1
0
mirror of synced 2026-10-24 12:59:22 +03:00
Files
Matt Moore 960d28f0cd Fix: Add missing schemes to cosign predicate types. (#2717)
🐛 As Billy points out in the linked issue these are not RFC 3986 complient as required by the in-toto specification.

This also creates conflicts with validation in `sigstore/policy-controller` downstream because it has started to allow RFC 3986 compliant `predicateType:` in `ClusterImagePolicy`, but these are not, so they are only accessible via their
shortnames (and shortnames have proven fraught becaused they change, like this!).

Fixes: https://github.com/sigstore/cosign/issues/2612

/kind bug

Signed-off-by: Matt Moore <mattmoor@chainguard.dev>
2023-02-14 12:01:32 -08:00
..