Update module github.com/sigstore/sigstore to v1.9.1 #620

Annotations

1 warning

Set up job

Pull mikefarah/yq:4-githubaction

Run actions/checkout@d632683dd7b4114ad314bca15554477dd762a938

Run actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

Run ko-build/setup-ko@3aebd0597dc1e9d1a26bcfdb7cbeb19c131d3037

Install yq

build cosign

1m 31s

Install cluster + sigstore

3m 42s

Create sample image - demoimage

Initialize with our custom TUF root pointing to remote root

Initialize with custom TUF root pointing to local filesystem

Sign demoimage with cosign

Create attestation for it

Sign a blob

Verify with cosign

Verify custom attestation with cosign, works

Verify custom attestation with cosign, fails

Verify a blob

Collect diagnostics

Create vuln attestation for it

Verify vuln attestation with cosign, works

Verify vuln attestation with cosign, fails

Post Run actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

11s

Post Run actions/checkout@d632683dd7b4114ad314bca15554477dd762a938

Complete job