Skip to content

AttestedVerifier should return matched ExpectedMeasurements on successful verification - #79

Merged
ameba23 merged 6 commits into
mainfrom
peg/verifier-returns-expected-measurements
Sep 3, 2026
Merged

AttestedVerifier should return matched ExpectedMeasurements on successful verification#79
ameba23 merged 6 commits into
mainfrom
peg/verifier-returns-expected-measurements

Conversation

@ameba23

@ameba23 ameba23 commented Aug 12, 2026

Copy link
Copy Markdown
Collaborator

This is needed for Buildernet in order to be able to put the matched portable image hashes in HTTP headers.

Rather than returning the actual observed measurements on successful attestation verification, we return which of our measurement policies was successfully matched. This means in the case of image hashes, they are returned.

This also adds helpers for converting ExpectedMeasurements to and from JSON header values.

@alexhulbert alexhulbert left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good to me!

@ameba23
ameba23 force-pushed the peg/verifier-returns-expected-measurements branch from f8ad581 to 58a7980 Compare September 2, 2026 08:47
Base automatically changed from peg/dynamic-measurement-policies to main September 2, 2026 09:18
@ameba23
ameba23 force-pushed the peg/verifier-returns-expected-measurements branch from 58a7980 to 8b7b52c Compare September 2, 2026 09:18
@ameba23
ameba23 merged commit 6cfa7bd into main Sep 3, 2026
4 checks passed
@ameba23
ameba23 deleted the peg/verifier-returns-expected-measurements branch September 3, 2026 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants