Skip to content

rekor: Fix checkpoint signature lookup#1514

Merged
jku merged 2 commits into
sigstore:mainfrom
jku:fix-checkpoint-sig-lookup
Aug 21, 2025
Merged

rekor: Fix checkpoint signature lookup#1514
jku merged 2 commits into
sigstore:mainfrom
jku:fix-checkpoint-sig-lookup

Conversation

@jku

@jku jku commented Aug 20, 2025

Copy link
Copy Markdown
Member

Checkpoint can have multiple signatures from multiple keys. We just want one of them to be the log key.

This looks like it will fix #1513

@jku jku force-pushed the fix-checkpoint-sig-lookup branch from 6a43f2c to b40c51f Compare August 20, 2025 09:27
Checkpoint can have multiple signatures from multiple keys.
We just want one of them to be the log key.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
@jku jku force-pushed the fix-checkpoint-sig-lookup branch from b40c51f to cdfdaab Compare August 20, 2025 09:31
@jku

jku commented Aug 20, 2025

Copy link
Copy Markdown
Member Author

@haydentherapper can you confirm this is what we want here: the log must have a signature in the checkpoint, otherwise we don't care about the signatures at this point.

@jku jku marked this pull request as ready for review August 20, 2025 09:45
@jku jku mentioned this pull request Aug 20, 2025
8 tasks

@Hayden-IO Hayden-IO left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great!

@jku

jku commented Aug 21, 2025

Copy link
Copy Markdown
Member Author

I'll merge as is. I was debating myself whether I need to add more tests for checkpoint... but conformance tests for this, that should be good enough

@jku jku enabled auto-merge (squash) August 21, 2025 07:19
@jku jku merged commit 0f23402 into sigstore:main Aug 21, 2025
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

issues with multiple checkpoint signatures

2 participants