Skip to content

GCP provenance - allow GCP project to be checked when zone and instance ID are unknown - #110

Draft
ameba23 wants to merge 5 commits into
peg/gcp-provenance-mr-owner-checkfrom
peg/gcp-provenance-pass-instance-id
Draft

ameba23 wants to merge 5 commits into
peg/gcp-provenance-mr-owner-checkfrom
peg/gcp-provenance-pass-instance-id

Conversation

@ameba23

@ameba23 ameba23 commented Oct 28, 2026

Copy link
Copy Markdown
Collaborator

This adds Google cloud PZID data as attestation evidence metadata.

This allows verifiers to restrict to specific GCP project(s) without knowing instance ID or zone.

WIP

ameba23 and others added 2 commits October 28, 2026 08:15
Public re-export traits needed to serialize/deserliaze attestation evidence using SCALE
@ameba23
ameba23 added this pull request to stack #111 October 28, 2026 09:59
@ameba23
ameba23 marked this pull request as draft October 28, 2026 10:00
@ameba23
ameba23 force-pushed the peg/gcp-provenance-pass-instance-id branch from 22262b1 to d51d4bc Compare October 28, 2026 10:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant