Updated the project.
This commit is contained in:
parent
5dfe9f128d
commit
7919556077
1550 changed files with 17063 additions and 40183 deletions
0
my-app/node_modules/@sigstore/verify/dist/tlog/dsse.d.ts
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/dsse.d.ts
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/dsse.js
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/dsse.js
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/hashedrekord.d.ts
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/hashedrekord.d.ts
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/hashedrekord.js
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/hashedrekord.js
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/index.d.ts
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/index.d.ts
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/index.js
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/index.js
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/intoto.d.ts
generated
vendored
Executable file → Normal file
0
my-app/node_modules/@sigstore/verify/dist/tlog/intoto.d.ts
generated
vendored
Executable file → Normal file
3
my-app/node_modules/@sigstore/verify/dist/tlog/intoto.js
generated
vendored
Executable file → Normal file
3
my-app/node_modules/@sigstore/verify/dist/tlog/intoto.js
generated
vendored
Executable file → Normal file
|
@ -42,11 +42,12 @@ function verifyIntoto002TLogBody(tlogEntry, content) {
|
|||
// Signature is double-base64-encoded in the tlog entry
|
||||
const tlogSig = base64Decode(tlogEntry.spec.content.envelope.signatures[0].sig);
|
||||
// Ensure that the signature in the bundle's DSSE matches tlog entry
|
||||
if (!content.compareSignature(Buffer.from(tlogSig, 'base64')))
|
||||
if (!content.compareSignature(Buffer.from(tlogSig, 'base64'))) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: 'tlog entry signature mismatch',
|
||||
});
|
||||
}
|
||||
// Ensure the digest of the bundle's DSSE payload matches the digest in the
|
||||
// tlog entry
|
||||
const tlogHash = tlogEntry.spec.content.payloadHash?.value || '';
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue