diff --git a/EXAMPLES.md b/EXAMPLES.md index 03056677c185..7a05ea01b0ba 100644 --- a/EXAMPLES.md +++ b/EXAMPLES.md @@ -44,7 +44,7 @@ Verification for us.gcr.io/dlorenc-vmtest2/demo -- The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key - - Any certificates were verified against the Fulcio roots. + - The code-signing certificate was verified using trusted certificate authority certificates {"critical":{"identity":{"docker-reference":"us.gcr.io/dlorenc-vmtest2/demo"},"image":{"docker-manifest-digest":"sha256:124e1fdee94fe5c5f902bc94da2d6e2fea243934c74e76c2368acdc8d3ac7155"},"type":"cosign container image signature"},"optional":null} ``` diff --git a/KEYLESS.md b/KEYLESS.md index e2413f957867..966d262c84ff 100644 --- a/KEYLESS.md +++ b/KEYLESS.md @@ -36,7 +36,7 @@ The following checks were performed on all of these signatures: - The cosign claims were validated - The claims were present in the transparency log - The signatures were integrated into the transparency log when the certificate was valid - - Any certificates were verified against the Fulcio roots. + - The code-signing certificate was verified using trusted certificate authority certificates Certificate subject: dlorenc@google.com {"Critical":{"Identity":{"docker-reference":""},"Image":{"Docker-manifest-digest":"sha256:97fc222cee7991b5b061d4d4afdb5f3428fcb0c9054e1690313786befa1e4e36"},"Type":"cosign container image signature"},"Optional":null} ``` diff --git a/KMS.md b/KMS.md index a046d90608d6..3c24a3d850d4 100644 --- a/KMS.md +++ b/KMS.md @@ -52,7 +52,7 @@ Verification for gcr.io/dlorenc-vmtest2/demo -- The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key - - Any certificates were verified against the Fulcio roots. + - The code-signing certificate was verified using trusted certificate authority certificates [{"critical":{"identity":{"docker-reference":"gcr.io/dlorenc-vmtest2/demo"},"image":{"docker-manifest-digest":"sha256:410a07f17151ffffb513f942a01748dfdb921de915ea6427d61d60b0357c1dcd"},"type":"cosign container image signature"},"optional":null}] ``` diff --git a/PKCS11.md b/PKCS11.md index 35c900452a72..2c2df33794bb 100644 --- a/PKCS11.md +++ b/PKCS11.md @@ -74,7 +74,7 @@ Verification for gcr.io/dlorenc-vmtest2/demo -- The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key -- Any certificates were verified against the Fulcio roots. +- The code-signing certificate was verified using trusted certificate authority certificates [{"critical":{"identity":{"docker-reference":"gcr.io/dlorenc-vmtest2/demo"},"image":{"docker-manifest-digest":"sha256:410a07f17151ffffb513f942a01748dfdb921de915ea6427d61d60b0357c1dcd"},"type":"cosign container image signature"},"optional":null}] ``` @@ -89,7 +89,7 @@ Verification for gcr.io/dlorenc-vmtest2/demo -- The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key -- Any certificates were verified against the Fulcio roots. +- The code-signing certificate was verified using trusted certificate authority certificates [{"critical":{"identity":{"docker-reference":"gcr.io/dlorenc-vmtest2/demo"},"image":{"docker-manifest-digest":"sha256:410a07f17151ffffb513f942a01748dfdb921de915ea6427d61d60b0357c1dcd"},"type":"cosign container image signature"},"optional":null}] diff --git a/README.md b/README.md index fc9f8030dc34..b714948f0e8b 100644 --- a/README.md +++ b/README.md @@ -255,7 +255,7 @@ The following checks were performed on each of these signatures: - The cosign claims were validated - Existence of the claims in the transparency log was verified offline - The signatures were verified against the specified public key - - Any certificates were verified against the Fulcio roots. + - The code-signing certificate was verified using trusted certificate authority certificates ``` The signature, claims and transparency log proofs are all verified automatically by sget as part of the download. @@ -578,7 +578,7 @@ The following checks were performed on each of these signatures: - The claims were present in the transparency log - The signatures were integrated into the transparency log when the certificate was valid - The signatures were verified against the specified public key - - Any certificates were verified against the Fulcio roots. + - The code-signing certificate was verified using trusted certificate authority certificates {"Critical":{"Identity":{"docker-reference":""},"Image":{"Docker-manifest-digest":"sha256:551e6cce7ed2e5c914998f931b277bc879e675b74843e6f29bc17f3b5f692bef"},"Type":"cosign container image signature"},"Optional":null} ``` diff --git a/TOKENS.md b/TOKENS.md index 54662aed2908..6079e21c88d3 100644 --- a/TOKENS.md +++ b/TOKENS.md @@ -113,7 +113,7 @@ Verification for gcr.io/dlorenc-vmtest2/demo -- The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key - - Any certificates were verified against the Fulcio roots. + - The code-signing certificate was verified using trusted certificate authority certificates [{"critical":{"identity":{"docker-reference":"gcr.io/dlorenc-vmtest2/demo"},"image":{"docker-manifest-digest":"sha256:410a07f17151ffffb513f942a01748dfdb921de915ea6427d61d60b0357c1dcd"},"type":"cosign container image signature"},"optional":null}] ``` @@ -129,7 +129,7 @@ Verification for gcr.io/dlorenc-vmtest2/demo -- The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key - - Any certificates were verified against the Fulcio roots. + - The code-signing certificate was verified using trusted certificate authority certificates [{"critical":{"identity":{"docker-reference":"gcr.io/dlorenc-vmtest2/demo"},"image":{"docker-manifest-digest":"sha256:410a07f17151ffffb513f942a01748dfdb921de915ea6427d61d60b0357c1dcd"},"type":"cosign container image signature"},"optional":null}] ``` diff --git a/cmd/cosign/cli/verify/verify.go b/cmd/cosign/cli/verify/verify.go index 64d8ca0d83ce..6b1b1ebe7fdf 100644 --- a/cmd/cosign/cli/verify/verify.go +++ b/cmd/cosign/cli/verify/verify.go @@ -308,7 +308,7 @@ func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified fmt.Fprintln(os.Stderr, " - The signatures were verified against the specified public key") } if fulcioVerified { - fmt.Fprintln(os.Stderr, " - Any certificates were verified against the Fulcio roots.") + fmt.Fprintln(os.Stderr, " - The code-signing certificate was verified using trusted certificate authority certificates") } }