Skip to content

Support verbatim subject descriptors when writing bundle referrers#562

Merged
codysoyland merged 4 commits into
mainfrom
verbatim-subject-descriptors
Jun 12, 2026
Merged

Support verbatim subject descriptors when writing bundle referrers#562
codysoyland merged 4 commits into
mainfrom
verbatim-subject-descriptors

secant: strengthen referrer write tests

b7dd668
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Jun 12, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341691001448897550643659155637917836198442206378 (0x3bd9f454d3316b22d1b9ecdc9ebfa57dd3d884aa)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Jun 11 21:12:40 2026 UTC
            Not After : Jun 11 21:22:40 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    f7:93:e4:ab:ea:1d:89:34:c1:f3:3e:bc:80:05:d2:
                    ac:e9:da:19:b4:fd:45:b7:4f:9c:3c:de:ee:9a:21:
                    16:1b
                Y:
                    4a:12:e4:ad:ea:3a:16:ca:4f:2b:de:1e:56:c3:0a:
                    be:08:63:68:69:dd:07:6b:23:ff:32:8e:fb:37:d4:
                    68:2c
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                7A:AA:3C:A0:06:DE:B0:94:40:31:E0:DE:CE:62:D4:81:A4:87:48:A2
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:cody.soyland@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABnriHsJYAAAQDAEcwRQIhAKoN1CbhZg+okoZfz0BrqmDESrrMvxmv0mvVXqgfriBtAiAh5qTVMLzGk7ymxCpGXfS5gUafOjFNTZIlEOjEYmVu4A==

    Signature Algorithm: ECDSA-SHA384
         30:64:02:30:5e:5d:93:ef:be:ab:b9:6b:72:01:50:81:50:fd:
         9f:7e:41:fd:66:96:b6:0b:ab:e8:3a:d3:61:0d:ae:de:5d:9f:
         29:a7:5a:95:4e:9b:6b:99:74:23:bf:cd:9d:ff:5e:e2:02:30:
         19:65:cd:e7:25:ec:29:09:18:c1:f3:89:a9:7a:0c:ba:0c:60:
         11:e4:e4:2d:47:c9:22:6c:65:75:1e:bd:7f:07:80:51:92:d7:
         46:96:e5:e9:cc:fb:3c:92:c6:a2:92:d3

