>>> cosign: Building community/cosign 3.1.4-r0 (using abuild 3.18.0_rc7-r1) started Tue, 03 Nov 2026 11:44:01 +0000 >>> cosign: Validating /home/buildozer/aports/community/cosign/APKBUILD... >>> cosign: Analyzing dependencies... >>> cosign: Installing for build: build-base pcsc-lite-libs go pcsc-lite-dev (1/7) Installing pcsc-lite-libs (2.5.2-r0) (2/7) Installing go (1.27.3-r0) (3/7) Installing eudev-libs (3.2.14-r8) (4/7) Installing eudev-dev (3.2.14-r8) (5/7) Installing pcsc-lite-spy-libs (2.5.2-r0) (6/7) Installing pcsc-lite-dev (2.5.2-r0) (7/7) Installing .makedepends-cosign (20261103.114401) Executing busybox-1.38.0-r8.trigger OK: 615.8 MiB in 116 packages >>> cosign: Cleaning up srcdir >>> cosign: Cleaning up pkgdir >>> cosign: Cleaning up tmpdir >>> cosign: Fetching https://distfiles.alpinelinux.org/distfiles/edge/cosign-3.1.4.tar.gz Connecting to distfiles.alpinelinux.org (172.105.82.32:443) wget: server returned error: HTTP/1.1 404 Not Found >>> cosign: Fetching https://github.com/sigstore/cosign/archive/v3.1.4/cosign-3.1.4.tar.gz Connecting to github.com (20.250.119.67:443) Connecting to codeload.github.com (20.250.119.71:443) saving to '/var/cache/distfiles/edge/cosign-3.1.4.tar.gz.part' cosign-3.1.4.tar.gz. 100% |********************************| 959k 0:00:00 ETA '/var/cache/distfiles/edge/cosign-3.1.4.tar.gz.part' saved /var/cache/distfiles/edge/cosign-3.1.4.tar.gz: OK /home/buildozer/aports/community/cosign/x-sys-ppc64le-pie-fix.patch: OK >>> cosign: Fetching https://distfiles.alpinelinux.org/distfiles/edge/cosign-3.1.4.tar.gz /var/cache/distfiles/edge/cosign-3.1.4.tar.gz: OK /home/buildozer/aports/community/cosign/x-sys-ppc64le-pie-fix.patch: OK >>> cosign: Unpacking /var/cache/distfiles/edge/cosign-3.1.4.tar.gz... >>> cosign: x-sys-ppc64le-pie-fix.patch patching file go.mod patching file go.sum go: downloading github.com/google/go-containerregistry v0.22.1 go: downloading github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.12.0 go: downloading github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 go: downloading github.com/sigstore/rekor v1.5.4 go: downloading github.com/spf13/cobra v1.10.2 go: downloading k8s.io/apimachinery v0.36.2 go: downloading github.com/secure-systems-lab/go-securesystemslib v0.11.1 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/aws v1.11.1 go: downloading github.com/sigstore/sigstore v1.11.1 go: downloading github.com/in-toto/in-toto-golang v0.11.0 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.11.1 go: downloading github.com/sigstore/sigstore-go v1.3.0 go: downloading github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.11.1 go: downloading github.com/sigstore/protobuf-specs v0.5.2 go: downloading github.com/mozillazg/docker-credential-acr-helper v0.4.1 go: downloading github.com/spf13/pflag v1.0.10 go: downloading github.com/google/certificate-transparency-go v1.3.3 go: downloading github.com/sigstore/rekor-tiles/v2 v2.3.0 go: downloading golang.org/x/sync v0.24.0 go: downloading github.com/in-toto/attestation v1.2.0 go: downloading golang.org/x/term v0.47.0 go: downloading github.com/spf13/viper v1.21.0 go: downloading github.com/mitchellh/go-wordwrap v1.0.1 go: downloading github.com/google/go-github/v88 v88.0.0 go: downloading github.com/miekg/pkcs11 v1.1.2 go: downloading golang.org/x/crypto v0.58.0 go: downloading google.golang.org/protobuf v1.36.12 go: downloading golang.org/x/oauth2 v0.37.0 go: downloading sigs.k8s.io/release-utils v0.12.5 go: downloading gitlab.com/gitlab-org/api/client-go/v3 v3.13.0 go: downloading github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/azure v1.11.1 go: downloading k8s.io/api v0.36.2 go: downloading k8s.io/client-go v0.36.2 go: downloading k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 go: downloading github.com/eclipse-keypont/crypto11 v1.6.8 go: downloading github.com/go-jose/go-jose/v4 v4.1.6 go: downloading github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 go: downloading github.com/go-openapi/runtime v0.33.3 go: downloading github.com/go-openapi/strfmt v0.27.3 go: downloading github.com/go-openapi/swag/conv v0.29.2 go: downloading github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 go: downloading github.com/sigstore/timestamp-authority/v2 v2.1.5 go: downloading github.com/transparency-dev/merkle v0.0.2 go: downloading github.com/open-policy-agent/opa v1.20.2 go: downloading github.com/dustin/go-humanize v1.0.1 go: downloading cuelang.org/go v0.17.1 go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.7 go: downloading go.yaml.in/yaml/v3 v3.0.5 go: downloading golang.org/x/sys v0.49.1-0.20261022125458-f5cb0306ac0e go: downloading github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352 go: downloading github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 go: downloading github.com/docker/docker-credential-helpers v0.9.5 go: downloading github.com/docker/cli v29.7.2+incompatible go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading github.com/sirupsen/logrus v1.10.2 go: downloading github.com/go-openapi/swag v0.28.0 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading github.com/fsnotify/fsnotify v1.10.1 go: downloading github.com/go-viper/mapstructure/v2 v2.5.0 go: downloading github.com/sagikazarmark/locafero v0.11.0 go: downloading github.com/Azure/go-autorest/autorest v0.11.29 go: downloading github.com/spf13/afero v1.15.0 go: downloading github.com/spf13/cast v1.10.0 go: downloading sigs.k8s.io/yaml v1.6.0 go: downloading sigs.k8s.io/randfill v1.0.0 go: downloading github.com/go-openapi/errors v0.22.9 go: downloading golang.org/x/mod v0.41.0 go: downloading github.com/hashicorp/go-cleanhttp v0.5.2 go: downloading github.com/hashicorp/go-retryablehttp v0.7.8 go: downloading github.com/go-openapi/swag/jsonutils v0.29.2 go: downloading github.com/go-openapi/swag/typeutils v0.29.2 go: downloading github.com/go-openapi/validate v1.0.0 go: downloading github.com/buildkite/agent/v3 v3.130.0 go: downloading cloud.google.com/go/compute/metadata v0.10.0 go: downloading google.golang.org/api v0.301.0 go: downloading github.com/spiffe/go-spiffe/v2 v2.8.2 go: downloading github.com/Azure/azure-sdk-for-go v68.0.0+incompatible go: downloading github.com/Azure/go-autorest/autorest/adal v0.9.23 go: downloading github.com/aws/aws-sdk-go-v2 v1.47.3 go: downloading github.com/aws/aws-sdk-go-v2/config v1.33.9 go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.55.3 go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.10 go: downloading github.com/aws/smithy-go v1.28.5 go: downloading github.com/mitchellh/go-homedir v1.1.0 go: downloading github.com/mozillazg/docker-credential-acr-helper/pkg/acr v0.2.2 go: downloading github.com/shibumi/go-pathspec v1.3.0 go: downloading github.com/klauspost/compress v1.20.1 go: downloading github.com/google/go-cmp v0.7.0 go: downloading github.com/google/go-querystring v1.2.0 go: downloading github.com/russross/blackfriday/v2 v2.1.0 go: downloading github.com/subosito/gotenv v1.6.0 go: downloading github.com/pelletier/go-toml/v2 v2.3.1 go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 go: downloading k8s.io/klog/v2 v2.140.0 go: downloading cloud.google.com/go v0.123.0 go: downloading github.com/Azure/go-autorest v14.2.0+incompatible go: downloading k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2 go: downloading gopkg.in/inf.v0 v0.9.1 go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 go: downloading github.com/go-chi/chi/v5 v5.3.2 go: downloading go.uber.org/zap v1.28.0 go: downloading github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 go: downloading golang.org/x/time v0.16.0 go: downloading github.com/ProtonMail/go-crypto v1.4.1 go: downloading github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/oklog/ulid/v2 v2.1.2 go: downloading golang.org/x/net v0.61.0 go: downloading golang.org/x/text v0.43.0 go: downloading github.com/theupdateframework/go-tuf/v2 v2.4.2 go: downloading github.com/theupdateframework/go-tuf v0.7.0 go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 go: downloading github.com/aws/aws-sdk-go-v2/service/kms v1.61.4 go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go: downloading github.com/fxamacker/cbor/v2 v2.9.0 go: downloading github.com/sassoftware/relic/v8 v8.2.0 go: downloading github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 go: downloading github.com/hashicorp/vault/api v1.23.0 go: downloading github.com/jellydator/ttlcache/v3 v3.4.1 go: downloading cloud.google.com/go/kms v1.33.0 go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 go: downloading github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 go: downloading google.golang.org/grpc v1.84.0 go: downloading github.com/transparency-dev/formats v0.1.1 go: downloading github.com/coreos/go-oidc/v3 v3.21.0 go: downloading github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c go: downloading github.com/google/gnostic-models v0.7.0 go: downloading github.com/go-logr/logr v1.4.4 go: downloading go.yaml.in/yaml/v2 v2.4.4 go: downloading github.com/pkg/errors v0.9.1 go: downloading github.com/thales-e-security/pool v0.0.2 go: downloading github.com/Azure/azure-sdk-for-go/sdk/azcore v1.23.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.5.0 go: downloading github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 go: downloading github.com/Azure/go-autorest/logger v0.2.1 go: downloading github.com/dimchansky/utfbom v1.1.1 go: downloading github.com/go-openapi/swag/fileutils v0.29.2 go: downloading github.com/go-openapi/swag/stringutils v0.29.2 go: downloading github.com/go-openapi/runtime/server-middleware v0.33.3 go: downloading go.opentelemetry.io/otel v1.46.0 go: downloading go.opentelemetry.io/otel/trace v1.46.0 go: downloading github.com/Azure/go-autorest/tracing v0.6.0 go: downloading github.com/Azure/go-autorest/autorest/date v0.3.0 go: downloading github.com/golang-jwt/jwt/v4 v4.5.2 go: downloading github.com/go-openapi/swag/pools v0.29.2 go: downloading github.com/alibabacloud-go/cr-20160607 v1.0.1 go: downloading github.com/alibabacloud-go/cr-20181201 v1.0.10 go: downloading github.com/alibabacloud-go/darabonba-openapi v0.2.1 go: downloading github.com/alibabacloud-go/tea-utils v1.4.5 go: downloading github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider v0.18.1 go: downloading github.com/alibabacloud-go/tea v1.3.12 go: downloading github.com/aliyun/credentials-go v1.4.7 go: downloading google.golang.org/genproto v0.0.0-20260715232425-e75dac1f907d go: downloading github.com/phuslu/lru v1.0.18 go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc go: downloading connectrpc.com/connect v1.20.0 go: downloading github.com/buildkite/roko v1.4.0 go: downloading github.com/pborman/uuid v1.2.1 go: downloading github.com/buildkite/go-pipeline v0.17.1 go: downloading github.com/go-openapi/analysis v1.0.0 go: downloading github.com/go-openapi/loads v0.25.3 go: downloading github.com/go-openapi/spec v1.0.1 go: downloading github.com/cockroachdb/apd/v3 v3.2.3 go: downloading github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d go: downloading cuelabs.dev/go/oci/ociregistry v0.0.0-20260601085548-328ff8e2c943 go: downloading github.com/go-openapi/jsonreference v1.0.2 go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/hashicorp/errwrap v1.1.0 go: downloading github.com/hashicorp/hcl v1.0.1-vault-7 go: downloading github.com/hashicorp/go-multierror v1.1.1 go: downloading buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260709200747-435963d16310.1 go: downloading github.com/hashicorp/go-rootcerts v1.0.2 go: downloading github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 go: downloading github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 go: downloading github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/cenkalti/backoff/v5 v5.0.3 go: downloading github.com/emicklei/proto v1.14.3 go: downloading github.com/protocolbuffers/txtpbfmt v0.0.0-20260420112717-c39628bde8b5 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/rogpeppe/go-internal v1.16.0 go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc go: downloading github.com/emicklei/go-restful/v3 v3.13.0 go: downloading github.com/json-iterator/go v1.1.12 go: downloading github.com/natefinch/atomic v1.0.1 go: downloading github.com/go-openapi/jsonpointer v1.0.1 go: downloading github.com/go-openapi/swag/cmdutils v0.29.2 go: downloading github.com/go-openapi/swag/loading v0.29.1 go: downloading github.com/go-openapi/swag/mangling v0.29.1 go: downloading github.com/go-openapi/swag/netutils v0.29.2 go: downloading github.com/go-openapi/swag/yamlutils v0.29.1 go: downloading github.com/alibabacloud-go/endpoint-util v1.1.1 go: downloading github.com/alibabacloud-go/openapi-util v0.1.0 go: downloading cloud.google.com/go/longrunning v1.2.0 go: downloading cloud.google.com/go/iam v1.13.0 go: downloading github.com/googleapis/gax-go/v2 v2.26.2 go: downloading github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.4 go: downloading github.com/alibabacloud-go/tea-xml v1.1.3 go: downloading github.com/AliyunContainerService/ack-ram-tool/pkg/ecsmetadata v0.0.9 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading go.opentelemetry.io/otel/metric v1.46.0 go: downloading github.com/ryanuber/go-glob