Skip to content

feat: direct verification of bundle with sigstore-go - #5177

Open
brandtkeller wants to merge 9 commits into
mainfrom
5172_sigstore_verify
Open

feat: direct verification of bundle with sigstore-go#5177
brandtkeller wants to merge 9 commits into
mainfrom
5172_sigstore_verify

feat: isolate kms providers from either implementation

b2e154a
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Aug 7, 2026 in 0s

54.25% (+0.00%) compared to f8fc9e7

View this Pull Request on Codecov

54.25% (+0.00%) compared to f8fc9e7

Details

Codecov Report

❌ Patch coverage is 55.67376% with 125 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
src/pkg/signing/sigstore.go 55.19% 88 Missing and 37 partials ⚠️
Files with missing lines Coverage Δ
src/pkg/packager/layout/package.go 70.56% <100.00%> (+0.05%) ⬆️
src/pkg/signing/cosign.go 76.88% <ø> (-1.08%) ⬇️
src/pkg/signing/sigstore.go 55.19% <55.19%> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.