sigstore 0.2.2 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +63 -0
  3. data/data/_store/prod/root.json +29 -53
  4. data/data/_store/prod/trusted_root.json +25 -13
  5. data/data/_store/staging/root.json +4 -4
  6. data/data/_store/staging/trusted_root.json +155 -7
  7. data/lib/sigstore/error.rb +4 -0
  8. data/lib/sigstore/internal/key.rb +83 -18
  9. data/lib/sigstore/internal/merkle.rb +2 -2
  10. data/lib/sigstore/internal/util.rb +7 -0
  11. data/lib/sigstore/internal/x509.rb +7 -7
  12. data/lib/sigstore/models.rb +56 -16
  13. data/lib/sigstore/oidc.rb +3 -0
  14. data/lib/sigstore/policy.rb +8 -0
  15. data/lib/sigstore/rekor/checkpoint.rb +21 -11
  16. data/lib/sigstore/rekor/client.rb +38 -2
  17. data/lib/sigstore/signer.rb +248 -36
  18. data/lib/sigstore/signing_config.rb +181 -0
  19. data/lib/sigstore/trusted_root.rb +20 -4
  20. data/lib/sigstore/tuf.rb +16 -2
  21. data/lib/sigstore/verifier.rb +283 -73
  22. data/lib/sigstore/version.rb +2 -1
  23. data/lib/sigstore.rb +1 -0
  24. metadata +19 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: adbc9be5acca424a61e1be380b84e86ddfb7752ec1e7e347b974a6dc7a59b34e
4
- data.tar.gz: 8448dc2e3b7db3ac9ce3d187337a18fb9615f8bc7262fe2a3c64e207fd236300
3
+ metadata.gz: d25c23cbf726cf67b1834c8ae2481d8170a55d895d19c350dd33be9c867c4451
4
+ data.tar.gz: 6f730574d2d7899d32519e7a90d29669fee4564dab7f661bdc0c0bf4b6eb45d2
5
5
  SHA512:
6
- metadata.gz: '0393afaefba1a158efd80e2e67653a218ef102db3848de301acefc99f5dbcd72c88ebc67cef4b11c573944d57169a2d0a2224cabfe0003899135ca5ba74282ca'
7
- data.tar.gz: 92521025a92dbc5776caf13326e13e0988950e95c5206586674d01a80a25907110af6271dd045f76279e7f1a97fd1aea42e06d451514327e0384d2a7d1d57ebd
6
+ metadata.gz: 1e3c1ee4076972e6735034a71024b16c604591054d675501e1c132d9f9d909782e6f10895bb049b7358a4eb86b6fbcd4e29aab4f38797018af5aa703e37426e2
7
+ data.tar.gz: 9793bc796f02b85395d764bcc748da3547cbdf3bf72da76d11f773970257fa2965a1353d6eef120fbb96dab18e3a3dea82e8386a110bbed4035dce349c2855f0
data/CHANGELOG.md CHANGED
@@ -1,3 +1,66 @@
1
+ ## [0.3.0] - 2026-06-20
2
+
3
+ ### Added
4
+
5
+ - Rekor v2 (tiled transparency log) verification and signing, using the
6
+ `hashedrekord` 0.0.2 entry type.
7
+ - DSSE / in-toto attestation signing (`Signer#sign_dsse`).
8
+ - Managed-key (bring-your-own-key) verification via `Verifier#verify(key:)`,
9
+ for bundles that carry a public-key hint instead of a Fulcio certificate.
10
+ - Timestamping Authority (TSA / RFC 3161) timestamp signing, and defaulting the
11
+ signing configuration from TUF.
12
+
13
+ ### Changed
14
+
15
+ - Updated to sigstore protobuf-specs v0.5.1 / protobug 0.2.0, and added the
16
+ `protobug_in_toto_attestation_protos` dependency. The `protobug_sigstore_protos`
17
+ constraint is now `~> 0.2.0`.
18
+ - Updated conformance suites to sigstore-conformance v0.0.29 and
19
+ tuf-conformance v2.4.0.
20
+
21
+ ### Security
22
+
23
+ - Enforce that an RFC 3161 timestamp's message imprint covers the bundle
24
+ signature, and that the timestamp's `gen_time` falls within the Timestamping
25
+ Authority's validity window. Verification now fails closed when no trusted
26
+ signing time (TSA response or log integrated time) is available.
27
+ - A managed-key DSSE bundle carried as a Rekor v1 entry now fails with a clear
28
+ error instead of raising `NoMethodError`.
29
+
30
+ ## [0.2.3] - 2026-03-10
31
+
32
+ ### Security
33
+
34
+ - Fix in-toto statement verification (GHSA-mhg6-2q2v-9h2c).
35
+
36
+ ### Changed
37
+
38
+ - Accept extensions for SCTs.
