Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
The bug that this test was meant to address[1] applies to a feature that was removed from cosign[2]. The updates made to the script to allow for the breaking changes actually make the test invalid, because while it was once verifying the original artifact signature, the final verification step is now actually verifying against the uploaded rekor entry, so the original signature is inconsequential. [1] sigstore#1673 [2] sigstore#2425 Signed-off-by: Colleen Murphy <colleenmurphy@google.com>
- Loading branch information