sigstore-rs
sigstore-rs copied to clipboard
verify: init
Summary
Complementary half of #310, enable the verification of bundles:
$ cargo run --manifest-path tests/conformance/Cargo.toml -- sign-bundle --bundle bundle.txt.sigstore --identity-token $(sigstore-python get-identity-token) bundle.txt
# ...
Operation succeeded!
$ cargo run --manifest-path tests/conformance/Cargo.toml -- verify-bundle --bundle bundle.txt.sigstore --certificate-identity [email protected] --certificate-oidc-issuer https://github.com/login/oauth bundle.txt
# ...
Operation succeeded!