Skip to content

Conformance client update#1443

Merged
woodruffw merged 3 commits into
sigstore:mainfrom
jku:conformance-update
Jun 13, 2025
Merged

Conformance client update#1443
woodruffw merged 3 commits into
sigstore:mainfrom
jku:conformance-update

Conversation

@jku

@jku jku commented Jun 12, 2025

Copy link
Copy Markdown
Member

Fixes #821 by adding support for --trusted-root into our conformance client.

Annoyingly this requires writing a temporary (trust config) file on disk since that is what sigstore-python CLI needs instead of the provided trustedroot file.

This revealed a new issue #1442

@jku jku changed the title Conformance update Conformance client update Jun 12, 2025
Comment thread test/integration/sigstore-python-conformance Outdated
@jku jku force-pushed the conformance-update branch from 64dd17c to 08c7e84 Compare June 13, 2025 07:38
This contains working staging support

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
@jku jku force-pushed the conformance-update branch 2 times, most recently from c1f4419 to add5ac4 Compare June 13, 2025 07:46
conformance clients are given "--trusted-root" but sigstore-python
requires "--trust-config". Build a trust config and provide that in the
conformance client script.

The conformance scipt is getting closer and closer to the point where
just tweaking argv is not really the smart thing to do... but it's still
manageable.

This revealed a new bug so one test remains "xfail".

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
@jku jku force-pushed the conformance-update branch from add5ac4 to c9c3ad3 Compare June 13, 2025 07:48
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
@woodruffw woodruffw merged commit 7b532d4 into sigstore:main Jun 13, 2025
23 checks passed
@woodruffw

Copy link
Copy Markdown
Member

Thanks @jku!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Conformance: sigstore-python's conformance runner should support --trusted-root

2 participants