Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move verify logic to pkg #120

Merged
merged 2 commits into from
Nov 8, 2022
Merged

Conversation

hectorj2f
Copy link
Contributor

Signed-off-by: Hector Fernandez [email protected]

Summary

related to #119

Release Note

Move verify logic to its own package.

Documentation

@hectorj2f hectorj2f requested a review from a team as a code owner November 6, 2022 20:44
Signed-off-by: Hector Fernandez <[email protected]>
@codecov-commenter
Copy link

Codecov Report

Merging #120 (9c61a11) into main (5b514aa) will increase coverage by 0.30%.
The diff coverage is 12.82%.

@@            Coverage Diff             @@
##             main     #120      +/-   ##
==========================================
+ Coverage   51.31%   51.62%   +0.30%     
==========================================
  Files          14       15       +1     
  Lines         682      678       -4     
==========================================
  Hits          350      350              
+ Misses        295      291       -4     
  Partials       37       37              
Impacted Files Coverage Δ
cmd/timestamp-cli/app/verify.go 24.44% <0.00%> (+5.16%) ⬆️
pkg/verify/verify.go 14.70% <14.70%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

pkg/verify/verify.go Outdated Show resolved Hide resolved
pkg/verify/verify.go Outdated Show resolved Hide resolved
pkg/verify/verify_test.go Outdated Show resolved Hide resolved
pkg/verify/verify.go Outdated Show resolved Hide resolved
pkg/verify/verify.go Outdated Show resolved Hide resolved
pkg/verify/verify.go Outdated Show resolved Hide resolved
pkg/verify/verify.go Outdated Show resolved Hide resolved
pkg/verify/verify.go Outdated Show resolved Hide resolved
pkg/verify/verify.go Outdated Show resolved Hide resolved
cmd/timestamp-cli/app/verify.go Show resolved Hide resolved
cmd/timestamp-cli/app/verify.go Outdated Show resolved Hide resolved
pkg/tests/cli_test.go Outdated Show resolved Hide resolved
pkg/tests/cli_test.go Outdated Show resolved Hide resolved
Signed-off-by: Hector Fernandez <[email protected]>
@hectorj2f
Copy link
Contributor Author

@haydentherapper Thanks for the review! I addressed all your comments.

Copy link

@priyawadhwa priyawadhwa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice!

return verifyHashedMessages(ts.HashAlgorithm.New(), ts.HashedMessage, artifact)
}

func verifyTSRWithChain(ts *timestamp.Timestamp, certPool *x509.CertPool) error {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit (to @malancas for the other issue): We'll want to rename this function to make it clear that this takes a trust root store (a single cert pool) rather than a chain

@haydentherapper haydentherapper merged commit cad41bd into sigstore:main Nov 8, 2022
@hectorj2f hectorj2f deleted the move_verify_logic branch November 8, 2022 06:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants