sigstore / sigstore-conformance

Conformance testing for Sigstore clients
https://sigstore.dev
7 stars 10 forks source link

Simplify DSSE bundle tests #115

Closed bdehamer closed 8 months ago

bdehamer commented 9 months ago

Updates the recently-added DSSE bundle tests to simplify the test set-up. Previously, the attestation subject was a binary artifact. With this update, the subject is now a simple text file (similar to the other test subjects).

I've also removed the RFC31616 timestamp from all of the test bundles -- due to an error in code used to generate the test bundles, the timestamp was invalid. When I've fixed the issue, I'll submit another PR to re-add test cases around RFC3161 timestamp verification.