search

sigstore / sigstore-conformance

Conformance testing for Sigstore clients
https://sigstore.dev
7 stars 10 forks source link

DSSE verification: reject bundles with >1 DSSE sig #149

Open woodruffw opened 2 months ago

woodruffw commented 2 months ago

The conformance suite should include a testcase for this, since the client specification forbids it.

See: https://github.com/sigstore/sigstore-go/issues/225