Merge pull request #644 from sigstore/update-conformance

Update conformance and xfail dsse tests

Author: loosebazooka

.github/workflows/conformance.yml

@@ -31,6 +31,7 @@ jobs:
       - name: Unpack sigstore-java distribution
         run: tar -xvf ${{ github.workspace }}/sigstore-cli/build/distributions/sigstore-cli-*.tar --strip-components 1
 
-      - uses: sigstore/sigstore-conformance@c8d17eb7ee884cf86b93a3a3f471648fb0a83819 # v0.0.9
+      - uses: sigstore/sigstore-conformance@7375951316d6b28d07f7406c01e1dc7de2a75ce7 # v0.0.10
         with:
           entrypoint: ${{ github.workspace }}/bin/sigstore-cli
+          xfail: "test_verify_dsse_bundle_with_trust_root"