Skip to content

Commit 01c233c

Browse files
jkujku
committed
Add static test repo from sigstore root-signing
This is a fast expiring repository so will require faketime support: the current go client will fail this test in a few days. Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
1 parent 1b06625 commit 01c233c

20 files changed

+2248
-0
lines changed

‎tuf_conformance/static_data/sigstore-root-signing/faketime

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
2025-02-09 12:02:08+02:00

‎tuf_conformance/static_data/sigstore-root-signing/initial_root.json

+145
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,145 @@
1+
{
2+
"signatures": [
3+
{
4+
"keyid": "6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3",
5+
"sig": ""
6+
},
7+
{
8+
"keyid": "e71a54d543835ba86adad9460379c7641fb8726d164ea766801a1c522aba7ea2",
9+
"sig": "3045022100b0bcf189ce1b93e7db9649d5be512a1880c0e358870e3933e426c5afb8a4061002206d214bd79b09f458ccc521a290aa960c417014fc16e606f82091b5e31814886a"
10+
},
11+
{
12+
"keyid": "22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06",
13+
"sig": ""
14+
},
15+
{
16+
"keyid": "61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222",
17+
"sig": "3045022100a9b9e294ec21b62dfca6a16a19d084182c12572e33d9c4dcab5317fa1e8a459d022069f68e55ea1f95c5a367aac7a61a65757f93da5a006a5f4d1cf995be812d7602"
18+
},
19+
{
20+
"keyid": "a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70",
21+
"sig": "30440220781178ec3915cb16aca757d40e28435ac5378d6b487acb111d1eeb339397f79a0220781cce48ae46f9e47b97a8414fcf466a986726a5896c72a0e4aba3162cb826dd"
22+
}
23+
],
24+
"signed": {
25+
"_type": "root",
26+
"consistent_snapshot": true,
27+
"expires": "2025-08-19T14:33:09Z",
28+
"keys": {
29+
"0c87432c3bf09fd99189fdc32fa5eaedf4e4a5fac7bab73fa04a2e0fc64af6f5": {
30+
"keyid_hash_algorithms": [
31+
"sha256",
32+
"sha512"
33+
],
34+
"keytype": "ecdsa",
35+
"keyval": {
36+
"public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWRiGr5+j+3J5SsH+Ztr5nE2H2wO7\nBV+nO3s93gLca18qTOzHY1oWyAGDykMSsGTUBSt9D+An0KfKsD2mfSM42Q==\n-----END PUBLIC KEY-----\n"
37+
},
38+
"scheme": "ecdsa-sha2-nistp256",
39+
"x-tuf-on-ci-online-uri": "gcpkms:projects/sigstore-root-signing/locations/global/keyRings/root/cryptoKeys/timestamp/cryptoKeyVersions/1"
40+
},
41+
"22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06": {
42+
"keyid_hash_algorithms": [
43+
"sha256",
44+
"sha512"
45+
],
46+
"keytype": "ecdsa",
47+
"keyval": {
48+
"public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzBzVOmHCPojMVLSI364WiiV8NPrD\n6IgRxVliskz/v+y3JER5mcVGcONliDcWMC5J2lfHmjPNPhb4H7xm8LzfSA==\n-----END PUBLIC KEY-----\n"
49+
},
50+
"scheme": "ecdsa-sha2-nistp256",
51+
"x-tuf-on-ci-keyowner": "@santiagotorres"
52+
},
53+
"61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222": {
54+
"keyid_hash_algorithms": [
55+
"sha256",
56+
"sha512"
57+
],
58+
"keytype": "ecdsa",
59+
"keyval": {
60+