Rekor Entry

Details
{
  "body": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI5OTM4MzEwMmZhYWJiMzc2ZjAwNzgyMDBiMTBiYmVhMTNkOTZhMzNmOTBiYjcwMmQ3YTNmMDY5MjNjZmE5M2U3In19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FWUNJUUMzSUwxM012dkRFNE1LVkp3Ky9sQkVKbk16ck9zZE5WOTJrZDIwenhsME93SWhBTUpnMXJYZkJmUUY2THV0N0J5SVlvOHhYT2w3N01Ub1RlWEowempTMnQ5aiIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVUk5SRU5EUVhKbFowRjNTVUpCWjBsVlR6bHVNRlpPVFhoaGVVeFNkV1Y2WTI1eUsyeG1aRkJaYUV0dmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDVxUlhoTmFrVjRUV3BSZDFkb1kwNU5hbGwzVG1wRmVFMXFSWGxOYWxGM1YycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVU1TlZCcmNTdHZaR2xVVkVJNGVqWTRaMEZZVTNKUGJtRkhZbFE1VW1Ka1VHNUVlbVVLTjNCdmFFWm9kRXRGZFZOME5tcHZWM2xyT0hJemFEVlhkM2R4SzBOSFRtOWhaREJJWVhsUUwwMXZOemRPT1ZKdlRFdFBRMEZrV1hkblowaFRUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZsY1c4NENtOUJZbVZ6U2xKQlRXVkVaWHB0VEZWbllWTklVMHRKZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDB0UldVUldVakJTUVZGSUwwSkNPSGRJV1VWaVdUSTVhMlZUTlhwaU0yeHpXVmMxYTFGSFRtOVpWMngxV2pOV2FHTnRVWFZhUjFZeVRVTnJSd3BEYVhOSFFWRlJRbWMzT0hkQlVVVkZSekpvTUdSSVFucFBhVGgyV1ZkT2FtSXpWblZrU0UxMVdqSTVkbG95ZUd4TWJVNTJZbFJCY2tKbmIzSkNaMFZGQ2tGWlR5OU5RVVZKUWtJd1RVY3lhREJrU0VKNlQyazRkbGxYVG1waU0xWjFaRWhOZFZveU9YWmFNbmhzVEcxT2RtSlVRbUpDWjI5eVFtZEZSVUZaVHk4S1RVRkZXVUpGTUUxVE1FNXZWbGhvVGxaR1JqWlViWEJDWlZVeFZWSlVWazVXUmxWNVZGWlNjazVWTlhGU1dHeFBVa1ZHVkZORVNtOU5SMUpKVVc1d1VBcGhWbFkxVlcxc1ZtVldTblJTYlhCYVRXcHJlRmx0TlZObGEzaDBXa2hhYVUxdFVucFhiRTB4WVcxSmVVMUVRMEpwWjFsTFMzZFpRa0pCU0ZkbFVVbEZDa0ZuVWpoQ1NHOUJaVUZDTWtGT01EbE5SM0pIZUhoRmVWbDRhMlZJU214dVRuZExhVk5zTmpRemFubDBMelJsUzJOdlFYWkxaVFpQUVVGQlFtNXlhVWdLYzBwWlFVRkJVVVJCUldOM1VsRkphRUZMYjA0eFEySm9XbWNyYjJ0dldtWjZNRUp5Y1cxRVJWTnljazEyZUcxMk1HMTJWbGh4WjJaeWFVSjBRV2xCYUFvMWNWUldUVXg2UjJzM2VXMTRRM0JIV0daVE5XZFZZV1pQYWtaT1ZGcEpiRVZQYWtWWmJWWjFORVJCUzBKblozRm9hMnBQVUZGUlJFRjNUbTVCUkVKckNrRnFRbVZZV2xCMmRuRjFOV0V6U1VKVlNVWlJMMW81SzFGbU1XMXNjbGxNY1N0bk5qQXlSVTV5ZERWa2JubHRibGR3Vms5dE1uVmFaRU5QTDNwYU15OEtXSFZKUTAxQ2JHeDZaV05zTjBOclNrZE5TSHBwWVd3MlJFeHZUVmxDU0dzMVF6RkllVk5LYzFwWVZXVjJXRGhJWjBaSFV6RXdZVmMxWlc1TkszcDVVd3A0Y1V0VE1IYzlQUW90TFMwdExVVk9SQ0JEUlZKVVNVWkpRMEZVUlMwdExTMHRDZz09In19fX0=",
  "integratedTime": 1781212361,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 1793578621,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1681943556\nyYdGh5I264YvSWw0KDf0K7377611G8VD1E4qHSxhYm4=\n\n— rekor.sigstore.dev wNI9ajBGAiEArsnUpDAeNQO9LZ0Nb9o1oMIaZie4efJLuW1WbYx0q+sCIQD3YKcEHQYPVtljjt76xq9DP3w+VCwoWuvh57W4gkdsqw==\n",
      "hashes": [
        "5b7aee94ab156cb3ab5ff28f61b943a7de3f866b2e8dc059273f39d234b7ac6f",
        "cb5cb6605a59d94d42c5b2c30170c8fd0e165e66522614b8126e83878ce91c30",
        "e911fa8b4538c686986332ba4b4621618685f89c13593efb1df6640c6e80ae0d",
        "f2512c5454a56c99a2a4c8185d36cd111e45b3849252a232505410d022de6e6b",
        "6fee773edd52bf8052803cd681ba6d2ccb3cf4b94b4f8973e42843266cf8ce51",
        "e957e7ab2999768bd5d9c1fd0885a7be6e0f47d2770b6e007dd52ecf967ef22e",
        "16e9b3230eec654dc5215aee0f2898c88f378b06bccb41d311c7e22929402ab9",
        "c6fe9eb326c64178a76e8e80b1787a1c28b3feea9255b97c7e0b63a8b5609826",
        "3bbc72d681ce6e16a6bc3f501c388ca4691835ba2ce95929796c0df50947b342",
        "fe8897d288ce4d9f99f40a57d778a8cb0aa7cada612113216c86a56e16717454",
        "65d2e5ab3c464322fc0d9e39437ae8fc9f33ca928caa80cd2b9736abacf82b4d",
        "8b5d45fb78890831c562dc81292e27bedbb80dedceec84cc0315340c37d384a4",
        "72a41dc3edf97b299ecb6d54e16ac8710b9713a60e18e6337defd87b97070c72",
        "13a29bc4abd210a274c95f26ba150b1021dbf077861014b281f83ff898d56f02",
        "f397523c2ce96b7ecf9f60b421cfd8dc936800f3829c908e0227a22f6c4da763",
        "26f08ab29f21f744c2d48871fabcaaa84ab90a04847a3f6133d52a6bf55255aa",
        "e87c03a2c62b2b3bc01c1a0b1144bdf3903d2992dd7ca52890111643af3bfd24",
        "b68276b3f16decfb1a5512b8b8628ecc6446ccfe116b3512f145def6e9a0751d",
        "475dbbad5a59fdd8464fb2c96030ea9330c6e47a59920f9416c98199619a9e41",
        "d9b216b76d1dbf12229e3c81ad7fed7fb4e7c7b0d85b887679df4afa76fe44d3",
        "0259e1f29f2696e107738fb1b72947772c8bbdd94ca0e50a078d0f21aedb1cbd",
        "28bd8c92259094a1191fcd410d848cb48d41428875e7bdf65215b9eb3e23292d",
        "e5677b6b8f6068d8f1b0ab4fc25c88ffc987df8766e09202e6426ac48fa4a08a",
        "9b0ae94ff5ba07d0a84ecad92a50a070ecf950242b551d19c4bd7a4d6efc03f1",
        "1662ef931b998ff9de4327a91325e13968b7980834d90228869db39381c358af",
        "98309d03cb7f2c673e86a895d123b2a8f5e53983f25a96ac45a0c3bc20bc2401",
        "8b4d3b645f5fd724aab50116b5cc12489f1bdfe0fcc0c6d2479155bd5d41b78e",
        "75ac6665a6a3469655f89c4788e61984906248a379b9caa38765a719b1e18abc",
        "0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
      ],
      "logIndex": 1671674359,
      "rootHash": "c98746879236eb862f496c342837f42bbdfbefad751bc543d44e2a1d2c61626e",
      "treeSize": 1681943556
    },
    "signedEntryTimestamp": "MEUCIQC56B44LPKwdo0GiBvgQAZnq+DUwhQsZOLI0TpcXTC7JQIgTINSG0B0qTMS5mF7032Z7j4BQdfmyMCkRaXdQbglNI8="
  }
}