From 2f1462b5198b77f11b935239cc13c7043e8136f6 Mon Sep 17 00:00:00 2001 From: Fredrik Skogman Date: Mon, 2 Sep 2024 16:23:10 +0200 Subject: [PATCH] Use root version 5 to start with. Versions 1-4 uses hex encoded public keys which are not compatible with newer go-tuf versions. Signed-off-by: Fredrik Skogman --- .github/workflows/custom-test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/custom-test.yml b/.github/workflows/custom-test.yml index 8d6580a0..07ff8d0a 100644 --- a/.github/workflows/custom-test.yml +++ b/.github/workflows/custom-test.yml @@ -54,7 +54,7 @@ jobs: - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0 - name: Download initial root - run: curl -o root.json ${METADATA_URL}/1.root.json + run: curl -o root.json ${METADATA_URL}/5.root.json - name: Test published repository with cosign run: | @@ -88,7 +88,7 @@ jobs: run: go install github.com/sigstore/sigstore-go/cmd/sigstore-go@latest - name: Download initial root - run: curl -o root.json ${METADATA_URL}/1.root.json + run: curl -o root.json ${METADATA_URL}/5.root.json - name: Download bundle to verify uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8