Skip to content

Commit 5ab3744

Browse files
committed
feat: Upgrade Sigstore from v2.6.1 to v3.0.2
Upgrade all Sigstore dependencies from v2 to v3. - Updated imports from cosign/v2 to cosign/v3: - github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio - github.com/sigstore/cosign/v3/cmd/cosign/cli/options - github.com/sigstore/cosign/v3/pkg/cosign - Updated import from cosign/v2 to cosign/v3: - github.com/sigstore/cosign/v3/pkg/providers/all - Removed: github.com/sigstore/cosign/v2 v2.6.1 - Added: github.com/sigstore/cosign/v3 v3.0.2 Checked entire codebase for v2 references: ```bash grep -r "sigstore/cosign/v2" --include="*.go" --include="go.mod" --include="go.sum" . ``` This upgrade maintains signature compatibility: - v3 can verify signatures created with v2 (backward compatible) - v2 can verify signatures created with v3 (forward compatible) Verified by compatibility test workflow using pre-signed components. On-behalf-of: Gerald Morrison (SAP) <gerald.morrison@sap.com> Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>
1 parent 6509bcb commit 5ab3744

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

api/tech/signing/handlers/init.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
package handlers
22

33
import (
4-
_ "github.com/sigstore/cosign/v2/pkg/providers/all"
4+
_ "github.com/sigstore/cosign/v3/pkg/providers/all"
55
_ "ocm.software/ocm/api/tech/signing/handlers/rsa"
66
_ "ocm.software/ocm/api/tech/signing/handlers/rsa-pss"
77
_ "ocm.software/ocm/api/tech/signing/handlers/rsa-pss-signingservice"

api/tech/signing/handlers/sigstore/handler.go

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,9 @@ import (
1414
"github.com/go-openapi/strfmt"
1515
"github.com/go-openapi/swag/conv"
1616
"github.com/mandelsoft/goutils/errors"
17-
"github.com/sigstore/cosign/v2/cmd/cosign/cli/fulcio"
18-
"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
19-
"github.com/sigstore/cosign/v2/pkg/cosign"
17+
"github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio"
18+
"github.com/sigstore/cosign/v3/cmd/cosign/cli/options"
19+
"github.com/sigstore/cosign/v3/pkg/cosign"
2020
"github.com/sigstore/rekor/pkg/client"
2121
"github.com/sigstore/rekor/pkg/generated/client/entries"
2222
"github.com/sigstore/rekor/pkg/generated/models"

0 commit comments

Comments
 (0)