$owner,`
`328`	`328`	`$file->checksum(),`