search

sigstore / sigstore-conformance

Conformance testing for Sigstore clients
https://sigstore.dev
7 stars 10 forks source link

Allow testing bundle verification without requiring a client to implement signing #81

Closed steiza closed 1 year ago

steiza commented 1 year ago

Description

Today, https://github.com/sigstore/sigstore-conformance/blob/main/test/test_bundle.py requires a client to implement signing in order to test bundle verification. It would be nice to be able to test verification without requiring the client to implement signing.

steiza commented 1 year ago

Now that https://github.com/sigstore/sigstore-conformance/pull/82 has landed, I think this is done!

woodruffw commented 1 year ago

Awesome! Would it help to have a new version tagged for #82?

steiza commented 1 year ago

Would it help to have a new version tagged

If it's easy, sure! Eventually we'll want a version tagged for https://github.com/sigstore/sigstore-go, but we're a few other steps / weeks until that's the case.

woodruffw commented 1 year ago

If it's easy, sure! Eventually we'll want a version tagged for https://github.com/sigstore/sigstore-go, but we're a few other steps / weeks until that's the case.

Yep, it's just a git tag. Doing now!