From 564b8ff1ebf454d24732ad132140bab31c353478 Mon Sep 17 00:00:00 2001 From: telleroutlook Date: Tue, 28 Jul 2026 10:25:42 +0800 Subject: [PATCH] Fix #140: add artifact-attestation fixture scaffolding Create tests/fixtures/valid/artifact-attestation/basic.json and tests/fixtures/invalid/artifact-attestation/missing-required-field.json so verify-first can proceed to PROCEED when schema + index entry land. --- .../artifact-attestation/missing-required-field.json | 3 +++ tests/fixtures/valid/artifact-attestation/basic.json | 7 +++++++ 2 files changed, 10 insertions(+) create mode 100644 tests/fixtures/invalid/artifact-attestation/missing-required-field.json create mode 100644 tests/fixtures/valid/artifact-attestation/basic.json diff --git a/tests/fixtures/invalid/artifact-attestation/missing-required-field.json b/tests/fixtures/invalid/artifact-attestation/missing-required-field.json new file mode 100644 index 0000000..149e014 --- /dev/null +++ b/tests/fixtures/invalid/artifact-attestation/missing-required-field.json @@ -0,0 +1,3 @@ +{ + "artifact_uri": "pkg:npm/example@1.0.0" +} diff --git a/tests/fixtures/valid/artifact-attestation/basic.json b/tests/fixtures/valid/artifact-attestation/basic.json new file mode 100644 index 0000000..a318b3e --- /dev/null +++ b/tests/fixtures/valid/artifact-attestation/basic.json @@ -0,0 +1,7 @@ +{ + "artifact_uri": "pkg:npm/example@1.0.0", + "digest": "sha256:abc123", + "produced_by_run_id": "run-123", + "tool_name": "builder", + "signature": "sig123" +}