"public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEinikSsAQmYkNeH5eYq/CnIzLaacO\nxlSaawQDOwqKy/tCqxq5xxPSJc21K4WIhs9GyOkKfzueY3GILzcMJZ4cWw==\n-----END PUBLIC KEY-----\n"
61+
},
62+
"scheme": "ecdsa-sha2-nistp256",
63+
"x-tuf-on-ci-keyowner": "@bobcallaway"
64+
},
65+
"6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3": {
66+
"keyid_hash_algorithms": [
67+
"sha256",
68+
"sha512"
69+
],
70+
"keytype": "ecdsa",
71+
"keyval": {
72+
"public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEy8XKsmhBYDI8Jc0GwzBxeKax0cm5\nSTKEU65HPFunUn41sT8pi0FjM4IkHz/YUmwmLUO0Wt7lxhj6BkLIK4qYAw==\n-----END PUBLIC KEY-----\n"
73+
},
74+
"scheme": "ecdsa-sha2-nistp256",
75+
"x-tuf-on-ci-keyowner": "@dlorenc"
76+
},
77+
"a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70": {
78+
"keyid_hash_algorithms": [
79+
"sha256",
80+
"sha512"
81+
],
82+
"keytype": "ecdsa",
83+
"keyval": {
84+
"public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0ghrh92Lw1Yr3idGV5WqCtMDB8Cx\n+D8hdC4w2ZLNIplVRoVGLskYa3gheMyOjiJ8kPi15aQ2//7P+oj7UvJPGw==\n-----END PUBLIC KEY-----\n"
85+
},
86+
"scheme": "ecdsa-sha2-nistp256",
87+
"x-tuf-on-ci-keyowner": "@joshuagl"
88+
},
89+
"e71a54d543835ba86adad9460379c7641fb8726d164ea766801a1c522aba7ea2": {
90+
"keyid_hash_algorithms": [
91+
"sha256",
92+
"sha512"
93+
],
94+
"keytype": "ecdsa",
95+
"keyval": {
96+
"public": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEEXsz3SZXFb8jMV42j6pJlyjbjR8K\nN3Bwocexq6LMIb5qsWKOQvLN16NUefLc4HswOoumRsVVaajSpQS6fobkRw==\n-----END PUBLIC KEY-----\n"
97+
},
98+
"scheme": "ecdsa-sha2-nistp256",
99+
"x-tuf-on-ci-keyowner": "@mnm678"
100+
}
101+
},
102+
"roles": {
103+
"root": {
104+
"keyids": [
105+
"6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3",
106+
"e71a54d543835ba86adad9460379c7641fb8726d164ea766801a1c522aba7ea2",
107+
"22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06",
108+
"61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222",
109+
"a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70"
110+
],
111+
"threshold": 3
112+
},
113+
"snapshot": {
114+
"keyids": [
115+
"0c87432c3bf09fd99189fdc32fa5eaedf4e4a5fac7bab73fa04a2e0fc64af6f5"
116+
],
117+
"threshold": 1,
118+
"x-tuf-on-ci-expiry-period": 3650,
119+
"x-tuf-on-ci-signing-period": 365
120+
},
121+
"targets": {
122+
"keyids": [
123+
"6f260089d5923daf20166ca657c543af618346ab971884a99962b01988bbe0c3",
124+
"e71a54d543835ba86adad9460379c7641fb8726d164ea766801a1c522aba7ea2",
125+
"22f4caec6d8e6f9555af66b3d4c3cb06a3bb23fdc7e39c916c61f462e6f52b06",
126+
"61643838125b440b40db6942f5cb5a31c0dc04368316eb2aaa58b95904a58222",
127+
"a687e5bf4fab82b0ee58d46e05c9535145a2c9afb458f43d42b45ca0fdce2a70"
128+
],
129+
"threshold": 3
130+
},
131+
"timestamp": {
132+
"keyids": [
133+
"0c87432c3bf09fd99189fdc32fa5eaedf4e4a5fac7bab73fa04a2e0fc64af6f5"
134+
],
135+
"threshold": 1,
136+
"x-tuf-on-ci-expiry-period": 7,
137+
"x-tuf-on-ci-signing-period": 6
138+
}
139+
},
140+
"spec_version": "1.0",
141+
"version": 12,
142+
"x-tuf-on-ci-expiry-period": 197,
143+
"x-tuf-on-ci-signing-period": 46
144+
}
145+
}

