diff --git a/gen/jsonschema/schemas/Bundle.schema.json b/gen/jsonschema/schemas/Bundle.schema.json index 768f9dba..1ecdbdb2 100644 --- a/gen/jsonschema/schemas/Bundle.schema.json +++ b/gen/jsonschema/schemas/Bundle.schema.json @@ -314,7 +314,7 @@ }, "integratedTime": { "type": "string", - "description": "The UNIX timestamp from the log when the entry was persisted." + "description": "The UNIX timestamp from the log when the entry was persisted. The integration time MUST NOT be trusted if inclusion_promise is omitted." }, "inclusionPromise": { "$ref": "#/definitions/dev.sigstore.rekor.v1.InclusionPromise", diff --git a/gen/jsonschema/schemas/Input.schema.json b/gen/jsonschema/schemas/Input.schema.json index dcfdd4a7..faf0952f 100644 --- a/gen/jsonschema/schemas/Input.schema.json +++ b/gen/jsonschema/schemas/Input.schema.json @@ -507,7 +507,7 @@ }, "integratedTime": { "type": "string", - "description": "The UNIX timestamp from the log when the entry was persisted." + "description": "The UNIX timestamp from the log when the entry was persisted. The integration time MUST NOT be trusted if inclusion_promise is omitted." }, "inclusionPromise": { "$ref": "#/definitions/dev.sigstore.rekor.v1.InclusionPromise", diff --git a/gen/jsonschema/schemas/TransparencyLogEntry.schema.json b/gen/jsonschema/schemas/TransparencyLogEntry.schema.json index c548f868..69481baa 100644 --- a/gen/jsonschema/schemas/TransparencyLogEntry.schema.json +++ b/gen/jsonschema/schemas/TransparencyLogEntry.schema.json @@ -20,7 +20,7 @@ }, "integratedTime": { "type": "string", - "description": "The UNIX timestamp from the log when the entry was persisted." + "description": "The UNIX timestamp from the log when the entry was persisted. The integration time MUST NOT be trusted if inclusion_promise is omitted." }, "inclusionPromise": { "$ref": "#/definitions/dev.sigstore.rekor.v1.InclusionPromise", diff --git a/gen/jsonschema/schemas/VerificationMaterial.schema.json b/gen/jsonschema/schemas/VerificationMaterial.schema.json index 14faa461..c95a0d24 100644 --- a/gen/jsonschema/schemas/VerificationMaterial.schema.json +++ b/gen/jsonschema/schemas/VerificationMaterial.schema.json @@ -231,7 +231,7 @@ }, "integratedTime": { "type": "string", - "description": "The UNIX timestamp from the log when the entry was persisted." + "description": "The UNIX timestamp from the log when the entry was persisted. The integration time MUST NOT be trusted if inclusion_promise is omitted." }, "inclusionPromise": { "$ref": "#/definitions/dev.sigstore.rekor.v1.InclusionPromise", diff --git a/gen/pb-go/rekor/v1/sigstore_rekor.pb.go b/gen/pb-go/rekor/v1/sigstore_rekor.pb.go index ef5efe48..17deda7c 100644 --- a/gen/pb-go/rekor/v1/sigstore_rekor.pb.go +++ b/gen/pb-go/rekor/v1/sigstore_rekor.pb.go @@ -323,6 +323,8 @@ type TransparencyLogEntry struct { // verification. KindVersion *KindVersion `protobuf:"bytes,3,opt,name=kind_version,json=kindVersion,proto3" json:"kind_version,omitempty"` // The UNIX timestamp from the log when the entry was persisted. + // The integration time MUST NOT be trusted if inclusion_promise + // is omitted. IntegratedTime int64 `protobuf:"varint,4,opt,name=integrated_time,json=integratedTime,proto3" json:"integrated_time,omitempty"` // The inclusion promise/signed entry timestamp