add `fix-bundle` plumbing command

sigstore / sigstore-python

A Sigstore client written in Python

https://pypi.org/p/sigstore

Other

233 stars 49 forks source link

add `fix-bundle` plumbing command #1089

Closed woodruffw closed 3 months ago

woodruffw commented 3 months ago

~~WIP; needs documentation and feedback.~~

This command enables users to fix older bundles that were malformed by older versions of sigstore-python.

This changeset also includes a new integration test hierarchy, with a starter test for the new fix-bundle command based on a publicly observed malformed bundle.

CC @sethmlarson

Closes #1088.

See https://github.com/python/cpython/issues/122785.

haydentherapper commented 3 months ago

Just to cross reference, we were thinking about building a similar capability in https://github.com/sigstore/cosign/issues/3794, to upgrade a bundle.

sethmlarson commented 3 months ago

Confirming that I was able to get Sigstore CLI to verify all existing CPython Sigstore bundles if this process is run on them.