test azure

transmute-industries · Aug 16, 2024 · ebf2404 · ebf2404
1 parent fe0feef
commit ebf2404
Show file tree

Hide file tree

Showing 7 changed files with 4,837 additions and 2,724 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -123,6 +123,68 @@ jobs:
         with:
           transmute: |
             scitt verify-receipt-hash ./tests/fixtures/public.notary.key.cbor ./tests/fixtures/message.hash-envelope-with-receipt.cbor 3073d614f853aaec9a1146872c7bab75495ee678c8864ed3562f8787555c1e22
+  scitt-azure:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Sign Statement
+        id: akv_sign
+        uses: ./
+        with:
+          azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
+          azure-kid: ${{ secrets.AZURE_KEY_ID }}
+          transmute: |
+            scitt issue-statement ./tests/fixtures/message.json \
+              --azure-keyvault \
+              --alg ES256 \
+              --iss https://software.vendor.example \
+              --sub https://software.vendor.example/product/123 \
+              --content-type application/spdx+json \
+              --location https://software.vendor.example/storage/456 \
+              --output ./tests/fixtures/message.json.akv.cbor \
+      - name: Export Public Key
+        id: akv_export
+        uses: ./
+        with:
+          azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
+          azure-kid: ${{ secrets.AZURE_KEY_ID }}
+          transmute: |
+            scitt export-remote-public-key \
+              --azure-keyvault \
+              --output ./tests/fixtures/public.akv.key.cbor
+      - name: Issue Receipt
+        id: akv_receipt
+        uses: ./
+        with:
+          azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
+          azure-kid: ${{ secrets.AZURE_KEY_ID }}
+          transmute: |
+            scitt issue-receipt \
+              ./tests/fixtures/message.json.akv.cbor \
+              --azure-keyvault \
+              --log ./tests/fixtures/trans.json \
+              --output ./tests/fixtures/message.akv.receipt.cbor
+
+      - name: Verify Receipt
+        id: akv_receipt_verify
+        uses: ./
+        with:
+          azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
+          azure-kid: ${{ secrets.AZURE_KEY_ID }}
+          transmute: |
+            scitt verify-receipt-hash \
+              ./tests/fixtures/public.akv.key.cbor \
+              ./tests/fixtures/message.akv.receipt.cbor \
+              3073d614f853aaec9a1146872c7bab75495ee678c8864ed3562f8787555c1e22
+
   graph:
     runs-on: ubuntu-latest
     steps: