Skip to content

fix(sigstore_driver): Get all the digests in the image ref and sign them#705

Merged
gmpinder merged 1 commit intomainfrom
704-sigstore-driver-doesnt-recursively-sign
Feb 24, 2026
Merged

fix(sigstore_driver): Get all the digests in the image ref and sign them#705
gmpinder merged 1 commit intomainfrom
704-sigstore-driver-doesnt-recursively-sign

Conversation

@gmpinder
Copy link
Member

@gmpinder gmpinder commented Feb 21, 2026

The code was a little too simply made and ended up ignoring the digests of images in a manifest. This code retrieves those digests and iterates over them to create a siglayer for the manifest and the underlying images. This was already handled in cosign_driver with the use of the --recursive arg.

@gmpinder gmpinder self-assigned this Feb 21, 2026
@gmpinder gmpinder linked an issue Feb 21, 2026 that may be closed by this pull request
@gmpinder gmpinder force-pushed the 704-sigstore-driver-doesnt-recursively-sign branch 13 times, most recently from 3b8422e to ce70e5a Compare February 22, 2026 18:05
@gmpinder gmpinder requested a review from HastD February 22, 2026 18:10
@gmpinder gmpinder marked this pull request as ready for review February 22, 2026 18:21
@gmpinder gmpinder force-pushed the 704-sigstore-driver-doesnt-recursively-sign branch from ce70e5a to 7af78d0 Compare February 22, 2026 19:01
@gmpinder gmpinder merged commit 614228a into main Feb 24, 2026
81 of 84 checks passed
@gmpinder gmpinder deleted the 704-sigstore-driver-doesnt-recursively-sign branch February 24, 2026 00:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Sigstore driver doesn't recursively sign

1 participant