‎tuf_conformance/static_data/sigstore-root-signing/metadata/1.root.json

+130
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,130 @@
1+
{
2+
"signatures": [
3+
{
4+
"keyid": "2f64fb5eac0cf94dd39bb45308b98920055e9a0d8e012a7220787834c60aef97",
5+
"sig": "30450221008a35d51da0f845301a5eac98ad0df00a934f59b709c1eaf81c86be734d9356f80220742942325599749800f52675f6efe124345980a2a636c0dc76f9caf9fc3123b0"
6+
},
7+
{
8+
"keyid": "bdde902f5ec668179ff5ca0dabf7657109287d690bf97e230c21d65f99155c62",
9+
"sig": "3045022100ef9157ece2a09baec1eab80adfc00b04da20b1f9a0d1b47c5dabc4506719ef2c022074f72acd57398e4ddc8c2a5040df902961e9615dca48f3fbe38cbb506e500066"
10+
},
11+
{
12+
"keyid": "eaf22372f417dd618a46f6c627dbc276e9fd30a004fc94f9be946e73f8bd090b",
13+
"sig": "30450220420fdc9a09cd069b8b15fd8db9cedf7d0dee75871bd1cfee77c926d4120a770002210097553b5ad0d6b4a13902ed37509638bb63a9009f78230cd56c802909ffbfead7"
14+
},
15+
{
16+
"keyid": "f40f32044071a9365505da3d1e3be6561f6f22d0e60cf51df783999f6c3429cb",
17+
"sig": "304502202aaf32e66f90752f658672b085ecfe45cc1ad31ee6cf5c9ad05f3267685f8d88022100b5df02acdaa371123db9d7a42219553fe079b230b168833e951be7ee56ded347"
18+
},
19+
{
20+
"keyid": "f505595165a177a41750a8e864ed1719b1edfccd5a426fd2c0ffda33ce7ff209",
21+
"sig": "304402205d420c7d05c58980c1c9f7d221f53b5334aae27a447d2a91c2ceddd685269749022039ec83e51f8e1779d7f0142dfa4a5bbecfe327fc0b91b7416090fea2416fd53a"
22+
}
23+
],
24+
"signed": {
25+
"_type": "root",
26+
"consistent_snapshot": false,
27+
"expires": "2021-12-18T13:28:12.99008-06:00",
28+
"keys": {
29+
"2f64fb5eac0cf94dd39bb45308b98920055e9a0d8e012a7220787834c60aef97": {
30+
"keyid_hash_algorithms": [
31+
"sha256",
32+
"sha512"
33+
],
34+
"keytype": "ecdsa-sha2-nistp256",
35+
"keyval": {
36+
"public": "04cbc5cab2684160323c25cd06c3307178a6b1d1c9b949328453ae473c5ba7527e35b13f298b41633382241f3fd8526c262d43b45adee5c618fa0642c82b8a9803"
37+
},
38+
"scheme": "ecdsa-sha2-nistp256"
39+
},
40+
"bdde902f5ec668179ff5ca0dabf7657109287d690bf97e230c21d65f99155c62": {
41+
"keyid_hash_algorithms": [
42+
"sha256",
43+
"sha512"
44+
],
45+
"keytype": "ecdsa-sha2-nistp256",
46+
"keyval": {
47+
"public": "04a71aacd835dc170ba6db3fa33a1a33dee751d4f8b0217b805b9bd3242921ee93672fdcfd840576c5bb0dc0ed815edf394c1ee48c2b5e02485e59bfc512f3adc7"
48+
},
49+
"scheme": "ecdsa-sha2-nistp256"
50+
},
51+
"eaf22372f417dd618a46f6c627dbc276e9fd30a004fc94f9be946e73f8bd090b": {
52+
"keyid_hash_algorithms": [
53+
"sha256",
54+
"sha512"
55+
],
56+
"keytype": "ecdsa-sha2-nistp256",
57+
"keyval": {
58+
"public": "04117b33dd265715bf23315e368faa499728db8d1f0a377070a1c7b1aba2cc21be6ab1628e42f2cdd7a35479f2dce07b303a8ba646c55569a8d2a504ba7e86e447"
59+
},