39
+ - Set a library-specific `User-Agent` header on outbound HTTP requests.
40
+
41
+ ## [0.2.2] - 2025-10-24
42
+
43
+ ### Changed
44
+
45
+ - Require Ruby >= 3.2.
46
+ - Re-implement missing JRuby functionality atop `java.security`.
47
+ - Ensure `kind_version` is set on transparency log entries after signing.
48
+ - Skip unrecognized keys when parsing.
49
+ - Enable smoke tests for fork PRs using the public OIDC beacon.
50
+
51
+ ## [0.2.1] - 2024-11-19
52
+
53
+ - Fix the release automation (gem push paths; split the RubyGems release to a
54
+ matrix).
55
+
56
+ ## [0.2.0] - 2024-11-18
57
+
58
+ ### Changed
59
+
60
+ - Extract the CLI into a separate gem that can be published independently.
61
+ - Improve compatibility with the sigstore-js mock server.
62
+ - Improve error handling.
63
+
1
64
  ## [0.1.1] - 2024-10-18
2
65
 
3
66
  - Fix release automation
data/data/_store/prod/root.json CHANGED
@@ -1,98 +1,74 @@
1
1
  {
2
2
  "signatures": [
3
- {
4
- "keyid": "6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3",
5
- "sig": "30460221008ab1f6f17d4f9e6d7dcf1c88912b6b53cc10388644ae1f09bc37a082cd06003e022100e145ef4c7b782d4e8107b53437e669d0476892ce999903ae33d14448366996e7"
6
- },
7
3
  {
8
4
  "keyid": "e71a54d543835ba86adad9460379c7641fb8726d164ea766801a1c522aba7ea2",
9
- "sig": "3045022100c768b2f86da99569019c160a081da54ae36c34c0a3120d3cb69b53b7d113758e02204f671518f617b20d46537fae6c3b63bae8913f4f1962156105cc4f019ac35c6a"
5
+ "sig": "3045022100ea2f374f409810e2db950749d9cfed09a15b6a5e25f3d5ffd0799459d7bee167022028d3acdde6dbd5034cfad222d31b41090ee21894e2c46cb8974198ab0377db44"
10
6
  },
11
7
  {
12
8
  "keyid": "22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06",
13
- "sig": "3045022100b4434e6995d368d23e74759acd0cb9013c83a5d3511f0f997ec54c456ae4350a022015b0e265d182d2b61dc74e155d98b3c3fbe564ba05286aa14c8df02c9b756516"
9
+ "sig": "304402207ebb24e3237e470691d7875903a7754d0ef2ae7e7b5024a7888c9a38a52deecd02206ed5ad1c6f4fab46995843ab6b23f9420c5a4cf6ce1cb2cb2a6fc2e87e2ef3e1"
14
10
  },
15
11
  {
16
12
  "keyid": "61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222",
17
- "sig": "304502210082c58411d989eb9f861410857d42381590ec9424dbdaa51e78ed13515431904e0220118185da6a6c2947131c17797e2bb7620ce26e5f301d1ceac5f2a7e58f9dcf2e"
13
+ "sig": "304602210089d9dfd8e106cc958088a4da3c8cf7254ab6f65a9647d37ada730ef4763c5163022100d882ee744615be79861e214e1eeb9e1eddf6a1e203a201b4c5d03f5224d71d16"
18
14
  },
19
15
  {
20
16
  "keyid": "a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70",
21
- "sig": "3046022100c78513854cae9c32eaa6b88e18912f48006c2757a258f917312caba75948eb9e022100d9e1b4ce0adfe9fd2e2148d7fa27a2f40ba1122bd69da7612d8d1776b013c91d"
22
- },
23
- {
24
- "keyid": "fdfa83a07b5a83589b87ded41f77f39d232ad91f7cce52868dacd06ba089849f",
25
- "sig": "3045022056483a2d5d9ea9cec6e11eadfb33c484b614298faca15acf1c431b11ed7f734c022100d0c1d726af92a87e4e66459ca5adf38a05b44e1f94318423f954bae8bca5bb2e"
26
- },
27
- {
28
- "keyid": "e2f59acb9488519407e18cbfc9329510be03c04aca9929d2f0301343fec85523",
29
- "sig": "3046022100d004de88024c32dc5653a9f4843cfc5215427048ad9600d2cf9c969e6edff3d2022100d9ebb798f5fc66af10899dece014a8628ccf3c5402cd4a4270207472f8f6e712"
30
- },
31
- {
32
- "keyid": "3c344aa068fd4cc4e87dc50b612c02431fbc771e95003993683a2b0bf260cf0e",
