Merge pull request #1037 from sigstore/enable-rekor-v2

fix(test): Verify signing result for Rekor v1 vs. v2

Author: aaronlew02

sigstore-java/src/test/java/dev/sigstore/KeylessTest.java

@@ -64,7 +64,7 @@ public void sign_production() throws Exception {
     var signer = KeylessSigner.builder().sigstorePublicDefaults().build();
     var results = signer.sign(artifactDigests);
 
-    verifySigningResult(results);
+    verifySigningResult(results, false);
 
     var verifier = KeylessVerifier.builder().sigstorePublicDefaults().build();
     for (int i = 0; i < results.size(); i++) {
@@ -81,7 +81,7 @@ public void sign_staging(boolean enableRekorV2) throws Exception {
     var signer =
         KeylessSigner.builder().sigstoreStagingDefaults().enableRekorV2(enableRekorV2).build();
     var results = signer.sign(artifactDigests);
-    verifySigningResult(results);
+    verifySigningResult(results, enableRekorV2);
 
     var verifier = KeylessVerifier.builder().sigstoreStagingDefaults().build();
     for (int i = 0; i < results.size(); i++) {
@@ -90,7 +90,7 @@ public void sign_staging(boolean enableRekorV2) throws Exception {
     }
   }
 
-  private void verifySigningResult(List<Bundle> results) throws IOException {
+  private void verifySigningResult(List<Bundle> results, boolean enableRekorV2) throws IOException {
 
     Assertions.assertEquals(artifactDigests.size(), results.size());
 
@@ -111,6 +111,14 @@ private void verifySigningResult(List<Bundle> results) throws IOException {
           result.getMessageSignature().get().getMessageDigest().get().getHashAlgorithm());
       // check if required inclusion proof exists
       Assertions.assertNotNull(result.getEntries().get(0).getVerification().getInclusionProof());
+
+      if (enableRekorV2) {
+        Assertions.assertEquals(
+            "0.0.2", result.getEntries().get(0).getBodyDecoded().getApiVersion());
+      } else {
+        Assertions.assertEquals(
+            "0.0.1", result.getEntries().get(0).getBodyDecoded().getApiVersion());
+      }
     }
   }