960d28f0cd
🐛 As Billy points out in the linked issue these are not RFC 3986 complient as required by the in-toto specification. This also creates conflicts with validation in `sigstore/policy-controller` downstream because it has started to allow RFC 3986 compliant `predicateType:` in `ClusterImagePolicy`, but these are not, so they are only accessible via their shortnames (and shortnames have proven fraught becaused they change, like this!). Fixes: https://github.com/sigstore/cosign/issues/2612 /kind bug Signed-off-by: Matt Moore <mattmoor@chainguard.dev>
2 lines
637 B
Plaintext
2 lines
637 B
Plaintext
{"payloadType":"application/vnd.in-toto+json","payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInByZWRpY2F0ZVR5cGUiOiJodHRwczovL2Nvc2lnbi5zaWdzdG9yZS5kZXYvYXR0ZXN0YXRpb24vdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoicmVnaXN0cnkubG9jYWw6NTAwMC9rbmF0aXZlL2RlbW8iLCJkaWdlc3QiOnsic2hhMjU2IjoiNmM2ZmQ2YTQxMTVjNmU5OThmZjM1N2NkOTE0NjgwOTMxYmI5YTZjMWE3Y2Q1ZjVjYjJmNWUxYzA5MzJhYjZlZCJ9fV0sInByZWRpY2F0ZSI6eyJEYXRhIjoiZm9vYmFyIHRlc3QgYXR0ZXN0YXRpb24iLCJUaW1lc3RhbXAiOiIyMDIyLTA0LTA3VDE5OjIyOjI1WiJ9fQ==","signatures":[{"keyid":"","sig":"MEUCIQC/slGQVpRKgw4Jo8tcbgo85WNG/FOJfxcvQFvTEnG9swIgP4LeOmID+biUNwLLeylBQpAEgeV6GVcEpyG6r8LVnfY="}]}
|