From 94c92b0f872469841cbeb656ed51e0694c46d860 Mon Sep 17 00:00:00 2001 From: Trishank Karthik Kuppusamy Date: Fri, 27 Dec 2024 10:50:09 -0500 Subject: [PATCH 1/4] minor edits to docs Signed-off-by: Trishank Karthik Kuppusamy --- docs/signing.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/signing.md b/docs/signing.md index 404545f4..110dfe6c 100644 --- a/docs/signing.md +++ b/docs/signing.md @@ -12,7 +12,7 @@ This document will walk you through using `sigstore-go` to generate a Sigstore b Clone this repository and run the following command: ```shell -$ make examples +$ make build-examples $ go install ./examples/sigstore-go-signing ``` From b5588ffe62b29c2922f3347dea4d7904f4b3831f Mon Sep 17 00:00:00 2001 From: Trishank Karthik Kuppusamy Date: Sun, 29 Dec 2024 08:53:33 -0500 Subject: [PATCH 2/4] Update verification.md Signed-off-by: Trishank Karthik Kuppusamy --- docs/verification.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/docs/verification.md b/docs/verification.md index b0b16c45..aba9afe5 100644 --- a/docs/verification.md +++ b/docs/verification.md @@ -63,12 +63,8 @@ Going through this step-by-step, we'll start by loading the trusted root from th if err != nil { panic(err) } - trustedrootJSON, err := client.GetTarget("trusted_root.json") - if err != nil { - panic(err) - } - trustedMaterial, err := root.NewTrustedRootFromJSON(trustedrootJSON) + trustedMaterial, err := root.GetTrustedRoot(client) if err != nil { panic(err) } From 71209c71d28983aa3e04b3bea106b546194fcf0e Mon Sep 17 00:00:00 2001 From: Trishank Karthik Kuppusamy Date: Sun, 29 Dec 2024 08:54:23 -0500 Subject: [PATCH 3/4] Update verification.md Signed-off-by: Trishank Karthik Kuppusamy --- docs/verification.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/docs/verification.md b/docs/verification.md index aba9afe5..3858db8b 100644 --- a/docs/verification.md +++ b/docs/verification.md @@ -197,12 +197,8 @@ func main() { if err != nil { panic(err) } - trustedrootJSON, err := client.GetTarget("trusted_root.json") - if err != nil { - panic(err) - } - trustedMaterial, err := root.NewTrustedRootFromJSON(trustedrootJSON) + trustedMaterial, err := root.GetTrustedRoot(client) if err != nil { panic(err) } From a50a77378eb52bfd86f6f847f29a2b544b91b05e Mon Sep 17 00:00:00 2001 From: Trishank Karthik Kuppusamy Date: Sun, 29 Dec 2024 09:30:05 -0500 Subject: [PATCH 4/4] Update signed_entity.go `WithoutAnyObserverTimestampsUnsafe` doesn't seem to exist anymore Signed-off-by: Trishank Karthik Kuppusamy --- pkg/verify/signed_entity.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/verify/signed_entity.go b/pkg/verify/signed_entity.go index 857596d9..918bf545 100644 --- a/pkg/verify/signed_entity.go +++ b/pkg/verify/signed_entity.go @@ -192,7 +192,7 @@ func WithCurrentTime() VerifierOption { func (c *VerifierConfig) Validate() error { if !c.requireObserverTimestamps && !c.requireSignedTimestamps && !c.requireIntegratedTimestamps && !c.useCurrentTime { return errors.New("when initializing a new SignedEntityVerifier, you must specify at least one of " + - "WithObserverTimestamps(), WithSignedTimestamps(), WithIntegratedTimestamps(), or WithoutAnyObserverTimestampsUnsafe()") + "WithObserverTimestamps(), WithSignedTimestamps(), or WithIntegratedTimestamps()") } return nil