Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reject tags in cosigned. #799

Merged
merged 1 commit into from
Sep 25, 2021
Merged

Reject tags in cosigned. #799

merged 1 commit into from
Sep 25, 2021

Commits on Sep 25, 2021

  1. Reject tags in cosigned. 

    This change makes `cosigned` reject tag references, which can drift after validation has occured rendering the validation we perform ineffective.

This also adds unit test coverage for the bulk of the `webhook` package.

A subsequent change will introduce a mutating webhook that resolves tags to digests (we still need to validating webhook due to webhook ordering).

Related: sigstore#784
Signed-off-by: Matt Moore <[email protected]>
    @mattmoor
    mattmoor committed Sep 25, 2021
    Configuration menu
    Copy the full SHA
    b30d7e8 View commit details
    Browse the repository at this point in the history