Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump sigstore to v1.8.3 #2291

Merged
merged 1 commit into from
Apr 16, 2024
Merged

Bump sigstore to v1.8.3 #2291

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ require (
github.com/mitchellh/go-homedir v1.1.0
github.com/pkg/errors v0.9.1
github.com/sigstore/cosign/v2 v2.2.2
github.com/sigstore/sigstore v1.8.2
github.com/sigstore/sigstore v1.8.3
github.com/spf13/cobra v1.8.0
github.com/spf13/pflag v1.0.5
github.com/tektoncd/chains v0.20.1
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1778,8 +1778,8 @@ github.com/sigstore/fulcio v1.4.3 h1:9JcUCZjjVhRF9fmhVuz6i1RyhCc/EGCD7MOl+iqCJLQ
github.com/sigstore/fulcio v1.4.3/go.mod h1:BQPWo7cfxmJwgaHlphUHUpFkp5+YxeJes82oo39m5og=
github.com/sigstore/rekor v1.3.4 h1:RGIia1iOZU7fOiiP2UY/WFYhhp50S5aUm7YrM8aiA6E=
github.com/sigstore/rekor v1.3.4/go.mod h1:1GubPVO2yO+K0m0wt/3SHFqnilr/hWbsjSOe7Vzxrlg=
github.com/sigstore/sigstore v1.8.2 h1:0Ttjcn3V0fVQXlYq7+oHaaHkGFIt3ywm7SF4JTU/l8c=
github.com/sigstore/sigstore v1.8.2/go.mod h1:CHVcSyknCcjI4K2ZhS1SI28r0tcQyBlwtALG536x1DY=
github.com/sigstore/sigstore v1.8.3 h1:G7LVXqL+ekgYtYdksBks9B38dPoIsbscjQJX/MGWkA4=
github.com/sigstore/sigstore v1.8.3/go.mod h1:mqbTEariiGA94cn6G3xnDiV6BD8eSLdL/eA7bvJ0fVs=
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.8.2 h1:e0EtUcE7cqWBxxME7h6upA3EA0IR3EOE3F1t+WHOdTc=
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.8.2/go.mod h1:07qBxPjI9bsgdQRiBz27Ai+gl6hgr//vwXMZzTX87Us=
github.com/sigstore/sigstore/pkg/signature/kms/azure v1.8.2 h1:Fgt4dC9OozkLEtMO6JYfFgqNdSDG1y1uAdiJgrtZYN4=
Expand Down
4 changes: 2 additions & 2 deletions pkg/trustedresources/verify_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ func TestVerify(t *testing.T) {
}{{
name: "Unsigned Task fails verification",
resource: unsignedTask,
expectedErr: fmt.Errorf("invalid signature when validating ASN.1 encoded signature"),
expectedErr: fmt.Errorf("ecdsa: Invalid IEEE_P1363 encoded bytes"),
}, {
name: "Tampered Task fails verification",
resource: tamperedTask,
Expand All @@ -73,7 +73,7 @@ func TestVerify(t *testing.T) {
}, {
name: "Unsigned Pipeline fails verification",
resource: unsignedPipeline,
expectedErr: fmt.Errorf("invalid signature when validating ASN.1 encoded signature"),
expectedErr: fmt.Errorf("ecdsa: Invalid IEEE_P1363 encoded bytes"),
}, {
name: "Tampered Pipeline fails verification",
resource: tamperedPipeline,
Expand Down
21 changes: 19 additions & 2 deletions vendor/github.com/sigstore/sigstore/pkg/signature/ecdsa.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

104 changes: 64 additions & 40 deletions vendor/github.com/sigstore/sigstore/pkg/tuf/repository/root.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion vendor/modules.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1223,7 +1223,7 @@ github.com/sigstore/rekor/pkg/types/intoto/v0.0.2
github.com/sigstore/rekor/pkg/types/rekord
github.com/sigstore/rekor/pkg/types/rekord/v0.0.1
github.com/sigstore/rekor/pkg/util
# github.com/sigstore/sigstore v1.8.2
# github.com/sigstore/sigstore v1.8.3
## explicit; go 1.20
github.com/sigstore/sigstore/pkg/cryptoutils
github.com/sigstore/sigstore/pkg/fulcioroots
Expand Down