33
- "sig": "3046022100b7b09996c45ca2d4b05603e56baefa29718a0b71147cf8c6e66349baa61477df022100c4da80c717b4fa7bba0fd5c72da8a0499358b01358b2309f41d1456ea1e7e1d9"
34
- },
35
- {
36
- "keyid": "ec81669734e017996c5b85f3d02c3de1dd4637a152019fe1af125d2f9368b95e",
37
- "sig": "3046022100be9782c30744e411a82fa85b5138d601ce148bc19258aec64e7ec24478f38812022100caef63dcaf1a4b9a500d3bd0e3f164ec18f1b63d7a9460d9acab1066db0f016d"
17
+ "sig": "304502210088bd4b88e83f586ce568d27d04214c4ab3fd1894178ef015303d56afa939205302205538ebab93876abb9075ad77114bff28a0d79a7cc229b534a0c5ced5526b48e7"
38
18
  },
39
19
  {
40
- "keyid": "1e1d65ce98b10addad4764febf7dda2d0436b3d3a3893579c0dddaea20e54849",
41
- "sig": "30450220746ec3f8534ce55531d0d01ff64964ef440d1e7d2c4c142409b8e9769f1ada6f022100e3b929fcd93ea18feaa0825887a7210489879a66780c07a83f4bd46e2f09ab3b"
20
+ "keyid": "183e64f37670dc13ca0d28995a3053f3740954ddce44321a41e46534cf44e632",
21
+ "sig": "3045022100f35b07e938d4949caf82e69e86cc9db3b69b6dbc6740c1f343d06893f996fbeb022001e847d816259a96a49e42779a2350dab97b71c8ae7e26b2380c6fa7f58131b3"
42
22
  }
43
23
  ],
44
24
  "signed": {
45
25
  "_type": "root",
46
26
  "consistent_snapshot": true,
47
- "expires": "2025-02-19T08:04:32Z",
27
+ "expires": "2026-11-20T13:58:18Z",
48
28
  "keys": {
49
- "22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06": {
29
+ "0c87432c3bf09fd99189fdc32fa5eaedf4e4a5fac7bab73fa04a2e0fc64af6f5": {
50
30
  "keyid_hash_algorithms": [
51
31
  "sha256",
52
32
  "sha512"
53
33
  ],
54
34
  "keytype": "ecdsa",
55
35
  "keyval": {
56
- "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzBzVOmHCPojMVLSI364WiiV8NPrD\n6IgRxVliskz/v+y3JER5mcVGcONliDcWMC5J2lfHmjPNPhb4H7xm8LzfSA==\n-----END PUBLIC KEY-----\n"
36
+ "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWRiGr5+j+3J5SsH+Ztr5nE2H2wO7\nBV+nO3s93gLca18qTOzHY1oWyAGDykMSsGTUBSt9D+An0KfKsD2mfSM42Q==\n-----END PUBLIC KEY-----\n"
57
37
  },
58
38
  "scheme": "ecdsa-sha2-nistp256",
59
- "x-tuf-on-ci-keyowner": "@santiagotorres"
39
+ "x-tuf-on-ci-online-uri": "gcpkms:projects/sigstore-root-signing/locations/global/keyRings/root/cryptoKeys/timestamp/cryptoKeyVersions/1"
60
40
  },
61
- "61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222": {
62
- "keyid_hash_algorithms": [
63
- "sha256",
64
- "sha512"
65
- ],
41
+ "183e64f37670dc13ca0d28995a3053f3740954ddce44321a41e46534cf44e632": {
66
42
  "keytype": "ecdsa",
67
43
  "keyval": {
68
- "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEinikSsAQmYkNeH5eYq/CnIzLaacO\nxlSaawQDOwqKy/tCqxq5xxPSJc21K4WIhs9GyOkKfzueY3GILzcMJZ4cWw==\n-----END PUBLIC KEY-----\n"
44
+ "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEMxpPOJCIZ5otG4106fGJseEQi3V9\npkMYQ4uyV9Tj1M7WHXIyLG+jkfvuG0glQ1JZbRZZBV3gAR4sojdGHISeow==\n-----END PUBLIC KEY-----\n"
69
45
  },
70
46
  "scheme": "ecdsa-sha2-nistp256",
71
- "x-tuf-on-ci-keyowner": "@bobcallaway"
47
+ "x-tuf-on-ci-keyowner": "@lance"
72
48
  },
73
- "6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3": {
49
+ "22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06": {
74
50
  "keyid_hash_algorithms": [
75
51
  "sha256",
76
52
  "sha512"
77
53
  ],
78
54
  "keytype": "ecdsa",
79
55
  "keyval": {
80
