Skip to content

fix(sigstore): add coverage tests and public key extraction for Sigstore#1310

Open
Demiserular wants to merge 1 commit into
gittuf:mainfrom
Demiserular:fix/sigstore-coverage
Open

fix(sigstore): add coverage tests and public key extraction for Sigstore#1310
Demiserular wants to merge 1 commit into
gittuf:mainfrom
Demiserular:fix/sigstore-coverage

Conversation

@Demiserular

Copy link
Copy Markdown

Description

This adds Sigstore verifier support by extracting the public key from Sigstore verification material, and it includes focused unit tests for sigstore token parsing and public-key extraction so the new verifier logic is covered.

AI Usage

  • I did not use generative AI at all in making the content of this pull
    request.
  • I did use generative AI in some form in making the content of this
    pull request. I have described my use of AI below.

Contributor Checklist

  • I have manually reviewed all content submitted to gittuf in this pull
    request.
  • I fully understand the content I am submitting.
  • The changes introduced are documented and have tests included if
    applicable.
  • My changes do not infringe on copyright/trademarks/etc.
  • All commits in this pull request include a DCO
    Signoff
    .
  • By submitting this pull request, I agree to follow the gittuf Code of
    Conduct
    .

…ore verifier

Signed-off-by: SHUBHAM CHAUHAN <shubhamx4mail@gmail.com>
@Demiserular

Copy link
Copy Markdown
Author

@patzielinski kindly have a look and mention if changes required.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant