support verify by digest in conformance suite (#1326)

* support verify by digest in conformance suite Signed-off-by: Brian DeHamer <bdehamer@github.com> * bump conformance suite to v0.0.13 Signed-off-by: Brian DeHamer <bdehamer@github.com> --------- Signed-off-by: Brian DeHamer <bdehamer@github.com>
sigstore · Dec 4, 2024 · cd51310 · cd51310
1 parent eabe1a6
commit cd51310
Show file tree

Hide file tree

Showing 5 changed files with 245 additions and 45 deletions.
diff --git a/.changeset/tame-wasps-decide.md b/.changeset/tame-wasps-decide.md
@@ -0,0 +1,5 @@
+---
+'@sigstore/conformance': minor
+---
+
+Support verification by artifact OR artifact digest
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
@@ -26,7 +26,7 @@ jobs:
       run: npm ci
     - name: Build sigstore-js
       run: npm run build
-    - uses: sigstore/sigstore-conformance@ee4de0e602873beed74cf9e49d5332529fe69bf6 # v0.0.11
+    - uses: sigstore/sigstore-conformance@6bd1c54e236c9517da56f7344ad16cc00439fe19 # v0.0.13
       with:
         entrypoint: ${{ github.workspace }}/packages/conformance/bin/run
         xfail: "test_verify_with_trust_root"
@@ -46,7 +46,7 @@ jobs:
       run: npm ci
     - name: Build sigstore-js
       run: npm run build
-    - uses: sigstore/sigstore-conformance@ee4de0e602873beed74cf9e49d5332529fe69bf6 # v0.0.11
+    - uses: sigstore/sigstore-conformance@6bd1c54e236c9517da56f7344ad16cc00439fe19 # v0.0.13
       with:
         entrypoint: ${{ github.workspace }}/packages/conformance/bin/run
         environment: staging
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/conformance/package.json b/packages/conformance/package.json
@@ -21,9 +21,11 @@
     "@sigstore/bundle": "^3.0.0",
     "@sigstore/protobuf-specs": "^0.3.2",
     "@sigstore/verify": "^2.0.0",
+    "elliptic": "^6.6.1",
     "sigstore": "^3.0.0"
   },
   "devDependencies": {
+    "@types/elliptic": "^6.4.18",
     "oclif": "^4",
     "tslib": "^2.8.1"
   },