- "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEy8XKsmhBYDI8Jc0GwzBxeKax0cm5\nSTKEU65HPFunUn41sT8pi0FjM4IkHz/YUmwmLUO0Wt7lxhj6BkLIK4qYAw==\n-----END PUBLIC KEY-----\n"
56
+ "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzBzVOmHCPojMVLSI364WiiV8NPrD\n6IgRxVliskz/v+y3JER5mcVGcONliDcWMC5J2lfHmjPNPhb4H7xm8LzfSA==\n-----END PUBLIC KEY-----\n"
81
57
  },
82
58
  "scheme": "ecdsa-sha2-nistp256",
83
- "x-tuf-on-ci-keyowner": "@dlorenc"
59
+ "x-tuf-on-ci-keyowner": "@santiagotorres"
84
60
  },
85
- "7247f0dbad85b147e1863bade761243cc785dcb7aa410e7105dd3d2b61a36d2c": {
61
+ "61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222": {
86
62
  "keyid_hash_algorithms": [
87
63
  "sha256",
88
64
  "sha512"
89
65
  ],
90
66
  "keytype": "ecdsa",
91
67
  "keyval": {
92
- "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWRiGr5+j+3J5SsH+Ztr5nE2H2wO7\nBV+nO3s93gLca18qTOzHY1oWyAGDykMSsGTUBSt9D+An0KfKsD2mfSM42Q==\n-----END PUBLIC KEY-----\n"
68
+ "public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEinikSsAQmYkNeH5eYq/CnIzLaacO\nxlSaawQDOwqKy/tCqxq5xxPSJc21K4WIhs9GyOkKfzueY3GILzcMJZ4cWw==\n-----END PUBLIC KEY-----\n"
93
69
  },
94
70
  "scheme": "ecdsa-sha2-nistp256",
95
- "x-tuf-on-ci-online-uri": "gcpkms://projects/sigstore-root-signing/locations/global/keyRings/root/cryptoKeys/timestamp"
71
+ "x-tuf-on-ci-keyowner": "@bobcallaway"
96
72
  },
97
73
  "a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70": {
98
74
  "keyid_hash_algorithms": [
@@ -122,17 +98,17 @@
122
98
  "roles": {
123
99
  "root": {
124
100
  "keyids": [
125
- "6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3",
126
101
  "e71a54d543835ba86adad9460379c7641fb8726d164ea766801a1c522aba7ea2",
127
102
  "22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06",
128
103
  "61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222",
129
- "a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70"
104
+ "a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70",
105
+ "183e64f37670dc13ca0d28995a3053f3740954ddce44321a41e46534cf44e632"
130
106
  ],
131
107
  "threshold": 3
132
108
  },
133
109
  "snapshot": {
134
110
  "keyids": [
135
- "7247f0dbad85b147e1863bade761243cc785dcb7aa410e7105dd3d2b61a36d2c"
111
+ "0c87432c3bf09fd99189fdc32fa5eaedf4e4a5fac7bab73fa04a2e0fc64af6f5"
136
112
  ],
137
113
  "threshold": 1,
138
114
  "x-tuf-on-ci-expiry-period": 3650,
@@ -140,26 +116,26 @@
140
116
  },
141
117
  "targets": {
142
118
  "keyids": [
143
- "6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3",
144
119
  "e71a54d543835ba86adad9460379c7641fb8726d164ea766801a1c522aba7ea2",
145
120
  "22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06",
146
121
  "61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222",
147
- "a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70"
122
+ "a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70",
123
+ "183e64f37670dc13ca0d28995a3053f3740954ddce44321a41e46534cf44e632"
148
124
  ],
149
125
  "threshold": 3
150
126
  },
151
127
  "timestamp": {
152
128
  "keyids": [
153
- "7247f0dbad85b147e1863bade761243cc785dcb7aa410e7105dd3d2b61a36d2c"
129
+ "0c87432c3bf09fd99189fdc32fa5eaedf4e4a5fac7bab73fa04a2e0fc64af6f5"
154
130
  ],
155
131
  "threshold": 1,
156
132
  "x-tuf-on-ci-expiry-period": 7,
157
- "x-tuf-on-ci-signing-period": 4
133
+ "x-tuf-on-ci-signing-period": 6
