[rw] Embed recipes repo as SPDX identifier
This change modifies the SLSA provenance to show the version that the
recipes were checked out at. It formulates an SPDX identifier for this.
To get the repo data out of the checkout, some refactoring had to
happen. As part of the refactoring, some code entered the new `env`
package. Some functions and types were renamed to be shorter and have
less stuttering.
Change-Id: Ie4d1d7bb648b1ccbacc49dc88f9a08dd34b60b23
Reviewed-on: https://fuchsia-review.googlesource.com/c/infra/infra/+/947952
Commit-Queue: Chris Lewis <cflewis@google.com>
Reviewed-by: Nathan Mulcahey <nmulcahey@google.com>
10 files changed
