Skip to content

_cli: don't warn on bare .sigstore if cert/sig is used#1179

Merged
woodruffw merged 2 commits intomainfrom
ww/fix-warning
Oct 23, 2024
Merged

_cli: don't warn on bare .sigstore if cert/sig is used#1179
woodruffw merged 2 commits intomainfrom
ww/fix-warning

Conversation

@woodruffw
Copy link
Copy Markdown
Member

This should fix #1178.

CC @sethmlarson

Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw woodruffw added the component:cli CLI components label Oct 22, 2024
@woodruffw woodruffw self-assigned this Oct 22, 2024
@woodruffw woodruffw requested a review from jku October 22, 2024 14:50
Copy link
Copy Markdown
Contributor

@sethmlarson sethmlarson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tried this branch locally and this fixes the warning in the referenced issue, thanks!

@woodruffw woodruffw enabled auto-merge (squash) October 23, 2024 18:04
@woodruffw woodruffw merged commit f849402 into main Oct 23, 2024
@woodruffw woodruffw deleted the ww/fix-warning branch October 23, 2024 18:06
@woodruffw woodruffw mentioned this pull request Oct 23, 2024
woodruffw added a commit that referenced this pull request Oct 25, 2024
This fixes the check added in #1179
by ensuring that we don't bypass the legacy bundle discovery behavior by
accident when trying to suppress the warning.

Signed-off-by: William Woodruff <william@trailofbits.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component:cli CLI components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Verification using disjoint materials warns about "bare" Sigstore bundle

3 participants