158
134
  }
159
135
  },
160
136
  "spec_version": "1.0",
161
- "version": 10,
162
- "x-tuf-on-ci-expiry-period": 182,
163
- "x-tuf-on-ci-signing-period": 31
137
+ "version": 15,
138
+ "x-tuf-on-ci-expiry-period": 197,
139
+ "x-tuf-on-ci-signing-period": 46
164
140
  }
165
141
  }
data/data/_store/prod/trusted_root.json CHANGED
@@ -8,12 +8,26 @@
8
8
  "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2G2Y+2tabdTV5BcGiBIx0a9fAFwrkBbmLSGtks4L3qX6yYY0zufBnhC8Ur/iy55GhWP/9A/bY2LhC30M9+RYtw==",
9
9
  "keyDetails": "PKIX_ECDSA_P256_SHA_256",
10
10
  "validFor": {
11
- "start": "2021-01-12T11:53:27.000Z"
11
+ "start": "2021-01-12T11:53:27Z"
12
12
  }
13
13
  },
14
14
  "logId": {
15
15
  "keyId": "wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="
16
16
  }
17
+ },
18
+ {
19
+ "baseUrl": "https://log2025-1.rekor.sigstore.dev",
20
+ "hashAlgorithm": "SHA2_256",
21
+ "publicKey": {
22
+ "rawBytes": "MCowBQYDK2VwAyEAt8rlp1knGwjfbcXAYPYAkn0XiLz1x8O4t0YkEhie244=",
23
+ "keyDetails": "PKIX_ED25519",
24
+ "validFor": {
25
+ "start": "2025-09-23T00:00:00Z"
26
+ }
27
+ },
28
+ "logId": {
29
+ "keyId": "zxGZFVvd0FEmjR8WrFwMdcAJ9vtaY/QXf44Y1wUeP6A="
30
+ }
17
31
  }
18
32
  ],
19
33
  "certificateAuthorities": [
@@ -31,7 +45,7 @@
31
45
  ]
32
46
  },
33
47
  "validFor": {
34
- "start": "2021-03-07T03:20:29.000Z",
48
+ "start": "2021-03-07T03:20:29Z",
35
49
  "end": "2022-12-31T23:59:59.999Z"
36
50
  }
37
51
  },
@@ -52,7 +66,7 @@
52
66
  ]
53
67
  },
54
68
  "validFor": {
55
- "start": "2022-04-13T20:06:15.000Z"
69
+ "start": "2022-04-13T20:06:15Z"
56
70
  }
57
71
  }
58
72
  ],
@@ -64,7 +78,7 @@
64
78
  "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbfwR+RJudXscgRBRpKX1XFDy3PyudDxz/SfnRi1fT8ekpfBd2O1uoz7jr3Z8nKzxA69EUQ+eFCFI3zeubPWU7w==",
65
79
  "keyDetails": "PKIX_ECDSA_P256_SHA_256",
66
80
  "validFor": {
67
- "start": "2021-03-14T00:00:00.000Z",
81
+ "start": "2021-03-14T00:00:00Z",
68
82
  "end": "2022-10-31T23:59:59.999Z"
69
83
  }
70
84
  },
@@ -79,7 +93,7 @@
79
93
  "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEiPSlFi0CmFTfEjCUqF9HuCEcYXNKAaYalIJmBZ8yyezPjTqhxrKBpMnaocVtLJBI1eM3uXnQzQGAJdJ4gs9Fyw==",
80
94
  "keyDetails": "PKIX_ECDSA_P256_SHA_256",
81
95
  "validFor": {
82
- "start": "2022-10-20T00:00:00.000Z"
96
+ "start": "2022-10-20T00:00:00Z"
83
97
  }
84
98
  },
85
99
  "logId": {
@@ -90,24 +104,22 @@
90
104
  "timestampAuthorities": [
91
105
  {
92
106
  "subject": {
93
- "organization": "GitHub, Inc.",
94
- "commonName": "Internal Services Root"
107
+ "organization": "sigstore.dev",
108
+ "commonName": "sigstore-tsa-selfsigned"
95
109
  },
110
+ "uri": "https://timestamp.sigstore.dev/api/v1/timestamp",
96
111
  "certChain": {
97
112
  "certificates": [
98
113
  {
99
- "rawBytes": "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"
100
- },
101
- {
102
- "rawBytes": "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"
114
+ "rawBytes": "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"
103
115
  },
104
116
  {
105
- "rawBytes": "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"
117
+ "rawBytes": "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"
106
118
  }
107
119
  ]
108
120
  },
109
121
  "validFor": {
110
- "start": "2023-04-14T00:00:00.000Z"
122
