ratify 1.3.1 (new formula)

.github/autobump.txt

@@ -2610,6 +2610,7 @@ ranger
 rapidfuzz-cpp
 ratchet
 ratfor
+ratify
 rattler-build
 rav1e
 raven

Formula/r/ratify.rb

@@ -0,0 +1,55 @@
+class Ratify < Formula
+  desc "Artifact Ratification Framework"
+  homepage "https://ratify.dev"
+  url "https://github.com/ratify-project/ratify/archive/refs/tags/v1.3.1.tar.gz"
+  sha256 "ada5c3a3c453a0552c287d0979534fb3c708bd8f41fdec83dc5378520626e339"
+  license "Apache-2.0"
+  head "https://github.com/ratify-project/ratify.git", branch: "dev"
+
+  depends_on "go" => :build
+
+  def install
+    ldflags = %W[
+      -s -w
+      -X github.com/ratify-project/ratify/internal/version.GitTag=#{version}
+      -X github.com/ratify-project/ratify/internal/version.GitCommitHash=#{tap.user}
+    ]
+
+    system "go", "build", *std_go_args(ldflags:), "./cmd/ratify"
+
+    generate_completions_from_executable(bin/"ratify", "completion")
+  end
+
+  test do
+    assert_match version.to_s, shell_output("#{bin}/ratify version")
+
+    test_config = testpath/"ratify.json"
+    test_config.write <<~JSON
+      {
+        "store": {
+          "stores": [
+            {
+              "name": "example-artifact",
+              "type": "oras",
+              "settings": {}
+            }
+          ]
+        },
+        "policy": {
+          "policies": []
+        },
+        "verifier": {
+          "verifiers": []
+        },
+        "executor": {},
+        "logger": {
+          "level": "info"
+        }
+      }
+    JSON
+
+    example_subject = "example.com/artifact:latest"
+    output = shell_output("#{bin}/ratify verify --config #{test_config} --subject #{example_subject} 2>&1", 1)
+    assert_match "referrer store config should have at least one store", output
+  end
+end