DCAP attestation: Add GCP provenence check to establish whether the associated PPID is endorsed by Google - #54

Open

ameba23 wants to merge 24 commits into

mainfrom

peg/gcp-provenance

Commits on Jun 11, 2026

Basic GCP provenance check
ameba23
committed
5d3c8ea

Commits on Jun 12, 2026

Dont parse quote twice
ameba23
committed
7e12021
Cache known GCP PPIDs
ameba23
committed
a4ebbb2
Measurement checks should check attestation type
ameba23
committed
9a4ea50
Fix azure tests, and avoid unneeded cloning
ameba23
committed
cfcce9b

Commits on Jun 23, 2026

Merge main
ameba23
committed
8da4cc6
Add test for PPID extraction from current DCAP fixture
ameba23
committed
5abd134
Add expiry timestamp for cached PPIDs
ameba23
committed
f2f479f
Improve timestamp check
ameba23
committed
157bf2c

Commits on Jul 6, 2026

Commits on Aug 17, 2026

Fixes to match Go implementation
ameba23
committed
8817287
Merge main
ameba23
committed
6c65d17
Verifier should return quote to avoid parsing it twice
ameba23
committed
34346c6
MeasurementRecord must track attestation type for GCP provenance check to be enforced
ameba23
committed
b4b0aa3
Restore GCP firmware test
ameba23
committed
7520e01
Rm comments changes to firmware checker
ameba23
committed
2edc2cf
Fmt
ameba23
committed
345c695
Simplify mutex check for stale entries
ameba23
committed
59810e2
Dcap-tdx policy should allow GCP-TDX
ameba23
committed
5f96c7f
Fmt
ameba23
committed
2bc7dfb

Commits on Aug 18, 2026

Fixes for supporting differnt async runtime or no async runtime
ameba23
committed
f1e2051