Enhance scripts and documentation for template completeness checks

- Add 'set -e' to 1.sh and 2.sh for better error handling.
- Update README.md to clarify the template completeness check section.
- Refine jq query in check-template-complete.sh to correctly filter nested attestation statuses.

Author: sofusalbertsen

template-complete/1.sh

@@ -1,5 +1,5 @@
 #!/bin/bash
-
+set -e
 # Get the current git commit SHA
 GIT_SHA=$(git rev-parse HEAD)
 ARTIFACT=artifact.txt

template-complete/2.sh

@@ -1,5 +1,5 @@
 #!/bin/bash
-
+set -e
 # Get the current git commit SHA
 GIT_SHA=$(git rev-parse HEAD)
 ARTIFACT=artifact.txt

template-complete/README.md

@@ -14,7 +14,7 @@ We have 3 examples, two of which are interesting:
 * **Inconclussive, because of missing attestations:** Our template complete will fail, as there are one or more attestations not made. **This is scenario 1**.
 * **Non-compliant, and template complete:** In this scenario, all compliances are there, but just not compliant (disregarding the reason). **This is scenario 2**
 
-### 2. Template Completeness Check (`check-template-complete.sh`)
+### Template Completeness Check (`check-template-complete.sh`)
 
 The `check-template-complete.sh` script analyzes the JSON output of a given trail to determine template completeness:
 

template-complete/check-template-complete.sh

@@ -33,9 +33,10 @@ json_data=$(cat "$json_file")
 # We use -r to output raw strings and @tsv to format as tab-separated values
 # This makes it easier to parse in bash.
 # The query now filters for the specific status provided as an argument.
-jq_query='(
+jq_query='
+(
   .compliance_status.attestations_statuses[]?, # Attestations directly under compliance_status
-  .compliance_status.artifacts_statuses | to_entries[]?.value.attestations_statuses[]? # Attestations nested under artifacts
+  .compliance_status.artifacts_statuses | to_entries[]?.value | select(type == "object") | .attestations_statuses[]? # Attestations nested under artifacts
 )
 | select(.status == "'"$status_to_find"'")
 | [.attestation_name, .status]