Add KubeConCNCNA23 demo verification flow setup

Signed-off-by: Marcela Melara <[email protected]>

README.md

@@ -44,7 +44,7 @@ illustrative purposes, and should not be used in production.
 
 [in-toto Attestation Framework]: https://github.com/in-toto/attestation/tree/main/spec
 [intro doc]: docs/intro.md
-[KubeCon + CloudNativeCon NA '23]: docs/kccncna2023.md
+[KubeCon + CloudNativeCon NA '23]: kccncna2023-demo/README.md
 [usage doc]: docs/usage.md
 [SCAI specification]: https://github.com/in-toto/attestation/blob/main/spec/predicates/scai.md
 [SCAI spec doc]: https://arxiv.org/pdf/2210.05813.pdf

kccncna2023-demo/attestations/build.e060fc8d.json

@@ -0,0 +1 @@
+{"payloadType":"application/vnd.in-toto+json","payload":"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","signatures":[{"keyid":"","sig":"MEQCIByuHkfkBkK5VwGWxNXi6mDZ8uQINXYdchAqOhxJVu8rAiAZDNbKKWv5k73pINPluH/OYXGVyHJhcJ84GJQfLquK2Q==","cert":"-----BEGIN CERTIFICATE-----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\n5O0s2Z1BwoAsyHTJ\n-----END CERTIFICATE-----\n"}]}

kccncna2023-demo/attestations/evidence-collection.keyid.json

@@ -0,0 +1 @@
+{"payloadType":"application/vnd.in-toto","payload":"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","signatures":[{"keyid":"","sig":"MEUCIQC6gF+QEE0Df7z520y4LLWC7xjNaYMIJL40h4sl/4otqgIgHfwfQsnqsWkM+rQqOV3PZXAt9NZFdUIbmILJqC0t9TM="}]}

kccncna2023-demo/attestations/evidence-collection.scai.json

@@ -0,0 +1,50 @@
+{
+    "_type":  "https://in-toto.io/Statement/v1",
+    "subject":  [
+        {
+            "name":  "pdo_client_wawaka",
+            "uri":  "https://github.com/marcelamelara/private-data-objects/commit/4e07afbb37e24d5284c2163f3603d374a0926890",
+            "digest":  {
+                "sha256":  "954f60c5de3f3b9c21b9118e25bec793c4de916aa32af140acc5501db189db7b"
+            }
+        }
+    ],
+    "predicateType":  "https://in-toto.io/attestation/scai/attribute-report/v0.2",
+    "predicate":  {
+        "attributes":  [
+            {
+                "attribute":  "HasSBOM",
+                "evidence":  {
+                    "digest":  {
+                        "sha256":  "91fb7ee88077520df4fb256c5d029ff2a18eff7674fa5e5404d2fdf4dfd4132d"
+                    },
+                    "downloadLocation":  "https://github.com/marcelamelara/private-data-objects/actions/runs/6740185189",
+                    "mediaType":  "application/json",
+                    "name":  "pdo_client_wawaka.spdx.json"
+                }
+            },
+            {
+                "attribute":  "HasSLSA",
+                "evidence":  {
+                    "digest":  {
+                        "sha256":  "a9c0eab1ba043e5a52903adc33ec0241de2228fdee8d26fd12a5025df8a5f3b6"
+                    },
+                    "downloadLocation":  "https://github.com/marcelamelara/private-data-objects/actions/runs/6740185189",
+                    "mediaType":  "application/vnd.in-toto.provenance+dsse",
+                    "name":  "pdo_client_wawaka.slsa.intoto.jsonl"
+                }
+            },
+            {
+                "attribute":  "NonHermeticBuild",
+                "evidence":  {
+                    "digest":  {
+                        "sha256":  "e91566a34ef171ea6204d8776b2349d5a96e10833cb6905bb8bef7469a5a3348"
+                    },
+                    "downloadLocation":  "https://github.com/marcelamelara/private-data-objects/actions/runs/6740185189",
+                    "mediaType":  "text/plain",
+                    "name":  "strace.log"
+                }
+            }
+        ]
+    }
+}