chore(deps): update SLSA verifier to version 2.6.0 (#879)

Signed-off-by: behnazh-w <[email protected]>

Author: behnazh-w

Makefile

@@ -96,7 +96,7 @@ setup-go:
 	go build -o $(PACKAGE_PATH)/bin/cuevalidate.so -buildmode=c-shared $(REPO_PATH)/golang/internal/cue_validator/cue_validator.go
 setup-binaries: $(PACKAGE_PATH)/bin/slsa-verifier $(PACKAGE_PATH)/resources/mvnw $(PACKAGE_PATH)/resources/gradlew souffle gnu-sed
 $(PACKAGE_PATH)/bin/slsa-verifier:
-	git clone --depth 1 https://github.com/slsa-framework/slsa-verifier.git -b v2.5.1
+	git clone --depth 1 https://github.com/slsa-framework/slsa-verifier.git -b v2.6.0
 	cd slsa-verifier/cli/slsa-verifier && go build -o $(PACKAGE_PATH)/bin/
 	cd $(REPO_PATH) && rm -rf slsa-verifier
 $(PACKAGE_PATH)/resources/mvnw:

src/macaron/slsa_analyzer/checks/provenance_l3_check.py

@@ -147,7 +147,7 @@ def _verify_slsa(
             )
 
             output = verifier_output.stdout.decode("utf-8")
-            if "PASSED: Verified SLSA provenance" in output:
+            if "PASSED: SLSA verification passed" in output:
                 result = _VerifyArtifactResult(_VerifyArtifactResultType.PASSED, asset_name)
             else:
                 result = _VerifyArtifactResult(_VerifyArtifactResultType.FAILED, asset_name)