+ "start": "2025-07-04T00:00:00Z"
111
123
  }
112
124
  }
113
125
  ]
data/data/_store/staging/root.json CHANGED
@@ -2,11 +2,11 @@
2
2
  "signatures": [
3
3
  {
4
4
  "keyid": "aa61e09f6af7662ac686cf0c6364079f63d3e7a86836684eeced93eace3acd81",
5
- "sig": "304502204d5d01c2ae4b846cc6d29d7c5676f5d99ea464a69bd464fef16a5d0cdd4a616d022100bf73b2b11b68bf7a7047480bf0d5961a3a40c524f64a82e2c90f59d4083e498e"
5
+ "sig": "3046022100c62c76e750bbb87b08cc80551afb7371c08758b785ec2e8e1310c99ff8756597022100c9c1e0507f245e37bbfb5366d3e6f52cccbd9ab50a577086b5356c9c75399e0e"
6
6
  },
7
7
  {
8
8
  "keyid": "61f9609d2655b346fcebccd66b509d5828168d5e447110e261f0bcc8553624bc",
9
- "sig": "3044022005a8e904d484b7f4c3bac53ed6babeee303f6308f81f9ea29a7a1f6ad51068c20220641303f1e5ab14b151525c63ca95b35df64ffc905c8883f96cbee703ed45a2df"
9
+ "sig": "304402207096f2b7adc7d841512b7a4cb0a5f1f8a370d45a3b26b9fb6b0c4f98c35debab022016b8cafc0c7d244fc99350a651e280d595db69ae4ac2bf24d1c3b1db603ad2dc"
10
10
  },
11
11
  {
12
12
  "keyid": "9471fbda95411d10109e467ad526082d15f14a38de54ea2ada9687ab39d8e237",
@@ -20,7 +20,7 @@
20
20
  "signed": {
21
21
  "_type": "root",
22
22
  "consistent_snapshot": true,
23
- "expires": "2025-03-07T07:44:40Z",
23
+ "expires": "2027-03-13T01:31:42Z",
24
24
  "keys": {
25
25
  "0374a9e18a20a2103736cb4277e2fdd7f8453642c7d9eaf4ad8aee9cf2d47bb5": {
26
26
  "keytype": "ecdsa",
@@ -100,7 +100,7 @@
100
100
  }
101
101
  },
102
102
  "spec_version": "1.0",
103
- "version": 10,
103
+ "version": 15,
104
104
  "x-tuf-on-ci-expiry-period": 182,
105
105
  "x-tuf-on-ci-signing-period": 35
106
106
  }
data/data/_store/staging/trusted_root.json CHANGED
@@ -8,12 +8,70 @@
8
8
  "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDODRU688UYGuy54mNUlaEBiQdTE9nYLr0lg6RXowI/QV/RE1azBn4Eg5/2uTOMbhB1/gfcHzijzFi9Tk+g1Prg==",
9
9
  "keyDetails": "PKIX_ECDSA_P256_SHA_256",
10
10
  "validFor": {
11
- "start": "2021-01-12T11:53:27.000Z"
11
+ "start": "2021-01-12T11:53:27Z"
12
12
  }
13
13
  },
14
14
  "logId": {
15
15
  "keyId": "0y8wo8MtY5wrdiIFohx7sHeI5oKDpK5vQhGHI6G+pJY="
16
16
  }
17
+ },
18
+ {
19
+ "baseUrl": "https://log2025-alpha1.rekor.sigstage.dev",
20
+ "hashAlgorithm": "SHA2_256",
21
+ "publicKey": {
22
+ "rawBytes": "MCowBQYDK2VwAyEAPn+AREHoBaZ7wgS1zBqpxmLSGnyhxXj4lFxSdWVB8o8=",
23
+ "keyDetails": "PKIX_ED25519",
24
+ "validFor": {
25
+ "start": "2025-04-16T00:00:00Z",
26
+ "end": "2025-09-04T00:00:00Z"
27
+ }
28
+ },
29
+ "logId": {
30
+ "keyId": "8w1amZ2S5mJIQkQmPxdMuOrL/oJkvFg9MnQXmeOCXck="
31
+ }
32
+ },
33
+ {
34
+ "baseUrl": "https://log2025-alpha2.rekor.sigstage.dev",
35
+ "hashAlgorithm": "SHA2_256",
36
+ "publicKey": {
37
+ "rawBytes": "MCowBQYDK2VwAyEAkrA8Ou2FtN7kYXCP/lpvF8vQrvh4nj+91+PWOGGzfGc=",
38
+ "keyDetails": "PKIX_ED25519",
39
+ "validFor": {
40
+ "start": "2025-08-08T00:00:00Z",
41
+ "end": "2025-09-28T00:00:00Z"
42
+ }
43
+ },
44
+ "logId": {
45
+ "keyId": "KfSiSX2iRLyhK62SUVL47vVcqqRx/RAewpKJm8IdZTo="
46
+ }
47
+ },
48
+ {
49
+ "baseUrl": "https://log2025-alpha3.rekor.sigstage.dev",
50
+ "hashAlgorithm": "SHA2_256",
51
+ "publicKey": {
52
+ "rawBytes": "MCowBQYDK2VwAyEAlD3dVc8yaP25mPtT/sJ59D3LLxGBgW/qYrM6x6KmOqk=",
53
+ "keyDetails": "PKIX_ED25519",
54
+ "validFor": {
55
+ "start": "2025-09-22T00:00:00Z"
56
+ }
57
+ },
58
+ "logId": {
59
+ "keyId": "09OnDKEw7/hpZiYVPoTRzRbglHk0sylsUovegnRUlJY="
60
+ }
61
+ },
62
+ {
63
+ "baseUrl": "https://log2026-1.us-east4.rekor.sigstage.dev",
64
+ "hashAlgorithm": "SHA2_256",
65
+ "publicKey": {
66
+ "rawBytes": "MCowBQYDK2VwAyEAuAPzR9GRUMkt6Lcg7dcpy7C4Ys++gxQ2FFTPVBUhGfM=",
67
+ "keyDetails": "PKIX_ED25519",
68
+ "validFor": {
69
+ "start": "2026-06-12T00:00:00Z"
70
+ }
71
+ },
72
+ "logId": {
73
+ "keyId": "OnJxR1KbhM5Z+X3E97YQ4EV8/8t4W3TvgehmZLwxAkY="
74
+ }
17
75
  }
18
76
  ],
19
77
  "certificateAuthorities": [
@@ -34,7 +92,27 @@
34
92
  ]
35
93
  },
36
94
  "validFor": {
37
- "start": "2022-04-14T21:38:40.000Z"
95
+ "start": "2022-04-14T21:38:40Z"
96
+ }
97
+ },
98
+ {
99
+ "subject": {
100
+ "organization": "sigstore.dev",
101
+ "commonName": "sigstore"
102
+ },
103
+ "uri": "https://fulcio.sigstage.dev",
104
+ "certChain": {
105
+ "certificates": [
106
+ {
107
+ "rawBytes": "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"
108
+ },
109
+ {
110
+ "rawBytes": "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"
111
+ }
112
+ ]
113
+ },
114
+ "validFor": {
115
+ "start": "2026-06-12T00:00:00Z"
38
116
  }
39
117
  }
40
118
  ],
@@ -46,8 +124,8 @@
46
124
  "rawBytes": "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",
47
125
  "keyDetails": "PKCS1_RSA_PKCS1V5",
48
126
  "validFor": {
49
- "start": "2021-03-14T00:00:00.000Z",
50
- "end": "2022-07-31T00:00:00.000Z"
127
+ "start": "2021-03-14T00:00:00Z",
128
+ "end": "2022-07-31T00:00:00Z"
51
129
  }
52
130
  },
53
131
  "logId": {
@@ -61,8 +139,8 @@
61
139
  "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEh99xuRi6slBFd8VUJoK/rLigy4bYeSYWO/fE6Br7r0D8NpMI94+A63LR/WvLxpUUGBpY8IJA3iU2telag5CRpA==",
62
140
  "keyDetails": "PKIX_ECDSA_P256_SHA_256",
63
141
  "validFor": {
64
- "start": "2022-07-01T00:00:00.000Z",
65
- "end": "2022-07-31T00:00:00.000Z"
142
+ "start": "2022-07-01T00:00:00Z",
143
+ "end": "2022-07-31T00:00:00Z"
66
144
  }
67
145
  },
68
146
  "logId": {
@@ -76,12 +154,82 @@
76
154
  "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE8gEDKNme8AnXuPBgHjrtXdS6miHqc24CRblNEOFpiJRngeq8Ko73Y+K18yRYVf1DXD4AVLwvKyzdNdl5n0jUSQ==",
77
155
  "keyDetails": "PKIX_ECDSA_P256_SHA_256",
78
156
  "validFor": {
79
- "start": "2022-07-01T00:00:00.000Z"
157
+ "start": "2022-07-01T00:00:00Z"
80
158
  }
81
159
  },
82
160
  "logId": {
83
161
  "keyId": "KzC83GiIyeLh2CYpXnQfSDkxlgLynDPLXkNA/rKshno="
84
162
  }
163
+ },
164
+ {
165
+ "baseUrl": "https://log2026-1.ctfe.sigstage.dev",
166
+ "hashAlgorithm":"SHA2_256",
167
+ "publicKey": {
168
+ "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEv8+Fp+klTMlOd0FU+eekotPzlaF9orvv9ZgdLXq5+MmoGThLNigXIapXjW0lujsU6+ZHKZ6UPzSuz+V8YxLoQw==",
169
+ "keyDetails": "PKIX_ECDSA_P256_SHA_256",
170
+ "validFor": {
171
+ "start": "2026-01-14T00:00:00Z"
172
+ }
173
+ },
174
+ "logId": {
175
+ "keyId": "PmBxU3RuGJLgkLI2sUl2Jy9ntE1vks5vdxFKtyKgprY="
176
+ }
177
+ },
178
+ {
179
+ "baseUrl": "https://log2026-1.us-east4.ctfe.sigstage.dev",
180
+ "hashAlgorithm": "SHA2_256",
181
+ "publicKey": {
182
+ "rawBytes": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEa5Gw4tcbYtTUdKWLy6ovCgWUb0ggekCaMyVpw5RCxBKKbJpahWdRX4ArH3N/wtakd2qDmtjsFVV1jMw5cHbmGw==",
183
+ "keyDetails": "PKIX_ECDSA_P256_SHA_256",
184
+ "validFor": {
185
