almet/dangerzone
1
0
Fork 0
mirror of https://github.com/freedomofpress/dangerzone.git synced 2025-05-04 04:31:49 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

fixup! Download and verify cosign signatures

Browse source
This commit is contained in:
Alexis Métaireau 2025-02-26 17:11:44 +01:00
parent a82ba2897b
commit 2aeb53a3b4
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
dangerzone/updater/signatures.py
View file

@ -367,6 +367,8 @@ def store_signatures(signatures: list[Dict], image_digest: str, pubkey: str) ->
It can be converted to the one expected by cosign verify --bundle with It can be converted to the one expected by cosign verify --bundle with
the `signature_to_bundle()` function. the `signature_to_bundle()` function.
This function must be used only if the provided signatures have been verified.
""" """
def _get_digest(sig: Dict) -> str: def _get_digest(sig: Dict) -> str: