include author verification on attestation

Signed-off-by: Javier Rodriguez <javier@chainloop.dev>

Author: javirln

pkg/attestation/renderer/chainloop/chainloop.go

@@ -334,11 +334,12 @@ func (p *ProvenancePredicateCommon) GetMetadata() *Metadata {
 
 const (
 	// Subject names
-	SubjectGitHead                  = "git.head"
-	subjectGitAnnotationAuthorEmail = "author.email"
-	subjectGitAnnotationAuthorName  = "author.name"
-	subjectGitAnnotationWhen        = "date"
-	subjectGitAnnotationMessage     = "message"
-	subjectGitAnnotationRemotes     = "remotes"
-	subjectGitAnnotationSignature   = "signature"
+	SubjectGitHead                     = "git.head"
+	subjectGitAnnotationAuthorEmail    = "author.email"
+	subjectGitAnnotationAuthorName     = "author.name"
+	subjectGitAnnotationAuthorVerified = "author.verified"
+	subjectGitAnnotationWhen           = "date"
+	subjectGitAnnotationMessage        = "message"
+	subjectGitAnnotationRemotes        = "remotes"
+	subjectGitAnnotationSignature      = "signature"
 )

pkg/attestation/renderer/chainloop/v02.go

@@ -144,6 +144,12 @@ func commitAnnotations(c *v1.Commit) (*structpb.Struct, error) {
 		annotationsRaw[subjectGitAnnotationSignature] = c.GetSignature()
 	}
 
+	// add author verification only if exists
+	if c.GetPlatformVerification() != nil {
+		pv := c.GetPlatformVerification()
+		annotationsRaw[subjectGitAnnotationAuthorVerified] = pv.GetStatus()
+	}
+
 	if remotes := c.GetRemotes(); len(remotes) > 0 {
 		remotesRaw := []interface{}{}
 		for _, r := range remotes {