Merge pull request #1667 from st3penta/EC-1410

Add SLSA v1 provenance to allowed predicate types

Author: st3penta

policy/lib/rule_data.rego

@@ -11,7 +11,7 @@ rule_data_defaults := {
 	"known_attestation_types": ["https://in-toto.io/Statement/v0.1"],
 	#
 	# Used in release/slsa_provenance_available
-	"allowed_predicate_types": ["https://slsa.dev/provenance/v0.2"],
+	"allowed_predicate_types": ["https://slsa.dev/provenance/v0.2", "https://slsa.dev/provenance/v1"],
 	#
 	# Used in release/slsa_build_build_service
 	"allowed_builder_ids": ["https://tekton.dev/chains/v2"],

policy/release/slsa_provenance_available/slsa_provenance_available_test.rego

@@ -14,7 +14,7 @@ test_att_predicate_type if {
 	attestations := _mock_attestations(["spam"])
 	expected_deny := {{
 		"code": "slsa_provenance_available.attestation_predicate_type_accepted",
-		"msg": "Attestation predicate type \"spam\" is not an expected type (https://slsa.dev/provenance/v0.2)",
+		"msg": "Attestation predicate type \"spam\" is not an expected type (https://slsa.dev/provenance/v0.2, https://slsa.dev/provenance/v1)", # regal ignore:line-length
 	}}
 	lib.assert_equal_results(slsa_provenance_available.deny, expected_deny) with input.attestations as attestations
 }