Google Git
Sign in
chromium / infra / luci / luci-go / 94c834848e9d6995fcf9b963e909dd50433c2fce
commit94c834848e9d6995fcf9b963e909dd50433c2fce[log] [tgz]
authorChenlin Fan <fancl@chromium.org>Fri Aug 29 01:15:43 2025
committerLUCI CQ <infra-scoped@luci-project-accounts.iam.gserviceaccount.com>Fri Aug 29 01:15:43 2025
treec8a3cf7d6088129d8b6a98e60977db24478af347
parent6e3839d3a4d28d06f241a414ff66357d92775fef [diff]
cipd: call VerifySoftwareArtifact when attestation bundle attached

When attestation bundle attached to the package as metadata, call
VerifySoftwareArtifact and add returned VSA to the metadata for record.

This is part of the effort to comply with M2 Exit Gate.

Bug:435075956
Change-Id: Ie4190d453c6a794ea6253c000e22398b033d00c4
Reviewed-on: https://chromium-review.googlesource.com/c/infra/luci/luci-go/+/6810045
Auto-Submit: Chenlin Fan <fancl@chromium.org>
Commit-Queue: Vadim Shtayura <vadimsh@chromium.org>
Reviewed-by: Vadim Shtayura <vadimsh@chromium.org>
11 files changed
tree: c8a3cf7d6088129d8b6a98e60977db24478af347
  1. analysis/
  2. appengine/
  3. auth/
  4. auth_service/
  5. bisection/
  6. build/
  7. buildbucket/
  8. casviewer/
  9. cipd/
  10. cipkg/
  11. client/
  12. common/
  13. config/
  14. config_service/
  15. cv/
  16. deploy/
  17. examples/
  18. gae/
  19. gce/
  20. grpc/
  21. hardcoded/
  22. led/
  23. logdog/
  24. luci_notify/
  25. lucicfg/
  26. lucictx/
  27. luciexe/
  28. mailer/
  29. milo/
  30. mmutex/
  31. provenance/
  32. recipes_py/
  33. resultai/
  34. resultdb/
  35. scheduler/
  36. scripts/
  37. server/
  38. source_index/
  39. standalone/
  40. starlark/
  41. swarming/
  42. teams/
  43. third_party/
  44. tokenserver/
  45. tools/
  46. tree_status/
  47. vpython/
  48. web/
  49. .gitallowed
  50. .gitignore
  51. .go-lintable
  52. AUTHORS
  53. codereview.settings
  54. CONTRIBUTING.md
  55. CONTRIBUTORS
  56. GEMINI.md
  57. go.mod
  58. go.sum
  59. LICENSE
  60. lucichecker.py
  61. OWNERS
  62. PRESUBMIT.py
  63. README.md
  64. SECURITY_OWNERS
  65. setup_env.sh
  66. staticcheck.conf
  67. tools.go
  68. WATCHLISTS
README.md

luci-go: LUCI services and tools in Go

GoReference

Installing

LUCI Go code is meant to be worked on from an Chromium infra.git checkout, which enforces packages versions and Go toolchain version. First get fetch via depot_tools.git then run:

fetch infra
cd infra/go
eval `./env.py`
cd src/go.chromium.org/luci

It is now possible to directly install tools with go install:

go install go.chromium.org/luci/auth/client/cmd/...@latest
go install go.chromium.org/luci/buildbucket/cmd/...@latest
go install go.chromium.org/luci/cipd/client/cmd/...@latest
go install go.chromium.org/luci/client/cmd/...@latest
go install go.chromium.org/luci/cv/cmd/...@latest
go install go.chromium.org/luci/gce/cmd/...@latest
go install go.chromium.org/luci/grpc/cmd/...@latest
go install go.chromium.org/luci/logdog/client/cmd/...@latest
go install go.chromium.org/luci/luci_notify/cmd/...@latest
go install go.chromium.org/luci/lucicfg/cmd/...@latest
go install go.chromium.org/luci/luciexe/legacy/cmd/...@latest
go install go.chromium.org/luci/mailer/cmd/...@latest
go install go.chromium.org/luci/mmutex/cmd/...@latest
go install go.chromium.org/luci/resultdb/cmd/...@latest
go install go.chromium.org/luci/server/cmd/...@latest
go install go.chromium.org/luci/swarming/cmd/...@latest
go install go.chromium.org/luci/tokenserver/cmd/...@latest
go install go.chromium.org/luci/tools/cmd/...@latest

Contributing

Contributing uses the same flow as Chromium contributions.