v1.0.0 go: downloading github.com/hashicorp/go-sockaddr v1.0.7 go: downloading github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9 go: downloading github.com/alibabacloud-go/debug v1.0.1 go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee go: downloading github.com/gobwas/glob v0.2.3 go: downloading github.com/lestrrat-go/jwx/v3 v3.2.0 go: downloading github.com/buildkite/interpolate v0.1.5 go: downloading github.com/oleiade/reflections v1.1.0 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 go: downloading gopkg.in/ini.v1 v1.67.3 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/tchap/go-patricia/v2 v2.3.3 go: downloading github.com/vektah/gqlparser/v2 v2.5.36 go: downloading github.com/yashtewari/glob-intersection v0.2.0 go: downloading github.com/tjfoc/gmsm v1.4.1 go: downloading github.com/golang/snappy v1.0.0 go: downloading github.com/cloudflare/circl v1.6.3 go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.5.6 go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.20.9 go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.8.6 go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.20.3 go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.10.4 go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.38.4 go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.43.4 go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.51.4 go: downloading github.com/clbanning/mxj/v2 v2.7.0 go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb go: downloading github.com/lestrrat-go/option/v2 v2.0.0 go: downloading github.com/lestrrat-go/httprc/v3 v3.0.6 go: downloading github.com/valyala/fastjson v1.6.10 go: downloading github.com/lestrrat-go/dsig v1.3.0 go: downloading github.com/lestrrat-go/blackmagic v1.0.4 go: downloading github.com/agnivade/levenshtein v1.2.1 go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.5.6 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.21 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.14.6 go: downloading github.com/lestrrat-go/httpcc v1.0.1 go: downloading cloud.google.com/go/auth/oauth2adapt v0.3.0 go: downloading cloud.google.com/go/auth v0.24.1-0.20261001053825-dbc26066f70a go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.22 go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 go: downloading github.com/google/s2a-go v0.1.11 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0 go: downloading github.com/felixge/httpsnoop v1.1.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 go: downloading github.com/AzureAD/microsoft-authentication-library-for-go v1.8.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0 go: downloading github.com/golang-jwt/jwt/v5 v5.3.1 go: downloading github.com/kylelemons/godebug v1.1.0 go: downloading github.com/stretchr/testify v1.12.1 go: downloading github.com/depcheck-test/depcheck-test v0.0.0-20220607135614-199033aaa936 go: downloading github.com/kelseyhightower/envconfig v1.4.0 go: downloading github.com/tink-crypto/tink-go-awskms/v3 v3.0.0 go: downloading github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0 go: downloading github.com/tink-crypto/tink-go/v2 v2.8.0 go: downloading github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0 go: downloading golang.org/x/tools v0.51.0 ? github.com/sigstore/cosign/v3/cmd/conformance [no test files] ? github.com/sigstore/cosign/v3/cmd/cosign [no test files] === RUN TestPrintEnv === RUN TestPrintEnv/no_descriptions_and_sensitive_variables === RUN TestPrintEnv/descriptions_but_sensitive_variable_is_unset === RUN TestPrintEnv/sensitive_variable_is_non-empty_but_show_sensitive_variables_is_disabled === RUN TestPrintEnv/sensitive_variable_is_empty === RUN TestPrintEnv/sensitive_variable_is_non-empty_and_show_sensitive_variables_is_enabled === RUN TestPrintEnv/sensitive_variable_is_non-empty_but_show_descriptions_is_disabled === RUN TestPrintEnv/print_unregistered_variable_with_description === RUN TestPrintEnv/print_unregistered_variable_with_description_(sensitive_enabled) === RUN TestPrintEnv/print_unregistered_variable_without_description === RUN TestPrintEnv/print_unregistered_variable_without_description_(sensitive_enabled) === RUN TestPrintEnv/print_empty_unregistered_variable === RUN TestPrintEnv/print_empty_unregistered_variable_(sensitive_enabled) --- PASS: TestPrintEnv (0.00s) --- PASS: TestPrintEnv/no_descriptions_and_sensitive_variables (0.00s) --- PASS: TestPrintEnv/descriptions_but_sensitive_variable_is_unset (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_non-empty_but_show_sensitive_variables_is_disabled (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_empty (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_non-empty_and_show_sensitive_variables_is_enabled (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_non-empty_but_show_descriptions_is_disabled (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_with_description (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_with_description_(sensitive_enabled) (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_without_description (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_without_description_(sensitive_enabled) (0.00s) --- PASS: TestPrintEnv/print_empty_unregistered_variable (0.00s) --- PASS: TestPrintEnv/print_empty_unregistered_variable_(sensitive_enabled) (0.00s) === RUN TestLoadCmdAllowHTTPRegistry === RUN TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=true_reaches_the_HTTP_registry === RUN TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=false_fails_to_connect_to_HTTP-only_registry --- PASS: TestLoadCmdAllowHTTPRegistry (0.00s) --- PASS: TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=true_reaches_the_HTTP_registry (0.00s) --- PASS: TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=false_fails_to_connect_to_HTTP-only_registry (0.00s) === RUN TestVersionOutput === RUN TestVersionOutput/ASCII === RUN TestVersionOutput/JSON --- PASS: TestVersionOutput (0.00s) --- PASS: TestVersionOutput/ASCII (0.00s) --- PASS: TestVersionOutput/JSON (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli 0.265s === RUN TestSignatureBytesTrimsTrailingWhitespace --- PASS: TestSignatureBytesTrimsTrailingWhitespace (0.00s) === RUN TestSignatureBytesFileWithoutTrailingWhitespaceUnaffected --- PASS: TestSignatureBytesFileWithoutTrailingWhitespaceUnaffected (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/attach 0.213s === RUN TestAttestBlobCmdLocalKeyAndSk --- PASS: TestAttestBlobCmdLocalKeyAndSk (0.00s) === RUN TestAttestBlobCmdLocalKeyAndCert === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/no_cert Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCAicHJlZGljYXRlIjp7ImJ1aWxkVHlwZSI6IngiLCAiYnVpbGRlciI6eyJpZCI6IjIifX19","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIBtxscltG4Kz49wv57S+wFtQuoyU0SiwAkihTxE4rbFsAiEAlkluvulz2zTRp2OryaXWKEX2xmUQ9bjNRJY60p8kcpk="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCAicHJlZGljYXRlIjp7ImJ1aWxkVHlwZSI6IngiLCAiYnVpbGRlciI6eyJpZCI6IjIifX19","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQDzYJKOMV2T+dGIlv3WpAoDOj5LzgPkXLD3LB9nlgft+QIhAKPA5I6W0V5wc5l1Ksl9SYeV32JzdoqqVIIvSwV9uWb2"}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/new_bundle_generation Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/output.bundle === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_no_match_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCAicHJlZGljYXRlIjp7ImJ1aWxkVHlwZSI6IngiLCAiYnVpbGRlciI6eyJpZCI6IjIifX19","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIFSMneKVFiKNRCkZDQA+86X5j7CAGEuCmBiCWGODB610AiEAvGWa4cljCzQHiY6N5UqWVi5pKRQALxdpDTAwdqPb7rQ="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_partial Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCAicHJlZGljYXRlIjp7ImJ1aWxkVHlwZSI6IngiLCAiYnVpbGRlciI6eyJpZCI6IjIifX19","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQDDsn7X80rtyl8S78hgRDWdLOtFBTR7bfKo/AG9v+gOiwIhANQ3c4XUcHayvqfODkv3WpT0mBGYeVpM7f3QTb16kYU9"}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_includes_root Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCAicHJlZGljYXRlIjp7ImJ1aWxkVHlwZSI6IngiLCAiYnVpbGRlciI6eyJpZCI6IjIifX19","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIFqjKcBilOy1kxSPtlcOwLoS7jFYxOGXrgGf+Z0oFTLpAiAGqP54wZedEgP38HyIKHFJ5eD0kCltKmVSlqHwwaxbZA=="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_chain_bad Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate02.json === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1 === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/no_cert Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6eyJidWlsZERlZmluaXRpb24iOnt9LCAicnVuRGV0YWlscyI6e319fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIE4KXMP4GS5xoJJRGFZxz1ZH2ZIzFMWcF8wE8aUutVaHAiAMh+Mtx8+DAUiPV71aewifVV7qXXag+T+r2E3yaLrTvg=="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6eyJidWlsZERlZmluaXRpb24iOnt9LCAicnVuRGV0YWlscyI6e319fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQDNspILGYPn1l9B8ZpKG+99wyv3ajRJud+UGanDxxGUwgIgVoSLeHi8bBVIow2dc5ONxLpopEnkyO3+cguyKMBPoZM="}]} Signing artifact... === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/new_bundle_generation Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/output.bundle === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_no_match_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6eyJidWlsZERlZmluaXRpb24iOnt9LCAicnVuRGV0YWlscyI6e319fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIBgareTh43YqvAsKhDTqbZVDr8QlfyB6Euk7frrxgk4lAiEA7XP11KopWQL7PjtJGKMht59LWtUARPd+Ur8gjPtUurI="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_partial Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6eyJidWlsZERlZmluaXRpb24iOnt9LCAicnVuRGV0YWlscyI6e319fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIEAWAaaHjZTKDLuTxcwyB/pBXlSPMMQvkey5WC3VrJcuAiAfK34Xqx3EspLaeWYR7naeWkEFfc5TEvXygBfGwydpTQ=="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_includes_root Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsICJzdWJqZWN0IjpbeyJuYW1lIjoiZm9vLnR4dCIsICJkaWdlc3QiOnsic2hhMjU2IjoiMmMyNmI0NmI2OGZmYzY4ZmY5OWI0NTNjMWQzMDQxMzQxMzQyMmQ3MDY0ODNiZmEwZjk4YTVlODg2MjY2ZTdhZSJ9fV0sICJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwgInByZWRpY2F0ZSI6eyJidWlsZERlZmluaXRpb24iOnt9LCAicnVuRGV0YWlscyI6e319fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQDth6oh21J7jP31HN8SfXBUNjSF5Yvy4hsHV7y4Y8hC3QIgHGQ6AvthExX6lWwzXGsUGXqJTkUPKGmxL6tuLX1hyfo="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_chain_bad Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert1804794284/001/predicate1.json --- PASS: TestAttestBlobCmdLocalKeyAndCert (3.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance (1.51s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/no_cert (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_matches_key (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/new_bundle_generation (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_no_match_key (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_matches_key (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_partial (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_includes_root (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_chain_bad (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1 (1.51s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/no_cert (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_matches_key (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/new_bundle_generation (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_no_match_key (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_matches_key (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_partial (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_includes_root (0.19s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_chain_bad (0.19s) === RUN TestAttestBlob === RUN TestAttestBlob/slsaprovenance Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob3786652618/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob3786652618/001/predicate02.json Signing artifact... Signature written in /home/buildozer/aports/community/cosign/tmp/TestAttestBlob3786652618/001/dsse.intoto.jsonl === RUN TestAttestBlob/slsaprovenance1 Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob3786652618/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob3786652618/001/predicate1.json Signing artifact... Signature written in /home/buildozer/aports/community/cosign/tmp/TestAttestBlob3786652618/001/dsse.intoto.jsonl --- PASS: TestAttestBlob (0.56s) --- PASS: TestAttestBlob/slsaprovenance (0.19s) --- PASS: TestAttestBlob/slsaprovenance1 (0.19s) === RUN TestBadRekorEntryType === RUN TestBadRekorEntryType/slsaprovenance === RUN TestBadRekorEntryType/slsaprovenance1 --- PASS: TestBadRekorEntryType (0.19s) --- PASS: TestBadRekorEntryType/slsaprovenance (0.00s) --- PASS: TestBadRekorEntryType/slsaprovenance1 (0.00s) === RUN TestStatementPath Using statement from: /home/buildozer/aports/community/cosign/tmp/TestStatementPath109053603/001/statement.json Signing