From bf3755093c06b21a9d5f599748c19c942ce49f47 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ville=20Skytt=C3=A4?= <ville.skytta@iki.fi>
Date: Mon, 10 Feb 2025 23:15:35 -0100
Subject: [PATCH] feat(grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway):
 SLSA provenance (#31943)

* feat(grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway): SLSA provenance

* fix(grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway): support old versions

* style: add a code comment

---------

Co-authored-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>
---
 .../protoc-gen-grpc-gateway/pkg.yaml          |  2 +
 .../protoc-gen-grpc-gateway/registry.yaml     | 53 +++++++++++++------
 registry.yaml                                 | 53 +++++++++++++------
 3 files changed, 78 insertions(+), 30 deletions(-)

diff --git a/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/pkg.yaml b/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/pkg.yaml
index 7329a493846..d1fd3afd7d0 100644
--- a/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/pkg.yaml
+++ b/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/pkg.yaml
@@ -1,2 +1,4 @@
 packages:
   - name: grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway@v2.26.1
+  - name: grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway
+    version: v2.13.0
diff --git a/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/registry.yaml b/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/registry.yaml
index 2773bce1560..c47ec9089a8 100644
--- a/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/registry.yaml
+++ b/pkgs/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway/registry.yaml
@@ -5,18 +5,41 @@ packages:
     repo_owner: grpc-ecosystem
     repo_name: grpc-gateway
     description: Generate golang code to reverse proxy Protocol Buffer definitions to RESTful HTTP/1
-    asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
-    supported_envs:
-      - windows
-      - darwin
-      - linux/amd64
-    rosetta2: true
-    format: raw
-    replacements:
-      amd64: x86_64
-    files:
-      - name: protoc-gen-grpc-gateway
-    checksum:
-      type: github_release
-      asset: grpc-gateway_{{trimV .Version}}_checksums.txt
-      algorithm: sha256
+    version_constraint: "false"
+    version_overrides:
+      # v2.14.0 SLSA provenance https://github.com/aquaproj/aqua-registry/pull/31943#issuecomment-2649535381
+      - version_constraint: semver("<= 2.13.0")
+        asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
+        supported_envs:
+          - windows
+          - darwin
+          - linux/amd64
+        rosetta2: true
+        format: raw
+        replacements:
+          amd64: x86_64
+        files:
+          - name: protoc-gen-grpc-gateway
+        checksum:
+          type: github_release
+          asset: grpc-gateway_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+      - version_constraint: "true"
+        asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
+        supported_envs:
+          - windows
+          - darwin
+          - linux/amd64
+        rosetta2: true
+        format: raw
+        replacements:
+          amd64: x86_64
+        files:
+          - name: protoc-gen-grpc-gateway
+        checksum:
+          type: github_release
+          asset: grpc-gateway_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+        slsa_provenance:
+          type: github_release
+          asset: multiple.intoto.jsonl
diff --git a/registry.yaml b/registry.yaml
index d716c7a9a5f..7be234fded0 100644
--- a/registry.yaml
+++ b/registry.yaml
@@ -27721,21 +27721,44 @@ packages:
     repo_owner: grpc-ecosystem
     repo_name: grpc-gateway
     description: Generate golang code to reverse proxy Protocol Buffer definitions to RESTful HTTP/1
-    asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
-    supported_envs:
-      - windows
-      - darwin
-      - linux/amd64
-    rosetta2: true
-    format: raw
-    replacements:
-      amd64: x86_64
-    files:
-      - name: protoc-gen-grpc-gateway
-    checksum:
-      type: github_release
-      asset: grpc-gateway_{{trimV .Version}}_checksums.txt
-      algorithm: sha256
+    version_constraint: "false"
+    version_overrides:
+      # v2.14.0 SLSA provenance https://github.com/aquaproj/aqua-registry/pull/31943#issuecomment-2649535381
+      - version_constraint: semver("<= 2.13.0")
+        asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
+        supported_envs:
+          - windows
+          - darwin
+          - linux/amd64
+        rosetta2: true
+        format: raw
+        replacements:
+          amd64: x86_64
+        files:
+          - name: protoc-gen-grpc-gateway
+        checksum:
+          type: github_release
+          asset: grpc-gateway_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+      - version_constraint: "true"
+        asset: protoc-gen-grpc-gateway-{{.Version}}-{{.OS}}-{{.Arch}}
+        supported_envs:
+          - windows
+          - darwin
+          - linux/amd64
+        rosetta2: true
+        format: raw
+        replacements:
+          amd64: x86_64
+        files:
+          - name: protoc-gen-grpc-gateway
+        checksum:
+          type: github_release
+          asset: grpc-gateway_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+        slsa_provenance:
+          type: github_release
+          asset: multiple.intoto.jsonl
   - name: grpc-ecosystem/grpc-gateway/protoc-gen-openapiv2
     type: github_release
     repo_owner: grpc-ecosystem