almet/dangerzone
1
0
Fork 0
mirror of https://github.com/freedomofpress/dangerzone.git synced 2025-05-04 12:41:50 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

fixup! Download and verify cosign signatures

Browse source
This commit is contained in:
Alexis Métaireau 2025-02-12 11:40:36 +01:00
parent db33038c23
commit 5001328ae9
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
dangerzone/updater/signatures.py
View file

@ -232,8 +232,8 @@ def upgrade_container_image_airgapped(container_tar: str, pubkey: str) -> str:
def convert_oci_images_signatures( def convert_oci_images_signatures(
signatures_manifest: List[Dict], tmpdir: str signatures_manifest: Dict, tmpdir: str
) -> (str, List[Dict]): ) -> Tuple[str, List[Dict]]:
def _to_cosign_signature(layer: Dict) -> Dict: def _to_cosign_signature(layer: Dict) -> Dict:
signature = layer["annotations"]["dev.cosignproject.cosign/signature"] signature = layer["annotations"]["dev.cosignproject.cosign/signature"]
bundle = json.loads(layer["annotations"]["dev.sigstore.cosign/bundle"]) bundle = json.loads(layer["annotations"]["dev.sigstore.cosign/bundle"])