artifact... {"payload":"ewoJCSJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YxIiwKCQkic3ViamVjdCI6IFsKCQkJewoJCQkJIm5hbWUiOiAiZm9vIiwKCQkJCSJkaWdlc3QiOiB7CgkJCQkJInNoYTI1NiI6ICJkZWFkYmVlZiIKCQkJCX0KCQkJfQoJCV0sCgkJInByZWRpY2F0ZVR5cGUiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS9DdXN0b21QcmVkaWNhdGUvdjEiLAoJCSJwcmVkaWNhdGUiOiB7CgkJCSJmb28iOiAiYmFyIgoJCX0KCX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCICUsgqYsOCKD3rIQ8ouY0Tn4x3u83KCRRPCxrNVjeTM8AiEA/Ho2/GByQeQ/EOX+27R3Qhi2To5XqaJuqKtshH/gGSc="}]} --- PASS: TestStatementPath (0.37s) === RUN TestPredicateReader === RUN TestPredicateReader/standard_input Using payload from: standard input === RUN TestPredicateReader/regular_file Using payload from: /home/buildozer/aports/community/cosign/tmp/TestPredicateReaderregular_file2159459829/001/payload.json === RUN TestPredicateReader/missing_file Using payload from: payload.json --- PASS: TestPredicateReader (0.00s) --- PASS: TestPredicateReader/standard_input (0.00s) --- PASS: TestPredicateReader/regular_file (0.00s) --- PASS: TestPredicateReader/missing_file (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/attest 4.552s === RUN TestCreateCmd --- PASS: TestCreateCmd (0.00s) === RUN TestCreateCmd_FailOnIgnoreTlogWithSET === RUN TestCreateCmd_FailOnIgnoreTlogWithSET/Fail_when_bundle_has_SET_and_IgnoreTlog_is_true === RUN TestCreateCmd_FailOnIgnoreTlogWithSET/Pass_when_bundle_has_no_SET_and_IgnoreTlog_is_true --- PASS: TestCreateCmd_FailOnIgnoreTlogWithSET (0.00s) --- PASS: TestCreateCmd_FailOnIgnoreTlogWithSET/Fail_when_bundle_has_SET_and_IgnoreTlog_is_true (0.00s) --- PASS: TestCreateCmd_FailOnIgnoreTlogWithSET/Pass_when_bundle_has_no_SET_and_IgnoreTlog_is_true (0.00s) === RUN TestCreateFromContainerCmd 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:8a7e5ae5913c6989223ba7399616e115d198667c33553f3b32a70ae20057080d 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:e1fd49f077910a8624d10c83b31375eb22a4349ea8be2eed8bc477273f45a39a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/5148611041002507762 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/5148611041002507762?digest=sha256%3A8a7e5ae5913c6989223ba7399616e115d198667c33553f3b32a70ae20057080d 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/4941104219188634813 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/4941104219188634813?digest=sha256%3Ae1fd49f077910a8624d10c83b31375eb22a4349ea8be2eed8bc477273f45a39a 2026/11/03 11:45:05 PUT /v2/repo/manifests/tag 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.sig 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 HEAD /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.sig 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:57e3edd13b95b6e5e05f94c0dd6bfc02b20110c4332d5b3fa8657cdd3f0abf67 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:9e9cc34b0d9cac7eee8af83704f368fc4a5784794ff6988d2306be7ee00845ee 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/1978423928534860484 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/3693800684783887075 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/1978423928534860484?digest=sha256%3A9e9cc34b0d9cac7eee8af83704f368fc4a5784794ff6988d2306be7ee00845ee 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/3693800684783887075?digest=sha256%3A57e3edd13b95b6e5e05f94c0dd6bfc02b20110c4332d5b3fa8657cdd3f0abf67 2026/11/03 11:45:05 PUT /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.sig 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.att 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 HEAD /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.att 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:0a0e073ed343c385694e69c1c199a97422e2cb1aca83ad5a952f7c8e34cc5093 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:4b38ce3a73278e655e4f27ecb62e3d3ebe0b946b16e70b580eec6c70c1c1b2a9 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/273066894748083863 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/5993140879844698444 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/273066894748083863?digest=sha256%3A0a0e073ed343c385694e69c1c199a97422e2cb1aca83ad5a952f7c8e34cc5093 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/5993140879844698444?digest=sha256%3A4b38ce3a73278e655e4f27ecb62e3d3ebe0b946b16e70b580eec6c70c1c1b2a9 2026/11/03 11:45:05 PUT /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.att 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/repo/referrers/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.sig 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.att WARNING: unable to convert signatures into attestations; skipping 2026/11/03 11:45:05 GET /v2/repo/blobs/sha256:4b38ce3a73278e655e4f27ecb62e3d3ebe0b946b16e70b580eec6c70c1c1b2a9 2026/11/03 11:45:05 HEAD /v2/repo/manifests/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/1021613516372582838 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/1021613516372582838?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:84b5dce9007026db4dede9af4c4cb3d16a843ffd430294f0cff44b5c2e4c2287 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/83609183290177817 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/83609183290177817?digest=sha256%3A84b5dce9007026db4dede9af4c4cb3d16a843ffd430294f0cff44b5c2e4c2287 2026/11/03 11:45:05 PUT /v2/repo/manifests/sha256:b6c3e9666c47352cfbc146455ea7e6edd150b4a83aa2a22a86026a11c7d0cf03 2026/11/03 11:45:05 GET /v2/repo/referrers/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 Converted 1 legacy attestation(s) for 127.0.0.1:46405/repo@sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153; skipped 0 already present 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/referrers/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:b6c3e9666c47352cfbc146455ea7e6edd150b4a83aa2a22a86026a11c7d0cf03 2026/11/03 11:45:05 GET /v2/repo/blobs/sha256:84b5dce9007026db4dede9af4c4cb3d16a843ffd430294f0cff44b5c2e4c2287 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/referrers/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/repo/referrers/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:b6c3e9666c47352cfbc146455ea7e6edd150b4a83aa2a22a86026a11c7d0cf03 2026/11/03 11:45:05 GET /v2/repo/blobs/sha256:84b5dce9007026db4dede9af4c4cb3d16a843ffd430294f0cff44b5c2e4c2287 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.sig 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153.att WARNING: unable to convert signatures into attestations; skipping 2026/11/03 11:45:05 GET /v2/repo/blobs/sha256:4b38ce3a73278e655e4f27ecb62e3d3ebe0b946b16e70b580eec6c70c1c1b2a9 Converted 0 legacy attestation(s) for 127.0.0.1:46405/repo@sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153; skipped 1 already present 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/referrers/sha256:ab8a80801ad40307daf11c15204f96c82cc6de14ed7ebefbae5c4a14395ed153 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:b6c3e9666c47352cfbc146455ea7e6edd150b4a83aa2a22a86026a11c7d0cf03 2026/11/03 11:45:05 GET /v2/repo/blobs/sha256:84b5dce9007026db4dede9af4c4cb3d16a843ffd430294f0cff44b5c2e4c2287 --- PASS: TestCreateFromContainerCmd (0.04s) === RUN TestCreateFromContainerCmd_NoLegacyMaterial 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:bc4c9a2b5aad70df1aa40db52151652f4eaadf2ce5996706547079cb3418ce31 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 HEAD /v2/repo/blobs/sha256:33adf516b8edd306396c47191536fd6a5ab895dad79379c9cbec8e4b5c331305 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/8309811421253262261 2026/11/03 11:45:05 PATCH /v2/repo/blobs/uploads/7331778682651003479 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/7331778682651003479?digest=sha256%3A33adf516b8edd306396c47191536fd6a5ab895dad79379c9cbec8e4b5c331305 2026/11/03 11:45:05 PUT /v2/repo/blobs/uploads/8309811421253262261?digest=sha256%3Abc4c9a2b5aad70df1aa40db52151652f4eaadf2ce5996706547079cb3418ce31 2026/11/03 11:45:05 PUT /v2/repo/manifests/tag 2026/11/03 11:45:05 GET /v2/ 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256:ea562163832a9f9bd70ab999d53ee49a9989443a2351964c3a4cf8819eb083e3 2026/11/03 11:45:05 GET /v2/repo/referrers/sha256:ea562163832a9f9bd70ab999d53ee49a9989443a2351964c3a4cf8819eb083e3 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ea562163832a9f9bd70ab999d53ee49a9989443a2351964c3a4cf8819eb083e3.sig 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 11:45:05 GET /v2/repo/manifests/sha256-ea562163832a9f9bd70ab999d53ee49a9989443a2351964c3a4cf8819eb083e3.att 404 MANIFEST_UNKNOWN Unknown manifest --- PASS: TestCreateFromContainerCmd_NoLegacyMaterial (0.01s) === RUN TestInspectCmd === RUN TestInspectCmd/v0.3_bundle_with_single_cert WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_missing_media_type WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_unrecognized_media_type WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_missing_verification_material WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_missing_content WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. --- PASS: TestInspectCmd (1.65s) --- PASS: TestInspectCmd/v0.3_bundle_with_single_cert (0.36s) --- PASS: TestInspectCmd/Bundle_with_missing_media_type (0.31s) --- PASS: TestInspectCmd/Bundle_with_unrecognized_media_type (0.36s) --- PASS: TestInspectCmd/Bundle_with_missing_verification_material (0.30s) --- PASS: TestInspectCmd/Bundle_with_missing_content (0.31s) === RUN TestPopulateVerificationMaterialSummary === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_public_key === RUN TestPopulateVerificationMaterialSummary/v0.1_bundle_with_single_cert_(expects_warning) === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_certificate_chain_(expects_warning) === RUN TestPopulateVerificationMaterialSummary/v0.1_bundle_with_tlog_entry_missing_promise === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_tlog_entry_missing_proof === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_raw_bytes === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_chain === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_missing_verification_material_content --- PASS: TestPopulateVerificationMaterialSummary (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_public_key (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.1_bundle_with_single_cert_(expects_warning) (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_certificate_chain_(expects_warning) (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.1_bundle_with_tlog_entry_missing_promise (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_tlog_entry_missing_proof (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_raw_bytes (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_chain (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_missing_verification_material_content (0.00s) === RUN TestPopulateCertificateSummary === RUN TestPopulateCertificateSummary/ECDSA === RUN TestPopulateCertificateSummary/Ed25519 === RUN TestPopulateCertificateSummary/RSA --- PASS: TestPopulateCertificateSummary (0.39s) --- PASS: TestPopulateCertificateSummary/ECDSA (0.00s) --- PASS: TestPopulateCertificateSummary/Ed25519 (0.00s) --- PASS: TestPopulateCertificateSummary/RSA (0.00s) === RUN TestPopulateCertificateSummary_Authority === RUN TestPopulateCertificateSummary_Authority/Found_in_initialized_trusted_root === RUN TestPopulateCertificateSummary_Authority/Not_found_in_initialized_trusted_root --- PASS: TestPopulateCertificateSummary_Authority (0.00s) --- PASS: TestPopulateCertificateSummary_Authority/Found_in_initialized_trusted_root (0.00s) --- PASS: TestPopulateCertificateSummary_Authority/Not_found_in_initialized_trusted_root (0.00s) === RUN TestPopulateTlogEntrySummary === RUN TestPopulateTlogEntrySummary/Not_found_in_initialized_trusted_root === RUN TestPopulateTlogEntrySummary/Found_in_initialized_trusted_root === RUN TestPopulateTlogEntrySummary/with_kind/version === RUN TestPopulateTlogEntrySummary/with_canonicalized_body --- PASS: TestPopulateTlogEntrySummary (0.00s) --- PASS: TestPopulateTlogEntrySummary/Not_found_in_initialized_trusted_root (0.00s) --- PASS: TestPopulateTlogEntrySummary/Found_in_initialized_trusted_root (0.00s) --- PASS: TestPopulateTlogEntrySummary/with_kind/version (0.00s) --- PASS: TestPopulateTlogEntrySummary/with_canonicalized_body (0.00s) === RUN TestPopulateContentSummary === RUN TestPopulateContentSummary/DSSE_Envelope === RUN TestPopulateContentSummary/Message_Signature --- PASS: TestPopulateContentSummary (0.00s) --- PASS: TestPopulateContentSummary/DSSE_Envelope (0.00s) --- PASS: TestPopulateContentSummary/Message_Signature (0.00s) === RUN TestPopulateTimestampSummary --- PASS: TestPopulateTimestampSummary (0.00s) === RUN TestPopulateContentSummary_DsseSignatures === RUN TestPopulateContentSummary_DsseSignatures/Valid_Base64_Key_Hint === RUN TestPopulateContentSummary_DsseSignatures/Invalid_Base64_Key_Hint === RUN TestPopulateContentSummary_DsseSignatures/Key_Hint_Mismatch --- PASS: TestPopulateContentSummary_DsseSignatures (0.00s) --- PASS: TestPopulateContentSummary_DsseSignatures/Valid_Base64_Key_Hint (0.00s) --- PASS: TestPopulateContentSummary_DsseSignatures/Invalid_Base64_Key_Hint (0.00s) --- PASS: TestPopulateContentSummary_DsseSignatures/Key_Hint_Mismatch (0.00s) === RUN TestPopulateTlogEntrySummary_Inclusion === RUN TestPopulateTlogEntrySummary_Inclusion/Inclusion_promise === RUN TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_invalid_checkpoint === RUN TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_valid_checkpoint --- PASS: TestPopulateTlogEntrySummary_Inclusion (0.00s) --- PASS: TestPopulateTlogEntrySummary_Inclusion/Inclusion_promise (0.00s) --- PASS: TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_invalid_checkpoint (0.00s) --- PASS: TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_valid_checkpoint (0.00s) === RUN TestUpgradeBundle === RUN TestUpgradeBundle/Already_v0.3 Bundle is already at v0.3, no upgrade needed. === RUN TestUpgradeBundle/Upgrade_v0.1_to_v0.3 Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Certificate 1: === RUN TestUpgradeBundle/Upgrade_v0.2_to_v0.3 Upgrading from v0.2 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Certificate 1: === RUN TestUpgradeBundle/Upgrade_with_Email_SAN Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: foo@bar.com === RUN TestUpgradeBundle/Upgrade_with_URI_SAN Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: https://example.com/workflow === RUN TestUpgradeBundle/Upgrade_with_Subject Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: CN=my-identity,O=dev === RUN TestUpgradeBundle/Upgrade_with_no_identity Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: === RUN TestUpgradeBundle/Missing_VerificationMaterial === RUN TestUpgradeBundle/Missing_Content_in_VerificationMaterial === RUN TestUpgradeBundle/Unsupported_version === RUN TestUpgradeBundle/Upgrade_with_missing_inclusion_proof Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Fetching missing inclusion proof from Rekor for log index 42... --- PASS: TestUpgradeBundle (0.00s) --- PASS: TestUpgradeBundle/Already_v0.3 (0.00s) --- PASS: TestUpgradeBundle/Upgrade_v0.1_to_v0.3 (0.00s) --- PASS: TestUpgradeBundle/Upgrade_v0.2_to_v0.3 (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_Email_SAN (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_URI_SAN (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_Subject (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_no_identity (0.00s) --- PASS: TestUpgradeBundle/Missing_VerificationMaterial (0.00s) --- PASS: TestUpgradeBundle/Missing_Content_in_VerificationMaterial (0.00s) --- PASS: TestUpgradeBundle/Unsupported_version (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_missing_inclusion_proof (0.00s) === RUN TestUpgradeCmd === RUN TestUpgradeCmd/File_Output Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Successfully upgraded bundle written to /home/buildozer/aports/community/cosign/tmp/TestUpgradeCmdFile_Output2759475065/001/output.json === RUN TestUpgradeCmd/Stdout_Fallback Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: --- PASS: TestUpgradeCmd (0.00s) --- PASS: TestUpgradeCmd/File_Output (0.00s) --- PASS: TestUpgradeCmd/Stdout_Fallback (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/bundle 2.340s === RUN TestCopyAttachmentTagPrefix Copying index.docker.io/library/alpine@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a to index.docker.io/library/test-alpine:test-tagsha256-be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a... Copying index.docker.io/library/alpine@sha256:c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d to index.docker.io/library/test-alpine:test-tagsha256-c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d... Copying index.docker.io/library/alpine@sha256:964745728d174226819257152a79b34561fe7321472eb9c8e32f461cbc7969c2 to index.docker.io/library/test-alpine:test-tagsha256-964745728d174226819257152a79b34561fe7321472eb9c8e32f461cbc7969c2... Copying index.docker.io/library/alpine@sha256:2b8ed0bd9e82c247a3817b867718404f020ab8f701bda09642ddfaa7b4f1578d to index.docker.io/library/test-alpine:test-tagsha256-2b8ed0bd9e82c247a3817b867718404f020ab8f701bda09642ddfaa7b4f1578d... Copying index.docker.io/library/alpine@sha256:a28d9fc2e441f25a4340eaa840511d5ad1e07522bd56b498af238382f40ade35 to index.docker.io/library/test-alpine:test-tagsha256-a28d9fc2e441f25a4340eaa840511d5ad1e07522bd56b498af238382f40ade35... Copying index.docker.io/library/alpine@sha256:6db0aa37b0f1ba86c31102b0972cb082a1d22ed1390440de84f1076d78d4d399 to index.docker.io/library/test-alpine:test-tagsha256-6db0aa37b0f1ba86c31102b0972cb082a1d22ed1390440de84f1076d78d4d399... Copying index.docker.io/library/alpine@sha256:563589a905f92e0add079850ab496c980d78cc70b4b30114d4d9bab1c0aa22d8 to index.docker.io/library/test-alpine:test-tagsha256-563589a905f92e0add079850ab496c980d78cc70b4b30114d4d9bab1c0aa22d8... Copying index.docker.io/library/alpine@sha256:e311ae748be7f56ae5cba304bc488f0786df68ee507513f654a5cc8597cffb42 to index.docker.io/library/test-alpine:test-tagsha256-e311ae748be7f56ae5cba304bc488f0786df68ee507513f654a5cc8597cffb42... Copying index.docker.io/library/alpine@sha256:94db52ee2ab0391093b6748b79508ce6f91a046348f67afae380f372633f5c55 to index.docker.io/library/test-alpine:test-tagsha256-94db52ee2ab0391093b6748b79508ce6f91a046348f67afae380f372633f5c55... Copying index.docker.io/library/alpine@sha256:6708ca119efec5c3fdcad5dc95d8a28a529aad8debc95872b7e12b3941882f55 to index.docker.io/library/test-alpine:test-tagsha256-6708ca119efec5c3fdcad5dc95d8a28a529aad8debc95872b7e12b3941882f55... Copying index.docker.io/library/alpine@sha256:ba50faba2da27dc9cc11c6f496125fea631b0778bcb29aaf59f904bb36ea0a8a to index.docker.io/library/test-alpine:test-tagsha256-ba50faba2da27dc9cc11c6f496125fea631b0778bcb29aaf59f904bb36ea0a8a... Copying index.docker.io/library/alpine@sha256:8603c585662f0dcd519f4838a40ea3ef98542466848021ffd3c7b7979896362a to index.docker.io/library/test-alpine:test-tagsha256-8603c585662f0dcd519f4838a40ea3ef98542466848021ffd3c7b7979896362a... Copying index.docker.io/library/alpine@sha256:1aee90cdbda4ad57477d7481c68b64ad16e03f2ed23e200f719a22bfc55407be to index.docker.io/library/test-alpine:test-tagsha256-1aee90cdbda4ad57477d7481c68b64ad16e03f2ed23e200f719a22bfc55407be... Copying index.docker.io/library/alpine@sha256:4451fbe20381b2a23da80f7a6f68f30f3ff0ff2f4a4a074505a52bd46423fb39 to index.docker.io/library/test-alpine:test-tagsha256-4451fbe20381b2a23da80f7a6f68f30f3ff0ff2f4a4a074505a52bd46423fb39... Copying index.docker.io/library/alpine@sha256:37480ae6d5242e16a2f59464deed2018531936746a1a3928df39b4ce5dab6b4c to index.docker.io/library/test-alpine:test-tagsha256-37480ae6d5242e16a2f59464deed2018531936746a1a3928df39b4ce5dab6b4c... Copying index.docker.io/library/alpine@sha256:e56e90d77a05614cba94ec4c791282e108f3eac66d697781a79f9c0ccf2f6804 to index.docker.io/library/test-alpine:test-tagsha256-e56e90d77a05614cba94ec4c791282e108f3eac66d697781a79f9c0ccf2f6804... Copying index.docker.io/library/alpine@sha256:12fab14f7a43d3fabe0a4047c9b8b2de354608c1421ab7df6e265508f67a7c74 to index.docker.io/library/test-alpine:test-tagsha256-12fab14f7a43d3fabe0a4047c9b8b2de354608c1421ab7df6e265508f67a7c74... --- PASS: TestCopyAttachmentTagPrefix (3.50s) === RUN TestCopyPlatformOpt Copying index.docker.io/library/alpine@sha256:c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d to index.docker.io/library/test-alpine:sha256-c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d... --- PASS: TestCopyPlatformOpt (1.52s) === RUN TestParseOnlyOpt --sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--- PASS: TestParseOnlyOpt (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/copy 5.244s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/debug [no test files] === RUN TestGetImagesFromDockerfile === RUN TestGetImagesFromDockerfile/plain === RUN TestGetImagesFromDockerfile/tag === RUN TestGetImagesFromDockerfile/tag_with_as === RUN TestGetImagesFromDockerfile/digest === RUN TestGetImagesFromDockerfile/fancy-from === RUN TestGetImagesFromDockerfile/multistage === RUN TestGetImagesFromDockerfile/with-arg === RUN TestGetImagesFromDockerfile/with-value-from-arg === RUN TestGetImagesFromDockerfile/with-value-from-env === RUN TestGetImagesFromDockerfile/with-multiple-values-from-env === RUN TestGetImagesFromDockerfile/with-value-from-arg-from-env === RUN TestGetImagesFromDockerfile/image-in-copy === RUN TestGetImagesFromDockerfile/image-in-copy-with-env === RUN TestGetImagesFromDockerfile/copy-dont-include-prepare-stage-as-images === RUN TestGetImagesFromDockerfile/from-references-previous-stage - stage reference ignored: base_image === RUN TestGetImagesFromDockerfile/gauntlet --- PASS: TestGetImagesFromDockerfile (0.00s) --- PASS: TestGetImagesFromDockerfile/plain (0.00s) --- PASS: TestGetImagesFromDockerfile/tag (0.00s) --- PASS: TestGetImagesFromDockerfile/tag_with_as (0.00s) --- PASS: TestGetImagesFromDockerfile/digest (0.00s) --- PASS: TestGetImagesFromDockerfile/fancy-from (0.00s) --- PASS: TestGetImagesFromDockerfile/multistage (0.00s) --- PASS: TestGetImagesFromDockerfile/with-arg (0.00s) --- PASS: TestGetImagesFromDockerfile/with-value-from-arg (0.00s) --- PASS: TestGetImagesFromDockerfile/with-value-from-env (0.00s) --- PASS: TestGetImagesFromDockerfile/with-multiple-values-from-env (0.00s) --- PASS: TestGetImagesFromDockerfile/with-value-from-arg-from-env (0.00s) --- PASS: TestGetImagesFromDockerfile/image-in-copy (0.00s) --- PASS: TestGetImagesFromDockerfile/image-in-copy-with-env (0.00s) --- PASS: TestGetImagesFromDockerfile/copy-dont-include-prepare-stage-as-images (0.00s) --- PASS: TestGetImagesFromDockerfile/from-references-previous-stage (0.00s) --- PASS: TestGetImagesFromDockerfile/gauntlet (0.00s) === RUN TestGetImagesFromDockerfileInvalidFromLines === RUN TestGetImagesFromDockerfileInvalidFromLines/unresolvable-build-arg === RUN TestGetImagesFromDockerfileInvalidFromLines/missing-stage-name-after-as --- PASS: TestGetImagesFromDockerfileInvalidFromLines (0.00s) --- PASS: TestGetImagesFromDockerfileInvalidFromLines/unresolvable-build-arg (0.00s) --- PASS: TestGetImagesFromDockerfileInvalidFromLines/missing-stage-name-after-as (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/dockerfile 0.239s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/download [no test files] === RUN TestNoDeps === RUN TestNoDeps/github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio --- PASS: TestNoDeps (0.20s) --- PASS: TestNoDeps/github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio (0.20s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio 0.228s === RUN TestReadPasswordFn_env --- PASS: TestReadPasswordFn_env (0.00s) === RUN TestReadPasswordFn_envEmptyVal --- PASS: TestReadPasswordFn_envEmptyVal (0.00s) === RUN TestGenerationOfKeys Private key written to my-test.key Public key written to my-test.pub generate_key_pair_test.go:76: key generation for key my-test.key succeeded generate_key_pair_test.go:76: key generation for key my-test.pub succeeded generate_key_pair_test.go:83: Removing keyfile my-test.pub... generate_key_pair_test.go:85: Removed keyfile my-test.pub generate_key_pair_test.go:83: Removing keyfile my-test.key... generate_key_pair_test.go:85: Removed keyfile my-test.key --- PASS: TestGenerationOfKeys (0.20s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/generate 0.384s === RUN TestReadPasswordFn_env --- PASS: TestReadPasswordFn_env (0.00s) === RUN TestReadPasswordFn_envEmptyVal --- PASS: TestReadPasswordFn_envEmptyVal (0.00s) === RUN TestImportOfKeys Private key written to my-test.key Public key written to my-test.pub import_key_pair_test.go:115: key generation for key my-private-key.pem succeeded import_key_pair_test.go:115: key generation for key my-test.key succeeded import_key_pair_test.go:115: key generation for key my-test.pub succeeded import_key_pair_test.go:122: Removing keyfile my-test.pub... import_key_pair_test.go:124: Removed keyfile my-test.pub import_key_pair_test.go:122: Removing keyfile my-test.key... import_key_pair_test.go:124: Removed keyfile my-test.key import_key_pair_test.go:122: Removing keyfile my-private-key.pem... import_key_pair_test.go:124: Removed keyfile my-private-key.pem --- PASS: TestImportOfKeys (7.06s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/importkeypair 7.279s === RUN TestDoInitialize === RUN TestDoInitialize/tuf_v2_with_trusted_root_and_signing_config === RUN TestDoInitialize/tuf_v1 === RUN TestDoInitialize/invalid_root_-_should_not_try_to_use_embedded --- PASS: TestDoInitialize (0.08s) --- PASS: TestDoInitialize/tuf_v2_with_trusted_root_and_signing_config (0.02s) --- PASS: TestDoInitialize/tuf_v1 (0.06s) --- PASS: TestDoInitialize/invalid_root_-_should_not_try_to_use_embedded (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/initialize 0.314s === RUN TestGetImagesFromYamlManifest === RUN TestGetImagesFromYamlManifest/single_image === RUN TestGetImagesFromYamlManifest/initialize_and_container_images === RUN TestGetImagesFromYamlManifest/daemonsets === RUN TestGetImagesFromYamlManifest/jobs === RUN TestGetImagesFromYamlManifest/cronjobs === RUN TestGetImagesFromYamlManifest/multi_image === RUN TestGetImagesFromYamlManifest/multiple_resources_and_images_within_a_document === RUN TestGetImagesFromYamlManifest/no_images_found === RUN TestGetImagesFromYamlManifest/custom_type_single_image --- PASS: TestGetImagesFromYamlManifest (0.00s) --- PASS: TestGetImagesFromYamlManifest/single_image (0.00s) --- PASS: TestGetImagesFromYamlManifest/initialize_and_container_images (0.00s) --- PASS: TestGetImagesFromYamlManifest/daemonsets (0.00s) --- PASS: TestGetImagesFromYamlManifest/jobs (0.00s) --- PASS: TestGetImagesFromYamlManifest/cronjobs (0.00s) --- PASS: TestGetImagesFromYamlManifest/multi_image (0.00s) --- PASS: TestGetImagesFromYamlManifest/multiple_resources_and_images_within_a_document (0.00s) --- PASS: TestGetImagesFromYamlManifest/no_images_found (0.00s) --- PASS: TestGetImagesFromYamlManifest/custom_type_single_image (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/manifest 0.240s === RUN TestAnnotationOptions_AnnotationsMap === RUN TestAnnotationOptions_AnnotationsMap/nil === RUN TestAnnotationOptions_AnnotationsMap/valid_key === RUN TestAnnotationOptions_AnnotationsMap/value_containing_equals_sign === RUN TestAnnotationOptions_AnnotationsMap/base64_value_with_padding === RUN TestAnnotationOptions_AnnotationsMap/invalid_key --- PASS: TestAnnotationOptions_AnnotationsMap (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/nil (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/valid_key (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/value_containing_equals_sign (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/base64_value_with_padding (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/invalid_key (0.00s) === RUN TestOneOf === RUN TestOneOf/3/3 === RUN TestOneOf/2/3 === RUN TestOneOf/1/3 === RUN TestOneOf/0/1 === RUN TestOneOf/1/1 === RUN TestOneOf/structs === RUN TestOneOf/struct === RUN TestOneOf/pointers === RUN TestOneOf/pointer --- PASS: TestOneOf (0.00s) --- PASS: TestOneOf/3/3 (0.00s) --- PASS: TestOneOf/2/3 (0.00s) --- PASS: TestOneOf/1/3 (0.00s) --- PASS: TestOneOf/0/1 (0.00s) --- PASS: TestOneOf/1/1 (0.00s) --- PASS: TestOneOf/structs (0.00s) --- PASS: TestOneOf/struct (0.00s) --- PASS: TestOneOf/pointers (0.00s) --- PASS: TestOneOf/pointer (0.00s) === RUN TestGetTLSConfig === RUN TestGetTLSConfig/Valid_CA_Cert,_Client_Cert_and_Key,_Server_Name,_Allow_Insecure === RUN TestGetTLSConfig/Wrong_key_for_client_cert === RUN TestGetTLSConfig/Wrong_ca_key === RUN TestGetTLSConfig/Invalid_CA_path --- PASS: TestGetTLSConfig (0.65s) --- PASS: TestGetTLSConfig/Valid_CA_Cert,_Client_Cert_and_Key,_Server_Name,_Allow_Insecure (0.00s) --- PASS: TestGetTLSConfig/Wrong_key_for_client_cert (0.00s) --- PASS: TestGetTLSConfig/Wrong_ca_key (0.00s) --- PASS: TestGetTLSConfig/Invalid_CA_path (0.00s) === RUN TestFlagToEnv === RUN TestFlagToEnv/rekor-url === RUN TestFlagToEnv/certificate === RUN TestFlagToEnv/k8s-keychain === RUN TestFlagToEnv/output-file === RUN TestFlagToEnv/sbom --- PASS: TestFlagToEnv (0.00s) --- PASS: TestFlagToEnv/rekor-url (0.00s) --- PASS: TestFlagToEnv/certificate (0.00s) --- PASS: TestFlagToEnv/k8s-keychain (0.00s) --- PASS: TestFlagToEnv/output-file (0.00s) --- PASS: TestFlagToEnv/sbom (0.00s) === RUN TestSignatureDigestOptionsHashAlgorithm === RUN TestSignatureDigestOptionsHashAlgorithm/unset_defers_to_caller-specific_default === RUN TestSignatureDigestOptionsHashAlgorithm/sha256 === RUN TestSignatureDigestOptionsHashAlgorithm/sha512 === RUN TestSignatureDigestOptionsHashAlgorithm/case_and_whitespace_insensitive === RUN TestSignatureDigestOptionsHashAlgorithm/unknown_algorithm_errors --- PASS: TestSignatureDigestOptionsHashAlgorithm (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/unset_defers_to_caller-specific_default (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/sha256 (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/sha512 (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/case_and_whitespace_insensitive (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/unknown_algorithm_errors (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/options 0.867s === RUN TestPublicKeyLocation Public key written to cosign.pub --- PASS: TestPublicKeyLocation (0.38s) === RUN TestPublicKeyBadPrivateKey --- PASS: TestPublicKeyBadPrivateKey (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/publickey 0.588s === RUN TestNewClient === PAUSE TestNewClient === CONT TestNewClient --- PASS: TestNewClient (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/rekor 0.221s === RUN TestSignBlobCmd Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/bundle.sigstore.json MEUCIQCQdgnJukCb72/vLUAC9PVSMbtxI9PvxwdJnz/XSCPoPQIgWKNlBVG1p8Dfxti0/c7dwFtCix+47QIsf//pJZUc9EU= Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/bundle.sigstore.json Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/bundle.sigstore.json Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/bundle.sigstore.json p3chPrmexLVxSaNL+F/TPxJn+y3S1E3C9171oterQq74JAUe38u+zckrC5cNmdeZOKE3zN9bRB0bd/d/6wAkCQ== Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd134281156/001/bundle.sigstore.json p3chPrmexLVxSaNL+F/TPxJn+y3S1E3C9171oterQq74JAUe38u+zckrC5cNmdeZOKE3zN9bRB0bd/d/6wAkCQ== --- PASS: TestSignBlobCmd (1.52s) === RUN TestSignBlobCmd_LegacyBundleNoCert Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd_LegacyBundleNoCert1035508737/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd_LegacyBundleNoCert1035508737/001/legacy-bundle.json MEUCIG1bptEMLVeozHUDYGfDVxO/Y7V+c5mtOcuT8iej9LF+AiEAiA0zGd/uzSPAsE4eHrUBXtQpcPCenB38eFa3iYZmVko= --- PASS: TestSignBlobCmd_LegacyBundleNoCert (0.37s) === RUN TestSignCmdLocalKeyAndSk --- PASS: TestSignCmdLocalKeyAndSk (0.00s) === RUN TestInTotoStatementHasPredicate --- PASS: TestInTotoStatementHasPredicate (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/sign 2.141s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/sign/privacy [no test files] === RUN Test_signerFromKeyRefSuccess --- PASS: Test_signerFromKeyRefSuccess (0.39s) === RUN Test_signerFromKeyRefFailure --- PASS: Test_signerFromKeyRefFailure (1.02s) === RUN Test_signerFromKeyRefFailureEmptyChainFile --- PASS: Test_signerFromKeyRefFailureEmptyChainFile (0.38s) === RUN Test_ParseOCIReference --- PASS: Test_ParseOCIReference (0.00s) === RUN TestConfirmPrivacyStatement === RUN TestConfirmPrivacyStatement/custom_Rekor_URL_with_key_skips_public_instance_statement === RUN TestConfirmPrivacyStatement/region-specific_public_good_Rekor_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/staging_public_good_Rekor_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/cleared_public_good_Rekor_URL_with_key_skips_statement === RUN TestConfirmPrivacyStatement/keyless_with_public_good_Fulcio_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/keyless_with_staging_public_good_Fulcio_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/keyless_with_custom_Fulcio_URL_skips_public_instance_statement === RUN TestConfirmPrivacyStatement/public_good_Fulcio_URL_with_key_and_without_Rekor_URL_skips_statement === RUN TestConfirmPrivacyStatement/nil_signing_config_skips_public_instance_statement --- PASS: TestConfirmPrivacyStatement (0.00s) --- PASS: TestConfirmPrivacyStatement/custom_Rekor_URL_with_key_skips_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/region-specific_public_good_Rekor_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/staging_public_good_Rekor_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/cleared_public_good_Rekor_URL_with_key_skips_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/keyless_with_public_good_Fulcio_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/keyless_with_staging_public_good_Fulcio_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/keyless_with_custom_Fulcio_URL_skips_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/public_good_Fulcio_URL_with_key_and_without_Rekor_URL_skips_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/nil_signing_config_skips_public_instance_statement (0.00s) === RUN TestShouldUploadToTlog === RUN TestShouldUploadToTlog/tlogUpload_false_returns_false === RUN TestShouldUploadToTlog/signing_config_with_no_Rekor_URLs_returns_false === RUN TestShouldUploadToTlog/tlogUpload_true_with_Rekor_URL_returns_true === RUN TestShouldUploadToTlog/nil_signing_config_with_tlogUpload_true_returns_true --- PASS: TestShouldUploadToTlog (0.00s) --- PASS: TestShouldUploadToTlog/tlogUpload_false_returns_false (0.00s) --- PASS: TestShouldUploadToTlog/signing_config_with_no_Rekor_URLs_returns_false (0.00s) --- PASS: TestShouldUploadToTlog/tlogUpload_true_with_Rekor_URL_returns_true (0.00s) --- PASS: TestShouldUploadToTlog/nil_signing_config_with_tlogUpload_true_returns_true (0.00s) === RUN TestHasPublicGoodRekorURL === RUN TestHasPublicGoodRekorURL/nil_signing_config_returns_false === RUN TestHasPublicGoodRekorURL/empty_signing_config_returns_false === RUN TestHasPublicGoodRekorURL/custom_Rekor_URL_returns_false === RUN TestHasPublicGoodRekorURL/public_good_Rekor_URL_returns_true === RUN TestHasPublicGoodRekorURL/signing_config_with_cleared_Rekor_URLs_returns_false --- PASS: TestHasPublicGoodRekorURL (0.00s) --- PASS: TestHasPublicGoodRekorURL/nil_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodRekorURL/empty_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodRekorURL/custom_Rekor_URL_returns_false (0.00s) --- PASS: TestHasPublicGoodRekorURL/public_good_Rekor_URL_returns_true (0.00s) --- PASS: TestHasPublicGoodRekorURL/signing_config_with_cleared_Rekor_URLs_returns_false (0.00s) === RUN TestHasPublicGoodFulcioURL === RUN TestHasPublicGoodFulcioURL/nil_signing_config_returns_false === RUN TestHasPublicGoodFulcioURL/empty_signing_config_returns_false === RUN TestHasPublicGoodFulcioURL/custom_Fulcio_URL_returns_false === RUN TestHasPublicGoodFulcioURL/public_good_Fulcio_URL_returns_true === RUN TestHasPublicGoodFulcioURL/staging_public_good_Fulcio_URL_returns_true === RUN TestHasPublicGoodFulcioURL/signing_config_with_cleared_Fulcio_URLs_returns_false --- PASS: TestHasPublicGoodFulcioURL (0.00s) --- PASS: TestHasPublicGoodFulcioURL/nil_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodFulcioURL/empty_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodFulcioURL/custom_Fulcio_URL_returns_false (0.00s) --- PASS: TestHasPublicGoodFulcioURL/public_good_Fulcio_URL_returns_true (0.00s) --- PASS: TestHasPublicGoodFulcioURL/staging_public_good_Fulcio_URL_returns_true (0.00s) --- PASS: TestHasPublicGoodFulcioURL/signing_config_with_cleared_Fulcio_URLs_returns_false (0.00s) === RUN TestIsPublicGoodURL === RUN TestIsPublicGoodURL/empty_is_not_public_good === RUN TestIsPublicGoodURL/default_Rekor_production_URL === RUN TestIsPublicGoodURL/default_Fulcio_production_URL === RUN TestIsPublicGoodURL/region-specific_production_URL === RUN TestIsPublicGoodURL/staging_Rekor_URL === RUN TestIsPublicGoodURL/staging_Fulcio_URL === RUN TestIsPublicGoodURL/region-specific_staging_URL === RUN TestIsPublicGoodURL/custom_self-hosted_URL === RUN TestIsPublicGoodURL/uppercase_hostname_is_still_public_good === RUN TestIsPublicGoodURL/lookalike_domain_is_not_public_good === RUN TestIsPublicGoodURL/lookalike_suffix_without_dot_boundary_is_not_public_good === RUN TestIsPublicGoodURL/unparseable_URL --- PASS: TestIsPublicGoodURL (0.00s) --- PASS: TestIsPublicGoodURL/empty_is_not_public_good (0.00s) --- PASS: TestIsPublicGoodURL/default_Rekor_production_URL (0.00s) --- PASS: TestIsPublicGoodURL/default_Fulcio_production_URL (0.00s) --- PASS: TestIsPublicGoodURL/region-specific_production_URL (0.00s) --- PASS: TestIsPublicGoodURL/staging_Rekor_URL (0.00s) --- PASS: TestIsPublicGoodURL/staging_Fulcio_URL (0.00s) --- PASS: TestIsPublicGoodURL/region-specific_staging_URL (0.00s) --- PASS: TestIsPublicGoodURL/custom_self-hosted_URL (0.00s) --- PASS: TestIsPublicGoodURL/uppercase_hostname_is_still_public_good (0.00s) --- PASS: TestIsPublicGoodURL/lookalike_domain_is_not_public_good (0.00s) --- PASS: TestIsPublicGoodURL/lookalike_suffix_without_dot_boundary_is_not_public_good (0.00s) --- PASS: TestIsPublicGoodURL/unparseable_URL (0.00s) === RUN TestNewLegacyBundleFromProtoBundleComponents === RUN TestNewLegacyBundleFromProtoBundleComponents/without_certificates_leaves_cert_field_empty === RUN TestNewLegacyBundleFromProtoBundleComponents/with_certificates_populates_cert_field --- PASS: TestNewLegacyBundleFromProtoBundleComponents (0.00s) --- PASS: TestNewLegacyBundleFromProtoBundleComponents/without_certificates_leaves_cert_field_empty (0.00s) --- PASS: TestNewLegacyBundleFromProtoBundleComponents/with_certificates_populates_cert_field (0.00s) === RUN TestValidateSigningOptions === RUN TestValidateSigningOptions/valid_default_online_signing_flags === RUN TestValidateSigningOptions/valid_signing_config_from_TUF === RUN TestValidateSigningOptions/valid_signing_config_from_file === RUN TestValidateSigningOptions/use_signing_config_with_custom_rekor_URL === RUN TestValidateSigningOptions/use_signing_config_with_custom_fulcio_URL === RUN TestValidateSigningOptions/use_signing_config_with_custom_OIDC_issuer === RUN TestValidateSigningOptions/use_signing_config_with_custom_TSA_server_URL === RUN TestValidateSigningOptions/signing_config_path_with_custom_service_URLs === RUN TestValidateSigningOptions/use_signing_config_with_tlog_upload_false === RUN TestValidateSigningOptions/signing_config_path_with_tlog_upload_false === RUN TestValidateSigningOptions/missing_bundle_output_with_use_signing_config === RUN TestValidateSigningOptions/missing_bundle_output_with_signing_config_path === RUN TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_use_signing_config === RUN TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_signing_config_path === RUN TestValidateSigningOptions/custom_service_URLs_without_signing_config_is_valid === RUN TestValidateSigningOptions/tlog_upload_false_without_signing_config_is_valid === RUN TestValidateSigningOptions/deprecated_output-signature_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output-attestation_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output-certificate_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output-payload_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_rfc3161-timestamp_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output_warning_with_new_bundle_format --- PASS: TestValidateSigningOptions (0.00s) --- PASS: TestValidateSigningOptions/valid_default_online_signing_flags (0.00s) --- PASS: TestValidateSigningOptions/valid_signing_config_from_TUF (0.00s) --- PASS: TestValidateSigningOptions/valid_signing_config_from_file (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_rekor_URL (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_fulcio_URL (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_OIDC_issuer (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_TSA_server_URL (0.00s) --- PASS: TestValidateSigningOptions/signing_config_path_with_custom_service_URLs (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_tlog_upload_false (0.00s) --- PASS: TestValidateSigningOptions/signing_config_path_with_tlog_upload_false (0.00s) --- PASS: TestValidateSigningOptions/missing_bundle_output_with_use_signing_config (0.00s) --- PASS: TestValidateSigningOptions/missing_bundle_output_with_signing_config_path (0.00s) --- PASS: TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_use_signing_config (0.00s) --- PASS: TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_signing_config_path (0.00s) --- PASS: TestValidateSigningOptions/custom_service_URLs_without_signing_config_is_valid (0.00s) --- PASS: TestValidateSigningOptions/tlog_upload_false_without_signing_config_is_valid (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-signature_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-attestation_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-certificate_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-payload_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_rfc3161-timestamp_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output_warning_with_new_bundle_format (0.00s) === RUN TestLoadSigningConfigAndTrustedMaterial === RUN TestLoadSigningConfigAndTrustedMaterial/empty_signing_config_file_bypasses_TUF_and_leaves_TrustedMaterial_nil === RUN TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_explicit_trusted_root_loads_TrustedMaterial_without_contacting_TUF === RUN TestLoadSigningConfigAndTrustedMaterial/invalid_signing_config_path_fails_fast_without_contacting_TUF === RUN TestLoadSigningConfigAndTrustedMaterial/TUF_trusted_root_error_logs_warning_and_continues_without_trusted_root === RUN TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_no_signing_config_and_key_ref_leaves_both_nil_and_bypasses_TUF === RUN TestLoadSigningConfigAndTrustedMaterial/signing_config_with_services_triggers_TUF_fetch === RUN TestLoadSigningConfigAndTrustedMaterial/invalid_trusted_root_path_returns_error === RUN TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_true_fails_when_TUF_signing_config_cannot_be_retrieved --- PASS: TestLoadSigningConfigAndTrustedMaterial (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/empty_signing_config_file_bypasses_TUF_and_leaves_TrustedMaterial_nil (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_explicit_trusted_root_loads_TrustedMaterial_without_contacting_TUF (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/invalid_signing_config_path_fails_fast_without_contacting_TUF (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/TUF_trusted_root_error_logs_warning_and_continues_without_trusted_root (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_no_signing_config_and_key_ref_leaves_both_nil_and_bypasses_TUF (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/signing_config_with_services_triggers_TUF_fetch (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/invalid_trusted_root_path_returns_error (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_true_fails_when_TUF_signing_config_cannot_be_retrieved (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/signcommon 1.998s === RUN TestCreateCmd === RUN TestCreateCmd/missing_url === RUN TestCreateCmd/missing_api-version === RUN TestCreateCmd/missing_start-time === RUN TestCreateCmd/missing_operator === RUN TestCreateCmd/base-config_with_oidc_override --- PASS: TestCreateCmd (0.02s) --- PASS: TestCreateCmd/missing_url (0.00s) --- PASS: TestCreateCmd/missing_api-version (0.00s) --- PASS: TestCreateCmd/missing_start-time (0.00s) --- PASS: TestCreateCmd/missing_operator (0.00s) --- PASS: TestCreateCmd/base-config_with_oidc_override (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/signingconfig 0.129s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/templates [no test files] ? github.com/sigstore/cosign/v3/cmd/cosign/cli/templates/term [no test files] ? github.com/sigstore/cosign/v3/cmd/cosign/cli/triangulate [no test files] === RUN TestCreateCmdDeprecatedFlags --- PASS: TestCreateCmdDeprecatedFlags (0.02s) === RUN TestCreateCmd === RUN TestCreateCmd/fulcio_missing_url === RUN TestCreateCmd/fulcio_missing_certificate-chain === RUN TestCreateCmd/rekor_missing_url === RUN TestCreateCmd/rekor_missing_public-key === RUN TestCreateCmd/rekor_missing_start-time === RUN TestCreateCmd/tsa_missing_url === RUN TestCreateCmd/tsa_missing_certificate-chain === RUN TestCreateCmd/ctfe_missing_url === RUN TestCreateCmd/ctfe_missing_public-key === RUN TestCreateCmd/ctfe_missing_start-time --- PASS: TestCreateCmd (0.02s) --- PASS: TestCreateCmd/fulcio_missing_url (0.00s) --- PASS: TestCreateCmd/fulcio_missing_certificate-chain (0.00s) --- PASS: TestCreateCmd/rekor_missing_url (0.00s) --- PASS: TestCreateCmd/rekor_missing_public-key (0.00s) --- PASS: TestCreateCmd/rekor_missing_start-time (0.00s) --- PASS: TestCreateCmd/tsa_missing_url (0.00s) --- PASS: TestCreateCmd/tsa_missing_certificate-chain (0.00s) --- PASS: TestCreateCmd/ctfe_missing_url (0.00s) --- PASS: TestCreateCmd/ctfe_missing_public-key (0.00s) --- PASS: TestCreateCmd/ctfe_missing_start-time (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/trustedroot 0.153s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/upload [no test files] === RUN TestSetTrustedMaterialNewBundleTUFError --- PASS: TestSetTrustedMaterialNewBundleTUFError (0.00s) === RUN TestSetTrustedMaterialLegacyTUFFallback --- PASS: TestSetTrustedMaterialLegacyTUFFallback (0.00s) === RUN TestVerifyAttestationMissingSubject --- PASS: TestVerifyAttestationMissingSubject (0.00s) === RUN TestVerifyAttestationMissingIssuer --- PASS: TestVerifyAttestationMissingIssuer (0.00s) === RUN TestVerifyAttestationMutuallyExclusiveFlags === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_security_key --- PASS: TestVerifyAttestationMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_security_key (0.00s) === RUN TestVerifyAttestationSkWithoutIdentities --- PASS: TestVerifyAttestationSkWithoutIdentities (0.34s) === RUN TestVerifyBlobAttestation === RUN TestVerifyBlobAttestation/verify_a_slsaprovenance_predicate Verified OK === RUN TestVerifyBlobAttestation/fail_with_incorrect_predicate === RUN TestVerifyBlobAttestation/fail_with_incorrect_blob === RUN TestVerifyBlobAttestation/dsse_envelope_predicate_has_no_subject === RUN TestVerifyBlobAttestation/dsse_envelope_predicate_missing_sha256_digest === RUN TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid Verified OK === RUN TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid,_but_we_are_looking_for_different_predicatetype === RUN TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_none_has_correct_sha256_digest === RUN TestVerifyBlobAttestation/override_file_size_limit === RUN TestVerifyBlobAttestation/verify_new_bundle_with_public_key Verified OK === RUN TestVerifyBlobAttestation/verify_new_bundle_with_public_key_-_bad_sig === RUN TestVerifyBlobAttestation/verify_with_digest_instead_of_blob Verified OK --- PASS: TestVerifyBlobAttestation (0.04s) --- PASS: TestVerifyBlobAttestation/verify_a_slsaprovenance_predicate (0.00s) --- PASS: TestVerifyBlobAttestation/fail_with_incorrect_predicate (0.00s) --- PASS: TestVerifyBlobAttestation/fail_with_incorrect_blob (0.03s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_predicate_has_no_subject (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_predicate_missing_sha256_digest (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid,_but_we_are_looking_for_different_predicatetype (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_none_has_correct_sha256_digest (0.00s) --- PASS: TestVerifyBlobAttestation/override_file_size_limit (0.00s) --- PASS: TestVerifyBlobAttestation/verify_new_bundle_with_public_key (0.00s) --- PASS: TestVerifyBlobAttestation/verify_new_bundle_with_public_key_-_bad_sig (0.00s) --- PASS: TestVerifyBlobAttestation/verify_with_digest_instead_of_blob (0.00s) === RUN TestVerifyBlobAttestationNoCheckClaims === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_no_path Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_another_blob_path Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_a_bundle_with_another_blob_path Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_/dev/null Verified OK --- PASS: TestVerifyBlobAttestationNoCheckClaims (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_no_path (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_another_blob_path (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_a_bundle_with_another_blob_path (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_/dev/null (0.00s) === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_security_key --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_security_key (0.00s) === RUN TestVerifyBlobAttestation_MalformedPayloads === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Standalone_Signature verify_blob_attestation_test.go:434: [missing predicate type Standalone] PASS: returned error: converting to consumable policy validation: missing predicate type === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Old_Bundle_Format verify_blob_attestation_test.go:460: [missing predicate type Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/New_Bundle_Format verify_blob_attestation_test.go:492: [missing predicate type New Bundle] PASS: returned error: converting to consumable policy validation: missing predicate type === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Standalone_Signature verify_blob_attestation_test.go:434: [missing payload field in json Standalone] PASS: returned error: converting to consumable policy validation: could not find payload in payload data === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Old_Bundle_Format verify_blob_attestation_test.go:460: [missing payload field in json Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/New_Bundle_Format verify_blob_attestation_test.go:492: [missing payload field in json New Bundle] PASS: returned error: failed to fetch signature content: validation error: invalid attestation: missing valid envelope === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Standalone_Signature verify_blob_attestation_test.go:434: [payload is valid base64 but inner is not valid in-toto statement Standalone] PASS: returned error: converting to consumable policy validation: unmarshal in-toto statement: invalid character 'o' in literal null (expecting 'u') === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Old_Bundle_Format verify_blob_attestation_test.go:460: [payload is valid base64 but inner is not valid in-toto statement Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/New_Bundle_Format verify_blob_attestation_test.go:492: [payload is valid base64 but inner is not valid in-toto statement New Bundle] PASS: returned error: failed to fetch envelope statement: validation error: invalid attestation: decoding json === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02 === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Standalone_Signature verify_blob_attestation_test.go:434: [unmarshaling ProvenanceStatementSLSA02 Standalone] PASS: returned error: converting to consumable policy validation: unmarshaling ProvenanceStatementSLSA02): json: cannot unmarshal array into Go struct field ProvenanceStatementSLSA02.predicate.builder of type common.ProvenanceBuilder === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Old_Bundle_Format verify_blob_attestation_test.go:460: [unmarshaling ProvenanceStatementSLSA02 Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/New_Bundle_Format verify_blob_attestation_test.go:492: [unmarshaling ProvenanceStatementSLSA02 New Bundle] PASS: returned error: converting to consumable policy validation: unmarshaling ProvenanceStatementSLSA02): json: cannot unmarshal array into Go struct field ProvenanceStatementSLSA02.predicate.builder of type common.ProvenanceBuilder === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Standalone_Signature verify_blob_attestation_test.go:434: [unmarshaling CosignVulnStatement Standalone] PASS: returned error: converting to consumable policy validation: unmarshaling CosignVulnStatement: json: cannot unmarshal array into Go struct field CosignVulnStatement.predicate.scanner