from the log. // Required for v0.1 bundles, and MUST be verified. diff --git a/gen/pb-python/sigstore_protobuf_specs/dev/sigstore/rekor/v1/__init__.py b/gen/pb-python/sigstore_protobuf_specs/dev/sigstore/rekor/v1/__init__.py index e8670943..890d3f79 100644 --- a/gen/pb-python/sigstore_protobuf_specs/dev/sigstore/rekor/v1/__init__.py +++ b/gen/pb-python/sigstore_protobuf_specs/dev/sigstore/rekor/v1/__init__.py @@ -123,7 +123,11 @@ class TransparencyLogEntry(betterproto.Message): """ integrated_time: int = betterproto.int64_field(4) - """The UNIX timestamp from the log when the entry was persisted.""" + """ + The UNIX timestamp from the log when the entry was persisted. + The integration time MUST NOT be trusted if inclusion_promise + is omitted. + """ inclusion_promise: "InclusionPromise" = betterproto.message_field(5) """ diff --git a/gen/pb-rust/sigstore-protobuf-specs/src/generated/dev.sigstore.rekor.v1.rs b/gen/pb-rust/sigstore-protobuf-specs/src/generated/dev.sigstore.rekor.v1.rs index 80556e38..a7a950d5 100644 --- a/gen/pb-rust/sigstore-protobuf-specs/src/generated/dev.sigstore.rekor.v1.rs +++ b/gen/pb-rust/sigstore-protobuf-specs/src/generated/dev.sigstore.rekor.v1.rs @@ -127,6 +127,8 @@ pub struct TransparencyLogEntry { #[prost(message, optional, tag = "3")] pub kind_version: ::core::option::Option, /// The UNIX timestamp from the log when the entry was persisted. + /// The integration time MUST NOT be trusted if inclusion_promise + /// is omitted. #[prost(int64, tag = "4")] pub integrated_time: i64, /// The inclusion promise/signed entry timestamp from the log. diff --git a/gen/pb-rust/sigstore-protobuf-specs/src/generated/file_descriptor_set.bin b/gen/pb-rust/sigstore-protobuf-specs/src/generated/file_descriptor_set.bin index 76cfb527..16380f90 100644 Binary files a/gen/pb-rust/sigstore-protobuf-specs/src/generated/file_descriptor_set.bin and b/gen/pb-rust/sigstore-protobuf-specs/src/generated/file_descriptor_set.bin differ diff --git a/gen/pb-typescript/src/__generated__/sigstore_rekor.ts b/gen/pb-typescript/src/__generated__/sigstore_rekor.ts index 1e9ab6fa..6bdce16d 100644 --- a/gen/pb-typescript/src/__generated__/sigstore_rekor.ts +++ b/gen/pb-typescript/src/__generated__/sigstore_rekor.ts @@ -98,7 +98,11 @@ export interface TransparencyLogEntry { kindVersion: | KindVersion | undefined; - /** The UNIX timestamp from the log when the entry was persisted. */ + /** + * The UNIX timestamp from the log when the entry was persisted. + * The integration time MUST NOT be trusted if inclusion_promise + * is omitted. + */ integratedTime: string; /** * The inclusion promise/signed entry timestamp from the log. diff --git a/protos/sigstore_rekor.proto b/protos/sigstore_rekor.proto index 89159601..57148361 100644 --- a/protos/sigstore_rekor.proto +++ b/protos/sigstore_rekor.proto @@ -101,6 +101,8 @@ message TransparencyLogEntry { // verification. KindVersion kind_version = 3 [(google.api.field_behavior) = REQUIRED]; // The UNIX timestamp from the log when the entry was persisted. + // The integration time MUST NOT be trusted if inclusion_promise + // is omitted. int64 integrated_time = 4 [(google.api.field_behavior) = REQUIRED]; // The inclusion promise/signed entry timestamp from the log. // Required for v0.1 bundles, and MUST be verified.