tree 05eb6d3b30a0cf62be7d3c36f1198a1dd10bcc22
parent f2ff3600e29f188a4761841df2f2aca7ddcc5d7b
author Drew Roen <102626803+drewroengoogle@users.noreply.github.com> 1676566507 -0600
committer GitHub <noreply@github.com> 1676566507 +0000
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJj7l/rCRBK7hj4Ov3rIwAAM8wIAA43tUjjh+1+OzX2cAG0Ps2L
 +HwT7J9OiWvXugt12wDHWsIACNaP8Jhm6L/I0n1MG2M5URX6LswW11jiYLS6uu2p
 amg8z7zsde62QwdVBaSHeZNlKYs4Avj7+8uHs6MuHBG3eVqGLNmq1XqrQKojmzo0
 DPxlR/8TBUiputwelJdGp1PFKoaCxZvfTkBSop1UKvDr+Mm3TOgFrpXoTw8PW0zm
 7T9PzyKqNe+7Occ4H5WLjaunxzktWFaueEC35jOxoNPm8Wz0KeE5Fc3QP2+J9c9W
 daCVRkKNKMxn4ktRUZc4wZi7wq0Mfq7gh2ZkfT+eb+7gLXMXSndOHNnW6FbUmHE=
 =QUcm
 -----END PGP SIGNATURE-----
 

Verify cocoon and autosubmit provenance (#2437)

* Add verify-provenance steps to cloudbuild for cocoon and autosubmit

* Update jq install to use apt, add hash to slsa-verifier url

* Update echo to be correct

* Additional fixes from PR review - Adding comments and fixing script destination

* Additional comments - Update verify-provenance script to increase clarity, simplify cloud build files

* Add shell script to allowlist