Skip to content

Commit

Permalink
Use more specific WithIntegratedTimestamps with tlog verification
Browse files Browse the repository at this point in the history
Signed-off-by: Zach Steindler <[email protected]>
  • Loading branch information
steiza committed Jul 26, 2024
1 parent cad0dde commit c3c07dc
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion cmd/cosign/cli/verify/verify_bundle.go
Original file line number Diff line number Diff line change
Expand Up @@ -131,7 +131,7 @@ func verifyNewBundle(ctx context.Context, bundlePath, trustedRootPath, keyRef, s
verifierConfig := []verify.VerifierOption{}

if len(trustedroot.RekorLogs()) > 0 && !ignoreTlog {
verifierConfig = append(verifierConfig, verify.WithTransparencyLog(1), verify.WithObserverTimestamps(1))
verifierConfig = append(verifierConfig, verify.WithTransparencyLog(1), verify.WithIntegratedTimestamps(1))
}

if len(trustedroot.TimestampingAuthorities()) > 0 && useSignedTimestamps {
Expand Down

0 comments on commit c3c07dc

Please sign in to comment.