+ "start": "2026-06-12T00:00:00Z"
186
+ }
187
+ },
188
+ "logId": {
189
+ "keyId": "Fjj7Zk5I004nmb83WUyHasaCMoUO4fuTnFybtSxevIc="
190
+ }
191
+ }
192
+ ],
193
+ "timestampAuthorities": [
194
+ {
195
+ "subject": {
196
+ "organization": "sigstore.dev",
197
+ "commonName": "sigstore-tsa-selfsigned"
198
+ },
199
+ "uri": "https://timestamp.sigstage.dev/api/v1/timestamp",
200
+ "certChain": {
201
+ "certificates": [
202
+ {
203
+ "rawBytes": "MIICDzCCAZagAwIBAgIUCjWhBmHV4kFzxomWp/J98n4DfKcwCgYIKoZIzj0EAwMwOTEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MSAwHgYDVQQDExdzaWdzdG9yZS10c2Etc2VsZnNpZ25lZDAeFw0yNTAzMjgwOTE0MDZaFw0zNTAzMjYwODE0MDZaMC4xFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEVMBMGA1UEAxMMc2lnc3RvcmUtdHNhMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEx1v5F3HpD9egHuknpBFlRz7QBRDJu4aeVzt9zJLRY0lvmx1lF7WBM2c9AN8ZGPQsmDqHlJN2R/7+RxLkvlLzkc19IOx38t7mGGEcB7agUDdCF/Ky3RTLSK0Xo/0AgHQdo2owaDAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0OBBYEFKj8ZPYo3i7mO3NPVIxSxOGc3VOlMB8GA1UdIwQYMBaAFDsgRlletTJNRzDObmPuc3RH8gR9MBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMAoGCCqGSM49BAMDA2cAMGQCMESvVS6GGtF33+J19TfwENWJXjRv4i0/HQFwLUSkX6TfV7g0nG8VnqNHJLvEpAtOjQIwUD3uywTXorQP1DgbV09rF9Yen+CEqs/iEpieJWPst280SSOZ5Na+dyPVk9/8SFk6"
204
+ },
205
+ {
206
+ "rawBytes": "MIIB9zCCAXygAwIBAgIUCPExEFKiQh0dP4sp5ltmSYSSkFUwCgYIKoZIzj0EAwMwOTEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MSAwHgYDVQQDExdzaWdzdG9yZS10c2Etc2VsZnNpZ25lZDAeFw0yNTAzMjgwOTE0MDZaFw0zNTAzMjYwODE0MDZaMDkxFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEgMB4GA1UEAxMXc2lnc3RvcmUtdHNhLXNlbGZzaWduZWQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATt0tIDWyo4ARfL9BaSo0W5bJQEbKJTU/u7llvdjSI5aTkOAJa8tixn2+LEfPG4dMFdsMPtsIuU1qn2OqFiuMk6vHv/c+az25RQVY1oo50iMb0jIL3N4FgwhPFpZnCbQPOjRTBDMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBQ7IEZZXrUyTUcwzm5j7nN0R/IEfTAKBggqhkjOPQQDAwNpADBmAjEA2MI1VXgbf3dUOSc95hSRypBKOab18eh2xzQtxUsHvWeY+1iFgyMluUuNR6taoSmFAjEA31m2czguZhKYX+4JSKu5pRYhBTXAd8KKQ3xdPRX/qCaLvT2qJAEQ1YQM3EJRrtI7"
207
+ }
208
+ ]
209
+ },
210
+ "validFor": {
211
+ "start": "2025-04-09T00:00:00Z"
212
+ }
213
+ },
214
+ {
215
+ "subject": {
216
+ "organization": "sigstore.dev",
217
+ "commonName": "sigstore-tsa-selfsigned"
218
+ },
219
+ "uri": "https://timestamp.sigstage.dev/api/v1/timestamp",
220
+ "certChain": {
221
+ "certificates": [
222
+ {
223
+ "rawBytes": "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"
224
+ },
225
+ {
226
+ "rawBytes": "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"
227
+ }
228
+ ]
229
+ },
230
+ "validFor": {
231
+ "start": "2026-06-12T00:00:00Z"
232
+ }
85
233
  }
86
234
  ]
87
235
  }
data/lib/sigstore/error.rb CHANGED
@@ -24,11 +24,15 @@ module Sigstore
24
24
  class NoBundle < Error; end
25
25
  class NoSignature < Error; end
26
26
  class InvalidKey < Error; end
27
+ class MissingLogId < Error; end
27
28
  class InvalidCheckpoint < Error; end
28
29
  class InvalidVerificationInput < Error; end
29
30
 
30
31
  class Signing < Error; end
31
32
  class InvalidIdentityToken < Error; end
33
+ class InvalidSigningConfig < Error; end
34
+
35
+ class InvalidTimestamp < Error; end
32
36
 
33
37
  class MissingRekorEntry < Error; end
34
38
  class InvalidRekorEntry < Error; end