60+
"scheme": "ecdsa-sha2-nistp256"
61+
},
62+
"f40f32044071a9365505da3d1e3be6561f6f22d0e60cf51df783999f6c3429cb": {
63+
"keyid_hash_algorithms": [
64+
"sha256",
65+
"sha512"
66+
],
67+
"keytype": "ecdsa-sha2-nistp256",
68+
"keyval": {
69+
"public": "04cc1cd53a61c23e88cc54b488dfae168a257c34fac3e88811c55962b24cffbfecb724447999c54670e365883716302e49da57c79a33cd3e16f81fbc66f0bcdf48"
70+
},
71+
"scheme": "ecdsa-sha2-nistp256"
72+
},
73+
"f505595165a177a41750a8e864ed1719b1edfccd5a426fd2c0ffda33ce7ff209": {
74+
"keyid_hash_algorithms": [
75+
"sha256",
76+
"sha512"
77+
],
78+
"keytype": "ecdsa-sha2-nistp256",
79+
"keyval": {
80+
"public": "048a78a44ac01099890d787e5e62afc29c8ccb69a70ec6549a6b04033b0a8acbfb42ab1ab9c713d225cdb52b858886cf46c8e90a7f3b9e6371882f370c259e1c5b"
81+
},
82+
"scheme": "ecdsa-sha2-nistp256"
83+
}
84+
},
85+
"roles": {
86+
"root": {
87+
"keyids": [
88+
"2f64fb5eac0cf94dd39bb45308b98920055e9a0d8e012a7220787834c60aef97",
89+
"bdde902f5ec668179ff5ca0dabf7657109287d690bf97e230c21d65f99155c62",
90+
"eaf22372f417dd618a46f6c627dbc276e9fd30a004fc94f9be946e73f8bd090b",
91+
"f40f32044071a9365505da3d1e3be6561f6f22d0e60cf51df783999f6c3429cb",
92+
"f505595165a177a41750a8e864ed1719b1edfccd5a426fd2c0ffda33ce7ff209"
93+
],
94+
"threshold": 3
95+
},
96+
"snapshot": {
97+
"keyids": [
98+
"2f64fb5eac0cf94dd39bb45308b98920055e9a0d8e012a7220787834c60aef97",
99+
"bdde902f5ec668179ff5ca0dabf7657109287d690bf97e230c21d65f99155c62",
100+
"eaf22372f417dd618a46f6c627dbc276e9fd30a004fc94f9be946e73f8bd090b",
101+
"f40f32044071a9365505da3d1e3be6561f6f22d0e60cf51df783999f6c3429cb",
102+
"f505595165a177a41750a8e864ed1719b1edfccd5a426fd2c0ffda33ce7ff209"
103+
],
104+
"threshold": 3
105+
},
106+
"targets": {
107+
"keyids": [
108+
"2f64fb5eac0cf94dd39bb45308b98920055e9a0d8e012a7220787834c60aef97",
109+
"bdde902f5ec668179ff5ca0dabf7657109287d690bf97e230c21d65f99155c62",
110+
"eaf22372f417dd618a46f6c627dbc276e9fd30a004fc94f9be946e73f8bd090b",
111+
"f40f32044071a9365505da3d1e3be6561f6f22d0e60cf51df783999f6c3429cb",
112+
"f505595165a177a41750a8e864ed1719b1edfccd5a426fd2c0ffda33ce7ff209"
113+
],
114+
"threshold": 3
115+
},
116+
"timestamp": {
117+
"keyids": [
118+
"2f64fb5eac0cf94dd39bb45308b98920055e9a0d8e012a7220787834c60aef97",
119+
"bdde902f5ec668179ff5ca0dabf7657109287d690bf97e230c21d65f99155c62",
120+
"eaf22372f417dd618a46f6c627dbc276e9fd30a004fc94f9be946e73f8bd090b",
121+
"f40f32044071a9365505da3d1e3be6561f6f22d0e60cf51df783999f6c3429cb",
122+
"f505595165a177a41750a8e864ed1719b1edfccd5a426fd2c0ffda33ce7ff209"
123+
],
124+
"threshold": 3
125+
}
126+
},
127+
"spec_version": "1.0",
128+
"version": 1
129+
}
130+
}

0 commit comments

Comments
 (0)