Skip to content

Remove SHA256 assumption in sign-blob/verify-blob #4050

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Hayden-IO merged 26 commits into from
Sep 2, 2025
Merged

Remove SHA256 assumption in sign-blob/verify-blob #4050

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
b1c0f19
Remove SHA256 assumption in sign-blob/verify-blob
ret2libc Mar 4, 2025
180d536
Use Ed25519ph by default
ret2libc Mar 5, 2025
bb0a4bd
tests: add e2e test for sign-blob/verify-blob with non-default keys
ret2libc Mar 5, 2025
260444c
Update sigstore/sigstore to v1.9.1
ret2libc Mar 12, 2025
45f0289
REMOVE ME: Update to trail-of-forks sigstore-go
ret2libc Mar 12, 2025
2040109
fix tests
ret2libc Mar 12, 2025
00d769a
fix e2e tests
ret2libc Mar 12, 2025
acfa016
Use PureED25519 if no tlog upload
ret2libc Mar 13, 2025
8234ba5
fulcio: add comment about adapter
ret2libc Mar 13, 2025
1bc2269
test/e2e_test: use rekorUrl/fulcioUrl
ret2libc Mar 13, 2025
1f86890
REMOVE ME: update sigsto-go
ret2libc Apr 2, 2025
ab1b104
Merge remote-tracking branch 'origin/main' into use-load-options
ret2libc Apr 2, 2025
2961ce1
REMOVE ME: update sigstore-go
ret2libc Apr 2, 2025
dd4c926
test: try to fix e2e tests
ret2libc Apr 4, 2025
1b82e30
test/e2e_test: correctly name subtests
ret2libc Apr 4, 2025
3a8c7e2
fix e2e tests
ret2libc Apr 7, 2025
d6ef62b
fix lint
ret2libc Apr 7, 2025
208c3d5
fix lint 2
ret2libc Apr 7, 2025
c9ec1b7
extract GetDefaultLoadOptions function
ret2libc Apr 8, 2025
b7ab2fb
Merge remote-tracking branch 'origin/main' into use-load-options
ret2libc Apr 8, 2025
f0dd4d1
Merge remote-tracking branch 'origin/main' into use-load-options
ret2libc Jul 1, 2025
b4ea782
add a confirmation msg for old bundle format
ret2libc Jul 1, 2025
590c216
Merge remote-tracking branch 'origin/main' into use-load-options
ret2libc Aug 26, 2025
126a039
fix merging, payload needs to be initialized earlier
ret2libc Aug 27, 2025
c4f824e
Provide a default SHA256 payload for signingConfig payload
ret2libc Aug 28, 2025
3fb2bb7
fix lint
ret2libc Aug 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update sigstore/sigstore to v1.9.1 
Signed-off-by: Riccardo Schirone <riccardo.schirone@trailofbits.com>
  • Loading branch information
@ret2libc
ret2libc committed Mar 13, 2025
commit 260444cb62cb10b83b19a82e311a8f4f7d6dacf8
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ require (
github.com/sigstore/fulcio v1.6.6
github.com/sigstore/protobuf-specs v0.4.0
github.com/sigstore/rekor v1.3.9
github.com/sigstore/sigstore v1.8.15
github.com/sigstore/sigstore v1.9.1
github.com/sigstore/sigstore-go v0.7.0
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.8.15
github.com/sigstore/sigstore/pkg/signature/kms/azure v1.8.15
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -617,8 +617,8 @@ github.com/sigstore/protobuf-specs v0.4.0 h1:yoZbdh0kZYKOSiVbYyA8J3f2wLh5aUk2SQB
github.com/sigstore/protobuf-specs v0.4.0/go.mod h1:FKW5NYhnnFQ/Vb9RKtQk91iYd0MKJ9AxyqInEwU6+OI=
github.com/sigstore/rekor v1.3.9 h1:sUjRpKVh/hhgqGMs0t+TubgYsksArZ6poLEC3MsGAzU=
github.com/sigstore/rekor v1.3.9/go.mod h1:xThNUhm6eNEmkJ/SiU/FVU7pLY2f380fSDZFsdDWlcM=
github.com/sigstore/sigstore v1.8.15 h1:9HHnZmxjPQSTPXTCZc25HDxxSTWwsGMh/ZhWZZ39maU=
github.com/sigstore/sigstore v1.8.15/go.mod h1:+Wa5mrG6A+Gss516YC9owy10q3IazqIRe0y1EoQRHHM=
github.com/sigstore/sigstore v1.9.1 h1:bNMsfFATsMPaagcf+uppLk4C9rQZ2dh5ysmCxQBYWaw=
github.com/sigstore/sigstore v1.9.1/go.mod h1:zUoATYzR1J3rLNp3jmp4fzIJtWdhC3ZM6MnpcBtnsE4=
github.com/sigstore/sigstore-go v0.7.0 h1:bIGPc2IbnbxnzlqQcKlh1o96bxVJ4yRElpP1gHrOH48=
github.com/sigstore/sigstore-go v0.7.0/go.mod h1:4RrCK+i+jhx7lyOG2Vgef0/kFLbKlDI1hrioUYvkxxA=
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.8.15 h1:g/hPoaemFv/6ZJIRyb5I1lA4qU9PZwCTu/GkvFV5jEw=
Expand Down