Update conformance action, fix the conformance client (#1505)

Author: jku

.github/workflows/conformance.yml

@@ -26,7 +26,7 @@ jobs:
       - name: install sigstore-python
         run: python -m pip install .
 
-      - uses: sigstore/sigstore-conformance@fd90e6b0f3046f2276a6659481de6df495dea3b9 # v0.0.18
+      - uses: sigstore/sigstore-conformance@a7ac671d8e55553de127c8b1ad96d8d416315e83 # v0.0.19
         with:
           entrypoint: ${{ github.workspace }}/test/integration/sigstore-python-conformance
-          xfail: "test_verify_dsse_bundle_with_trust_root" # see issue 1442
+          xfail: "test_verify*intoto-with-custom-trust-root]" # see issue 1442

test/integration/sigstore-python-conformance

@@ -16,9 +16,19 @@ trust_config = {
     "mediaType": "application/vnd.dev.sigstore.clienttrustconfig.v0.1+json",
     "signingConfig": {
         "mediaType": "application/vnd.dev.sigstore.signingconfig.v0.2+json",
-        "caUrls": [{"url": "https://fulcio.example.com"}],
+        "caUrls": [{
+            "url": "https://fulcio.example.com",
+            "majorApiVersion": 1,
+            "operator": "",
+            "validFor": {"start": "1970-01-01T01:01:01Z"}
+        }],
         "oidcUrls": [],
-        "rekorTlogUrls": [{"url": "https://rekor.example.com"}],
+        "rekorTlogUrls": [{
+            "url": "https://rekor.example.com",
+            "majorApiVersion": 1,
+            "operator": "",
+            "validFor": {"start": "1970-01-01T01:01:01Z"}
+        }],
         "tsaUrls": [],
         "rekorTlogConfig": {"selector": "ANY"},
         "tsaConfig": {"selector": "ANY"},