Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support verifying Sigstore bundles #478

Merged
merged 18 commits into from
Jan 31, 2023
Merged

Support verifying Sigstore bundles #478

merged 18 commits into from
Jan 31, 2023

Commits on Jan 30, 2023

  1. _cli: Add support for verifying Sigstore bundles 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    638d632 View commit details
    Browse the repository at this point in the history

  2. treewide: Verify inclusion proof for Sigstore bundles 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    ce00d3c View commit details
    Browse the repository at this point in the history

  3. _cli: Clean up comments 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    8e37dc7 View commit details
    Browse the repository at this point in the history

  4. CHANGELOG: Add changelog entry 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    40a65c7 View commit details
    Browse the repository at this point in the history

  5. _cli: Comment formatting 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    fcd5a7d View commit details
    Browse the repository at this point in the history

  6. _cli: Rename to a private field 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    a74fd8a View commit details
    Browse the repository at this point in the history

  7. CHANGELOG: Add PR link 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    a63c64d View commit details
    Browse the repository at this point in the history

  8. Merge branch 'main' into alex/verify-bundle

    @woodruffw
    woodruffw authored Jan 30, 2023
    Configuration menu
    Copy the full SHA
    8546c1f View commit details
    Browse the repository at this point in the history

  9. Merge branch 'main' into alex/verify-bundle

    @woodruffw
    woodruffw authored Jan 30, 2023
    Configuration menu
    Copy the full SHA
    cbb1e53 View commit details
    Browse the repository at this point in the history

  10. sigstore: remove "rekor bundle" support 

    Vestigial now that we have Sigstore bundle support.

Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    03f7321 View commit details
    Browse the repository at this point in the history

  11. docs, sigstore: more pruning 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    1b32fc1 View commit details
    Browse the repository at this point in the history

  12. sigstore, test: devolve bundle handling, fix tests 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    c397f8d View commit details
    Browse the repository at this point in the history

  13. sigstore, test: lintage 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    24f291b View commit details
    Browse the repository at this point in the history

  14. verify/models: docstring 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    6d7adc1 View commit details
    Browse the repository at this point in the history

  15. test: fix offline test 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    f13d6b6 View commit details
    Browse the repository at this point in the history

  16. assets: remove old rekor bundle 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 30, 2023
    Configuration menu
    Copy the full SHA
    36392d5 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2023

  1. test: Add more test coverage for InvalidMaterials error cases 

    Signed-off-by: Alex Cameron <asc@tetsuo.sh>
    @tetsuo-cpp
    tetsuo-cpp committed Jan 31, 2023
    Configuration menu
    Copy the full SHA
    dc1cb3b View commit details
    Browse the repository at this point in the history

  2. sigstore, test: docs, API cleanup 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Jan 31, 2023
    Configuration menu
    Copy the full SHA
    4d8cb62 View commit details
    Browse the repository at this point in the history