Skip to content

Include OIDC in signing config, use TUF in examples#102

Merged
wolfv merged 4 commits into
sigstore:mainfrom
jku:oidc-in-signing-config
May 28, 2026
Merged

Include OIDC in signing config, use TUF in examples#102
wolfv merged 4 commits into
sigstore:mainfrom
jku:oidc-in-signing-config

Conversation

@jku

@jku jku commented May 27, 2026

Copy link
Copy Markdown
Member
  • Include OIDC URL in SigningConfig -- This makes e.g. signing examples work with "--staging" while interactive.
  • Support URL argument in get_identity_token() -- This way the oidc usage remains simple even with dynamic URL
  • Support "--staging" in the verify example -- this is just a QOL improvement for testing things with the example, not really required
  • Examples: Use TUF throughout -- This feels appropriate to me: let's mainly show the usage that is most likely to be correct for most users

jku added 4 commits May 27, 2026 11:46
This makes e.g. signing examples work with --staging.

Examples have been modified so the oidc token request happens
after TUF config.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
This way the OIDC URL is not hard coded

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
I think this is appropriate: We should mainly show the likely "correct"
way to use the library.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
@jku jku force-pushed the oidc-in-signing-config branch from 6b8f370 to 285522b Compare May 27, 2026 09:49
@jku jku mentioned this pull request May 27, 2026
@wolfv wolfv merged commit 2d1d49f into sigstore:main May 28, 2026
16 checks passed
@wolfv wolfv mentioned this pull request May 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants