sign: b64 wrapping

Author: woodruffw

sigstore/_internal/rekor/client_v2.py

@@ -25,7 +25,6 @@
 import requests
 from cryptography.hazmat.primitives import serialization
 from cryptography.x509 import Certificate
-from sigstore_models import intoto
 from sigstore_models.common import v1 as common_v1
 from sigstore_models.rekor import v2 as rekor_v2
 from sigstore_models.rekor.v1 import TransparencyLogEntry as _TransparencyLogEntry

sigstore/sign.py

@@ -38,6 +38,7 @@
 
 from __future__ import annotations
 
+import base64
 import logging
 from collections.abc import Iterator
 from contextlib import contextmanager
@@ -244,9 +245,9 @@ def sign_artifact(
         content = MessageSignature(
             message_digest=HashOutput(
                 algorithm=hashed_input.algorithm,
-                digest=hashed_input.digest,
+                digest=base64.b64encode(hashed_input.digest),
             ),
-            signature=artifact_signature,
+            signature=base64.b64encode(artifact_signature),
         )
 
         # Create the proposed hashedrekord entry