Skip to content

Conversation

jku
Copy link
Member

@jku jku commented Aug 20, 2025

Checkpoint can have multiple signatures from multiple keys. We just want one of them to be the log key.

This looks like it will fix #1513

@jku jku force-pushed the fix-checkpoint-sig-lookup branch from 6a43f2c to b40c51f Compare August 20, 2025 09:27
Checkpoint can have multiple signatures from multiple keys.
We just want one of them to be the log key.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
@jku jku force-pushed the fix-checkpoint-sig-lookup branch from b40c51f to cdfdaab Compare August 20, 2025 09:31
@jku
Copy link
Member Author

jku commented Aug 20, 2025

@haydentherapper can you confirm this is what we want here: the log must have a signature in the checkpoint, otherwise we don't care about the signatures at this point.

@jku jku marked this pull request as ready for review August 20, 2025 09:45
@jku jku mentioned this pull request Aug 20, 2025
8 tasks
Copy link
Contributor

@haydentherapper haydentherapper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great!

@jku
Copy link
Member Author

jku commented Aug 21, 2025

I'll merge as is. I was debating myself whether I need to add more tests for checkpoint... but conformance tests for this, that should be good enough

@jku jku enabled auto-merge (squash) August 21, 2025 07:19
@jku jku merged commit 0f23402 into sigstore:main Aug 21, 2025
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

issues with multiple checkpoint signatures
2 participants