feat(grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway): SLSA prove…

…nance (#31943) * feat(grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway): SLSA provenance * fix(grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway): support old versions * style: add a code comment --------- Co-authored-by: Shunsuke Suzuki <[email protected]>
aquaproj · Feb 11, 2025 · bf37550 · bf37550
1 parent 094c429
commit bf37550
Show file tree

Hide file tree

Showing 3 changed files with 78 additions and 30 deletions.
diff --git a/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/pkg.yaml b/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/pkg.yaml
@@ -1,2 +1,4 @@
 packages:
   - name: grpc-ecosystem/grpc-gateway/[email protected]
+  - name: grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway
+    version: v2.13.0
diff --git a/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/registry.yaml b/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/registry.yaml
@@ -5,18 +5,41 @@ packages:
     repo_owner: grpc-ecosystem
     repo_name: grpc-gateway
     description: Generate golang code to reverse proxy Protocol Buffer definitions to RESTful HTTP/1
-    asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
-    supported_envs:
-      - windows
-      - darwin
-      - linux/amd64
-    rosetta2: true
-    format: raw
-    replacements:
-      amd64: x86_64
-    files:
-      - name: protoc-gen-grpc-gateway
-    checksum:
-      type: github_release
-      asset: grpc-gateway_{{trimV .Version}}_checksums.txt
-      algorithm: sha256
+    version_constraint: "false"
+    version_overrides:
+      # v2.14.0 SLSA provenance https://github.com/aquaproj/aqua-registry/pull/31943#issuecomment-2649535381
+      - version_constraint: semver("<= 2.13.0")
+        asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
+        supported_envs:
+          - windows
+          - darwin
+          - linux/amd64
+        rosetta2: true
+        format: raw
+        replacements:
+          amd64: x86_64
+        files:
+          - name: protoc-gen-grpc-gateway
+        checksum:
+          type: github_release
+          asset: grpc-gateway_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+      - version_constraint: "true"
+        asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
+        supported_envs:
+          - windows
+          - darwin
+          - linux/amd64
+        rosetta2: true
+        format: raw
+        replacements:
+          amd64: x86_64
+        files:
+          - name: protoc-gen-grpc-gateway
+        checksum:
+          type: github_release
+          asset: grpc-gateway_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+        slsa_provenance:
+          type: github_release
+          asset: multiple.intoto.jsonl
diff --git a/registry.yaml b/registry.yaml