Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Attestation CLI command improvements #1121

Merged
merged 3 commits into from
Sep 13, 2024

Conversation

facutuesca
Copy link
Contributor

@facutuesca facutuesca commented Sep 13, 2024

Follow up to #1115 (comment) and #1115 (comment).

This PR:

  • Changes sigstore attest to sign over the predicate file's contents, rather than our Pydantic model JSON dump. See the comments in the code for the rationale.
  • Changes the implementation to use an enum.Enum for the predicate types
  • Forbids unexpected fields in predicate JSON during model validation

cc @woodruffw

@facutuesca facutuesca marked this pull request as draft September 13, 2024 15:59
sigstore/_cli.py Outdated Show resolved Hide resolved
sigstore/_cli.py Outdated Show resolved Hide resolved
Signed-off-by: Facundo Tuesca <[email protected]>
@woodruffw
Copy link
Member

/gcbrun

Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @facutuesca!

@woodruffw woodruffw merged commit 3af8dca into sigstore:main Sep 13, 2024
25 checks passed
@facutuesca facutuesca deleted the attest-fixes branch September 23, 2024 18:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants