Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cosign: Make verify-blob compatible with sigstore-python #403

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

cosign: Make verify-blob compatible with sigstore-python #403

wants to merge 1 commit into from

Commits on Oct 11, 2024

  1. cosign: Make verify-blob compatible with sigstore-python 

    * This changes cosign::verify_blob() cert argument: it is no longer PEM
  that is base64 encoded (on top of the encoding that is part of being a
  PEM), instead it is PEM as already documented.
* verify-blob now works with certificates that are PEM or base64 PEM
* verify-blob also trims signature

This makes verify-blob work with python-tuf outputs.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    @jku
    jku committed Oct 11, 2024
    Configuration menu
    Copy the full SHA
    2ca912d View commit details
    Browse the repository at this point in the history