Skip to content

issues Search Results · repo:sigstore/sigstore-java language:Java

Filter by

119 results
 (84 ms)

119 results

insigstore/sigstore-java (press backspace or delete to remove)

sigstore/sigstore-java
Remove oidc config from gradle plugin

I think this config is unnecessary and is a bit complicated. In the future if a user truly needs this, we can add it back in. But weboidc should be configured from signing config. And ambient creds can ...
  • loosebazooka
  • 1
  • Opened 
    5 hours ago
  • #1043

sigstore/sigstore-java
Longer timeouts for default httpconfig for rekor v2

Longer timeout for rekor v2 could be 10 or 20 seconds (even if server is configured much lower)
  • loosebazooka
  • Opened 
    6 days ago
  • #1039

sigstore/sigstore-java
Get Rekor v2 service from TUF signing config when in prod

The staging URL for Rekor v2 is currently being hardcoded. This issue proposes to get the Rekor v2 service from the TUF signing config when in prod.
  • aaronlew02
  • Opened 
    13 days ago
  • #1033

sigstore/sigstore-java
Remove LegacySigningConfig

This issue proposes to remove the LegacySigningConfig since the signing config has been pushed to the TUF repo.
  • aaronlew02
  • Opened 
    14 days ago
  • #1030

sigstore/sigstore-java
Add DSSE envelope checks for Rekor v2

This issue proposes to add validity checks for a DSSE envelope in a Rekor v2 entry.
  • aaronlew02
  • Opened 
    20 days ago
  • #1023

sigstore/sigstore-java
Test keyless signing and verification against Rekor v2 in prod when available

  • aaronlew02
  • Opened 
    20 days ago
  • #1022

sigstore/sigstore-java
Fix handling of empty SET in RekorVerifier

Bundle reader is reading in an SET as empty and then we re trying to verify an empty SET. I think we need to either detect empty at the bundle reader level and set it to null (https://github.com/sigstore/sigstore-java/blob/0438cdcff2f7560008c0d16dd17d04dd75da1ec1/sigstore-java/src/main/java/dev/sigstore/bundle/BundleReader.java#L81-L84) ...
  • aaronlew02
  • Opened 
    21 days ago
  • #1019

sigstore/sigstore-java
Update handling of integrated_time once field becomes optional

Since integrated_time is a required field in the bundle proto, it has been considered a missing field if not initialized when writing to a bundle. The field has been temporarily removed from the missing ...
  • aaronlew02
  • Opened 
    21 days ago
  • #1018

sigstore/sigstore-java
Unify Rekor v1 and v2 verifiers

This issue proposes to unify the RekorVerifier (used to verify Rekor v1 entries) and RekorV2Verifier (used to verify Rekor v2 entries) into a single RekorVerifier capable of verifying both versions.
  • aaronlew02
  • Opened 
    29 days ago
  • #1015

sigstore/sigstore-java
Allow RekorEntry to be built from TransparencyLogEntry

This issue proposes that the RekorEntry object be modified to allow building from a TransparencyLogEntry proto returned from Rekor v2. This will allow for universal use of RekorEntry.
  • aaronlew02
  • Opened 
    29 days ago
  • #1012
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue search results · GitHub