of type attestation.Scanner === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Old_Bundle_Format verify_blob_attestation_test.go:460: [unmarshaling CosignVulnStatement Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/New_Bundle_Format verify_blob_attestation_test.go:492: [unmarshaling CosignVulnStatement New Bundle] PASS: returned error: converting to consumable policy validation: unmarshaling CosignVulnStatement: json: cannot unmarshal array into Go struct field CosignVulnStatement.predicate.scanner of type attestation.Scanner --- PASS: TestVerifyBlobAttestation_MalformedPayloads (0.01s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02 (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/New_Bundle_Format (0.00s) === RUN TestParseBlobHashAlgorithm === RUN TestParseBlobHashAlgorithm/sha256 === RUN TestParseBlobHashAlgorithm/sha384 === RUN TestParseBlobHashAlgorithm/sha512 === RUN TestParseBlobHashAlgorithm/sha1 === RUN TestParseBlobHashAlgorithm/md5 === RUN TestParseBlobHashAlgorithm/#00 === RUN TestParseBlobHashAlgorithm/SHA256 --- PASS: TestParseBlobHashAlgorithm (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha256 (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha384 (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha512 (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha1 (0.00s) --- PASS: TestParseBlobHashAlgorithm/md5 (0.00s) --- PASS: TestParseBlobHashAlgorithm/#00 (0.00s) --- PASS: TestParseBlobHashAlgorithm/SHA256 (0.00s) === RUN TestVerifyBlobAttestationSkWithoutIdentities --- PASS: TestVerifyBlobAttestationSkWithoutIdentities (0.00s) === RUN TestVerifyBlobAttestationLegacyBundlePublicKey === RUN TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_public_key_in_cert_field_fails === RUN TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_empty_cert_field_succeeds_when_key_is_provided_via_KeyRef Verified OK --- PASS: TestVerifyBlobAttestationLegacyBundlePublicKey (0.00s) --- PASS: TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_public_key_in_cert_field_fails (0.00s) --- PASS: TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_empty_cert_field_succeeds_when_key_is_provided_via_KeyRef (0.00s) === RUN TestSignaturesRef === RUN TestSignaturesRef/raw_sig === RUN TestSignaturesRef/encoded_sig === RUN TestSignaturesRef/empty_ref --- PASS: TestSignaturesRef (0.00s) --- PASS: TestSignaturesRef/raw_sig (0.00s) --- PASS: TestSignaturesRef/encoded_sig (0.00s) --- PASS: TestSignaturesRef/empty_ref (0.00s) === RUN TestSignaturesBundle --- PASS: TestSignaturesBundle (0.00s) === RUN TestVerifyBlob === RUN TestVerifyBlob/valid_signature_with_public_key Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_no_rekor_fail === RUN TestVerifyBlob/valid_signature_with_public_key_-_rekor_entry_success Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_fails_when_public_key_is_in_cert === RUN TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_succeeds_when_key_is_provided_via_KeyRef Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_bundle_without_rekor_bundle_fails === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_SET === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_cert_mismatch === RUN TestVerifyBlob/valid_signature_with_public_key_and_bundle_cert_derived_from_public_key Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_signature_mismatch === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_msg_&_signature_mismatch === RUN TestVerifyBlob/valid_signature_with_public_key_-_new_bundle Verified OK === RUN TestVerifyBlob/invalid_signature_with_public_key_-_new_bundle === RUN TestVerifyBlob/invalid_signature_with_public_key === RUN TestVerifyBlob/invalid_signature_with_public_key_and_no_Rekor_entry === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_rekor_entry === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_signature_mismatch === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_msg_&_signature_mismatch === RUN TestVerifyBlob/invalid_signature_with_unexpired_certificate_and_no_Rekor_entry,_expect_Rekor === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_and_Rekor_proof Verified OK === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_rekor_entry_found Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_and_no_proof,_expect_Rekor === RUN TestVerifyBlob/valid_signature_with_expired_certificate,_no_Rekor === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_rekor_lookup Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_multiple_rekor_entries Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_integrated_time === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_expiration === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_SET === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle#01 Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_entry === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle,_good_timestamp Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_no_bundle,_good_timestamp Verified OK === RUN TestVerifyBlob/mismatched_signature_with_expired_certificate === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle,_good_timestamp Verified OK === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_bundle,_good_timestamp Verified OK --- PASS: TestVerifyBlob (0.08s) --- PASS: TestVerifyBlob/valid_signature_with_public_key (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_no_rekor_fail (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_rekor_entry_success (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_fails_when_public_key_is_in_cert (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_succeeds_when_key_is_provided_via_KeyRef (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bundle_without_rekor_bundle_fails (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_SET (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_cert_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_and_bundle_cert_derived_from_public_key (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_msg_&_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_new_bundle (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_public_key_-_new_bundle (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_public_key (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_public_key_and_no_Rekor_entry (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_rekor_entry (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_msg_&_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_unexpired_certificate_and_no_Rekor_entry,_expect_Rekor (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_and_Rekor_proof (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_rekor_entry_found (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_and_no_proof,_expect_Rekor (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate,_no_Rekor (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_rekor_lookup (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_multiple_rekor_entries (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_integrated_time (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_expiration (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_SET (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle#01 (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_entry (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle,_good_timestamp (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_no_bundle,_good_timestamp (0.00s) --- PASS: TestVerifyBlob/mismatched_signature_with_expired_certificate (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle,_good_timestamp (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_bundle,_good_timestamp (0.00s) === RUN TestVerifyBlobCertMissingSubject --- PASS: TestVerifyBlobCertMissingSubject (0.00s) === RUN TestVerifyBlobMutuallyExclusiveFlags === RUN TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity_regex === RUN TestVerifyBlobMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regex === RUN TestVerifyBlobMutuallyExclusiveFlags/both_key_and_secret_key --- PASS: TestVerifyBlobMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity_regex (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regex (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_key_and_secret_key (0.00s) === RUN TestVerifyBlobKeyAndCertIdentity --- PASS: TestVerifyBlobKeyAndCertIdentity (0.00s) === RUN TestVerifyBlobSkWithoutIdentities --- PASS: TestVerifyBlobSkWithoutIdentities (0.00s) === RUN TestVerifyBlobWithUnsetHashAlgorithmMatchesKeyDefault Verified OK --- PASS: TestVerifyBlobWithUnsetHashAlgorithmMatchesKeyDefault (0.02s) === RUN TestVerifyBlobCmdWithBundle === RUN TestVerifyBlobCmdWithBundle/Normal_verification Verified OK === RUN TestVerifyBlobCmdWithBundle/Mismatched_cert/sig === RUN TestVerifyBlobCmdWithBundle/Expired_cert === RUN TestVerifyBlobCmdWithBundle/dsse_Attestation Verified OK === RUN TestVerifyBlobCmdWithBundle/intoto_Attestation Verified OK === RUN TestVerifyBlobCmdWithBundle/Invalid_blob_signature === RUN TestVerifyBlobCmdWithBundle/Mismatched_certificate_email === RUN TestVerifyBlobCmdWithBundle/Mismatched_certificate_issuer === RUN TestVerifyBlobCmdWithBundle/Implicit_Fulcio_chain_with_bundle_in_non-experimental_mode Verified OK === RUN TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_rekor_and_timestamp_bundles_in_non-experimental_mode Verified OK === RUN TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_bundle_in_non-experimental_mode Verified OK === RUN TestVerifyBlobCmdWithBundle/Explicit_Fulcio_mismatched_chain_failure === RUN TestVerifyBlobCmdWithBundle/intoto_Attestation_with_keyless Verified OK --- PASS: TestVerifyBlobCmdWithBundle (0.05s) --- PASS: TestVerifyBlobCmdWithBundle/Normal_verification (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Mismatched_cert/sig (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Expired_cert (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/dsse_Attestation (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/intoto_Attestation (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Invalid_blob_signature (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Mismatched_certificate_email (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Mismatched_certificate_issuer (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Implicit_Fulcio_chain_with_bundle_in_non-experimental_mode (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_rekor_and_timestamp_bundles_in_non-experimental_mode (0.01s) --- PASS: TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_bundle_in_non-experimental_mode (0.01s) --- PASS: TestVerifyBlobCmdWithBundle/Explicit_Fulcio_mismatched_chain_failure (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/intoto_Attestation_with_keyless (0.00s) === RUN TestVerifyBlobCmdInvalidRootCA === RUN TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_via_certRef === RUN TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_in_bundle --- PASS: TestVerifyBlobCmdInvalidRootCA (0.01s) --- PASS: TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_via_certRef (0.00s) --- PASS: TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_in_bundle (0.00s) === RUN TestPrintVerification --- PASS: TestPrintVerification (0.00s) === RUN TestVerifyCertMissingSubject --- PASS: TestVerifyCertMissingSubject (0.00s) === RUN TestVerifyCertMissingIssuer --- PASS: TestVerifyCertMissingIssuer (0.00s) === RUN TestVerifyMutuallyExclusiveFlags === RUN TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity_regexp === RUN TestVerifyMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp === RUN TestVerifyMutuallyExclusiveFlags/both_key_and_security_key --- PASS: TestVerifyMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_key_and_security_key (0.00s) === RUN TestLoadCertsKeylessVerification === RUN TestLoadCertsKeylessVerification/default_fulcio === RUN TestLoadCertsKeylessVerification/non-existent_SIGSTORE_ROOT_FILE === RUN TestLoadCertsKeylessVerification/good_certchain === RUN TestLoadCertsKeylessVerification/bad_certchain === RUN TestLoadCertsKeylessVerification/roots === RUN TestLoadCertsKeylessVerification/bad_roots === RUN TestLoadCertsKeylessVerification/roots_and_intermediate === RUN TestLoadCertsKeylessVerification/bad_roots_good_intermediate === RUN TestLoadCertsKeylessVerification/good_roots_bad_intermediate --- PASS: TestLoadCertsKeylessVerification (0.37s) --- PASS: TestLoadCertsKeylessVerification/default_fulcio (0.37s) --- PASS: TestLoadCertsKeylessVerification/non-existent_SIGSTORE_ROOT_FILE (0.00s) --- PASS: TestLoadCertsKeylessVerification/good_certchain (0.00s) --- PASS: TestLoadCertsKeylessVerification/bad_certchain (0.00s) --- PASS: TestLoadCertsKeylessVerification/roots (0.00s) --- PASS: TestLoadCertsKeylessVerification/bad_roots (0.00s) --- PASS: TestLoadCertsKeylessVerification/roots_and_intermediate (0.00s) --- PASS: TestLoadCertsKeylessVerification/bad_roots_good_intermediate (0.00s) --- PASS: TestLoadCertsKeylessVerification/good_roots_bad_intermediate (0.00s) === RUN TestTransformOutputSuccess { "payloadType": "application/vnd.in-toto+json", "payload": "ewoJICAiX3R5cGUiOiAiaHR0cHM6Ly9pbi10b3RvLmlvL1N0YXRlbWVudC92MC4xIiwKCSAgInN1YmplY3QiOiBbCgkJeyAibmFtZSI6ICJhcnRpZmFjdCIsICJkaWdlc3QiOiB7ICJzaGEyNTYiOiAiZGVhZGJlZWYiIH0sICJhbm5vdGF0aW9ucyI6IHsgImZvbyI6ICJiYXIiIH0gfQoJICBdLAoJICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIKCX0=", "signatures": [ { "keyid": "test", "sig": "MAo=" } ] } --- PASS: TestTransformOutputSuccess (0.00s) === RUN TestVerifySkWithoutIdentities --- PASS: TestVerifySkWithoutIdentities (0.01s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/verify 1.173s === RUN TestWrapWithGenericCosignError error_wrap_test.go:32: generic cosign error successfully returned --- PASS: TestWrapWithGenericCosignError (0.00s) === RUN TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingDoesNotExist exit_code_lookup_test.go:31: Correct default exit code returned --- PASS: TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingDoesNotExist (0.00s) === RUN TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingExists exit_code_lookup_test.go:41: Correct default exit code returned --- PASS: TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingExists (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/errors 0.205s ? github.com/sigstore/cosign/v3/cmd/help [no test files] ? github.com/sigstore/cosign/v3/cmd/sample [no test files] === RUN Test_idToken === RUN Test_idToken/empty_string === RUN Test_idToken/valid_jwt === RUN Test_idToken/not_a_jwt_or_file === RUN Test_idToken/file_path === RUN Test_idToken/non-existent_file --- PASS: Test_idToken (0.00s) --- PASS: Test_idToken/empty_string (0.00s) --- PASS: Test_idToken/valid_jwt (0.00s) --- PASS: Test_idToken/not_a_jwt_or_file (0.00s) --- PASS: Test_idToken/file_path (0.00s) --- PASS: Test_idToken/non-existent_file (0.00s) === RUN TestReadIDToken === RUN TestReadIDToken/raw_token === RUN TestReadIDToken/token_from_file === RUN TestReadIDToken/no_token,_providers_disabled === RUN TestReadIDToken/no_token,_specific_provider_success === RUN TestReadIDToken/no_token,_specific_provider_fail --- PASS: TestReadIDToken (0.00s) --- PASS: TestReadIDToken/raw_token (0.00s) --- PASS: TestReadIDToken/token_from_file (0.00s) --- PASS: TestReadIDToken/no_token,_providers_disabled (0.00s) --- PASS: TestReadIDToken/no_token,_specific_provider_success (0.00s) --- PASS: TestReadIDToken/no_token,_specific_provider_fail (0.00s) === RUN TestGetOAuthFlow === RUN TestGetOAuthFlow/auth_flow_set_explicitly === RUN TestGetOAuthFlow/id_token_set --- PASS: TestGetOAuthFlow (0.00s) --- PASS: TestGetOAuthFlow/auth_flow_set_explicitly (0.00s) --- PASS: TestGetOAuthFlow/id_token_set (0.00s) === RUN TestAuthenticateCaller === RUN TestAuthenticateCaller/token_flow === RUN TestAuthenticateCaller/unsupported_flow --- PASS: TestAuthenticateCaller (0.00s) --- PASS: TestAuthenticateCaller/token_flow (0.00s) --- PASS: TestAuthenticateCaller/unsupported_flow (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/auth 0.105s === RUN TestNewKMSKeypair === RUN TestNewKMSKeypair/ECDSA_key === RUN TestNewKMSKeypair/RSA_key === RUN TestNewKMSKeypair/ED25519_key === RUN TestNewKMSKeypair/Unsupported_key_type === RUN TestNewKMSKeypair/PublicKey_returns_error --- PASS: TestNewKMSKeypair (0.34s) --- PASS: TestNewKMSKeypair/ECDSA_key (0.00s) --- PASS: TestNewKMSKeypair/RSA_key (0.00s) --- PASS: TestNewKMSKeypair/ED25519_key (0.00s) --- PASS: TestNewKMSKeypair/Unsupported_key_type (0.00s) --- PASS: TestNewKMSKeypair/PublicKey_returns_error (0.00s) === RUN TestKMSKeypair_ECDSA_Methods === RUN TestKMSKeypair_ECDSA_Methods/GetHashAlgorithm === RUN TestKMSKeypair_ECDSA_Methods/GetSigningAlgorithm === RUN TestKMSKeypair_ECDSA_Methods/GetHint === RUN TestKMSKeypair_ECDSA_Methods/GetKeyAlgorithm === RUN TestKMSKeypair_ECDSA_Methods/GetPublicKey === RUN TestKMSKeypair_ECDSA_Methods/GetPublicKeyPem === RUN TestKMSKeypair_ECDSA_Methods/SignData === RUN TestKMSKeypair_ECDSA_Methods/SignData_with_error --- PASS: TestKMSKeypair_ECDSA_Methods (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetHashAlgorithm (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetSigningAlgorithm (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetHint (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetKeyAlgorithm (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetPublicKey (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetPublicKeyPem (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/SignData (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/SignData_with_error (0.00s) === RUN TestKMSKeypair_ECDSA_P521_SignData --- PASS: TestKMSKeypair_ECDSA_P521_SignData (0.01s) === RUN TestKMSKeypair_ED25519_Methods === RUN TestKMSKeypair_ED25519_Methods/GetHashAlgorithm === RUN TestKMSKeypair_ED25519_Methods/GetSigningAlgorithm === RUN TestKMSKeypair_ED25519_Methods/GetHint === RUN TestKMSKeypair_ED25519_Methods/GetKeyAlgorithm === RUN TestKMSKeypair_ED25519_Methods/GetPublicKey === RUN TestKMSKeypair_ED25519_Methods/GetPublicKeyPem === RUN TestKMSKeypair_ED25519_Methods/SignData --- PASS: TestKMSKeypair_ED25519_Methods (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetHashAlgorithm (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetSigningAlgorithm (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetHint (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetKeyAlgorithm (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetPublicKey (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetPublicKeyPem (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/SignData (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/key 0.546s === RUN Test_FileExists === RUN Test_FileExists/file_exists === RUN Test_FileExists/file_does_not_exist === RUN Test_FileExists/other_error_e.g_cannot_access_file --- PASS: Test_FileExists (0.00s) --- PASS: Test_FileExists/file_exists (0.00s) --- PASS: Test_FileExists/file_does_not_exist (0.00s) --- PASS: Test_FileExists/other_error_e.g_cannot_access_file (0.00s) === RUN Test_HashReader === RUN Test_HashReader/SHA256 === RUN Test_HashReader/unspecified_hash_algorithm --- PASS: Test_HashReader (0.00s) --- PASS: Test_HashReader/SHA256 (0.00s) --- PASS: Test_HashReader/unspecified_hash_algorithm (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/pkg/cosign 0.178s === RUN TestGetFulcioRoots --- PASS: TestGetFulcioRoots (0.00s) === RUN TestGetFulcioRootsWithoutIntermediate --- PASS: TestGetFulcioRootsWithoutIntermediate (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/pkg/cosign/fulcio/fulcioroots 0.105s === RUN TestCheckSize === RUN TestCheckSize/size_is_within_default_limit === RUN TestCheckSize/size_exceeds_default_limit === RUN TestCheckSize/size_is_within_overridden_limit_(bytes) === RUN TestCheckSize/size_is_exceeds_overridden_limit_(bytes) === RUN TestCheckSize/size_is_within_overridden_limit_(megabytes,_short_form) === RUN TestCheckSize/size_exceeds_overridden_limit_(megabytes,_short_form) === RUN TestCheckSize/size_is_within_overridden_limit_(megabytes,_long_form) === RUN TestCheckSize/size_exceeds_overridden_limit_(megabytes,_long_form) === RUN TestCheckSize/size_is_within_overridden_limit_(mebibytes) === RUN TestCheckSize/size_exceeds_overridden_limit_(mebibytes) === RUN TestCheckSize/size_is_negative_results_in_default === RUN TestCheckSize/invalid_setting_results_in_default --- PASS: TestCheckSize (0.00s) --- PASS: TestCheckSize/size_is_within_default_limit (0.00s) --- PASS: TestCheckSize/size_exceeds_default_limit (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(bytes) (0.00s) --- PASS: TestCheckSize/size_is_exceeds_overridden_limit_(bytes) (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(megabytes,_short_form) (0.00s) --- PASS: TestCheckSize/size_exceeds_overridden_limit_(megabytes,_short_form) (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(megabytes,_long_form) (0.00s) --- PASS: TestCheckSize/size_exceeds_overridden_limit_(megabytes,_long_form) (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(mebibytes) (0.00s) --- PASS: TestCheckSize/size_exceeds_overridden_limit_(mebibytes) (0.00s) --- PASS: TestCheckSize/size_is_negative_results_in_default (0.00s) --- PASS: TestCheckSize/invalid_setting_results_in_default (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/pkg/cosign/payload/size 0.028s ? github.com/sigstore/cosign/v3/internal/pkg/cosign/rekor/mock [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/cosign/tsa/client [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/cosign/tsa/mock [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/now [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/oci/remote [no test files] ? github.com/sigstore/cosign/v3/internal/test [no test files] === RUN TestInfof --- PASS: TestInfof (0.00s) === RUN TestWarnf --- PASS: TestWarnf (0.00s) === RUN TestConfirm === RUN TestConfirm/no === RUN TestConfirm/no-upper === RUN TestConfirm/yes === RUN TestConfirm/yes-upper === RUN TestConfirm/default === RUN TestConfirm/empty === RUN TestConfirm/invalid === RUN TestConfirm/no-windows === RUN TestConfirm/yes-windows === RUN TestConfirm/default-windows === RUN TestConfirm/invalid#01 --- PASS: TestConfirm (0.00s) --- PASS: TestConfirm/no (0.00s) --- PASS: TestConfirm/no-upper (0.00s) --- PASS: TestConfirm/yes (0.00s) --- PASS: TestConfirm/yes-upper (0.00s) --- PASS: TestConfirm/default (0.00s) --- PASS: TestConfirm/empty (0.00s) --- PASS: TestConfirm/invalid (0.00s) --- PASS: TestConfirm/no-windows (0.00s) --- PASS: TestConfirm/yes-windows (0.00s) --- PASS: TestConfirm/default-windows (0.00s) --- PASS: TestConfirm/invalid#01 (0.00s) === RUN TestConfirmError --- PASS: TestConfirmError (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/ui 0.092s === RUN TestLoadFile --- PASS: TestLoadFile (0.00s) === RUN TestLoadURL --- PASS: TestLoadURL (0.01s) === RUN TestLoadURLNon2xxStatus === RUN TestLoadURLNon2xxStatus/NotFound === RUN TestLoadURLNon2xxStatus/InternalServerError === RUN TestLoadURLNon2xxStatus/Forbidden --- PASS: TestLoadURLNon2xxStatus (0.00s) --- PASS: TestLoadURLNon2xxStatus/NotFound (0.00s) --- PASS: TestLoadURLNon2xxStatus/InternalServerError (0.00s) --- PASS: TestLoadURLNon2xxStatus/Forbidden (0.00s) === RUN TestLoadURLWithChecksum --- PASS: TestLoadURLWithChecksum (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/blob 0.091s === RUN TestCertExtensions === PAUSE TestCertExtensions === RUN TestGetCTLogPubKeys --- PASS: TestGetCTLogPubKeys (0.73s) === RUN TestGetCTLogPubKeysAlt --- PASS: TestGetCTLogPubKeysAlt (0.00s) === RUN TestErrors === RUN TestErrors/not_a_constant_3 === RUN TestErrors/not_a_string_i_am_a_string --- PASS: TestErrors (0.00s) --- PASS: TestErrors/not_a_constant_3 (0.00s) --- PASS: TestErrors/not_a_string_i_am_a_string (0.00s) === RUN TestLoadECDSAPrivateKey --- PASS: TestLoadECDSAPrivateKey (0.56s) === RUN TestReadingPrivatePemTypes === RUN TestReadingPrivatePemTypes/COSIGN_PEM_RSA_Type === RUN TestReadingPrivatePemTypes/COSIGN_PEM_EC_Type === RUN TestReadingPrivatePemTypes/SISTORE_PEM_Type --- PASS: TestReadingPrivatePemTypes (0.38s) --- PASS: TestReadingPrivatePemTypes/COSIGN_PEM_RSA_Type (0.09s) --- PASS: TestReadingPrivatePemTypes/COSIGN_PEM_EC_Type (0.19s) --- PASS: TestReadingPrivatePemTypes/SISTORE_PEM_Type (0.09s) === RUN TestWritingPrivatePemTypes --- PASS: TestWritingPrivatePemTypes (0.19s) === RUN TestImportPrivateKey === RUN TestImportPrivateKey/validrsa.key === RUN TestImportPrivateKey/validrsapkcs1.key === RUN TestImportPrivateKey/validrsapkcs8.key === RUN TestImportPrivateKey/invalidrsawithpubkey.key === RUN TestImportPrivateKey/invalidrsasmallkey.key === RUN TestImportPrivateKey/invalidrsalargekey.key === RUN TestImportPrivateKey/validecp256.key === RUN TestImportPrivateKey/validecp384.key === RUN TestImportPrivateKey/validecp521.key === RUN TestImportPrivateKey/validecpkcs8.key === RUN TestImportPrivateKey/invalidecp224.key === RUN TestImportPrivateKey/invalidecunsupported.key === RUN TestImportPrivateKey/ed25519.key === RUN TestImportPrivateKey/invalidkey.key --- PASS: TestImportPrivateKey (3.00s) --- PASS: TestImportPrivateKey/validrsa.key (0.37s) --- PASS: TestImportPrivateKey/validrsapkcs1.key (0.38s) --- PASS: TestImportPrivateKey/validrsapkcs8.key (0.38s) --- PASS: TestImportPrivateKey/invalidrsawithpubkey.key (0.00s) --- PASS: TestImportPrivateKey/invalidrsasmallkey.key (0.00s) --- PASS: TestImportPrivateKey/invalidrsalargekey.key (0.00s) --- PASS: TestImportPrivateKey/validecp256.key (0.37s) --- PASS: TestImportPrivateKey/validecp384.key (0.38s) --- PASS: TestImportPrivateKey/validecp521.key (0.38s) --- PASS: TestImportPrivateKey/validecpkcs8.key (0.37s) --- PASS: TestImportPrivateKey/invalidecp224.key (0.00s) --- PASS: TestImportPrivateKey/invalidecunsupported.key (0.00s) --- PASS: TestImportPrivateKey/ed25519.key (0.38s) --- PASS: TestImportPrivateKey/invalidkey.key (0.00s) === RUN TestObsoletePayload --- PASS: TestObsoletePayload (0.00s) === RUN TestObsoletePayloadWithAnnotations --- PASS: TestObsoletePayloadWithAnnotations (0.00s) === RUN TestGetRekorPubKeys --- PASS: TestGetRekorPubKeys (0.01s) === RUN TestGetCTLogID --- PASS: TestGetCTLogID (0.00s) === RUN TestVerifyTLogEntryOfflineFailsWithInvalidPublicKey --- PASS: TestVerifyTLogEntryOfflineFailsWithInvalidPublicKey (3.45s) === RUN TestComputeLeafHash === RUN TestComputeLeafHash/success === RUN TestComputeLeafHash/invalid_base64 === RUN TestComputeLeafHash/nil_body === RUN TestComputeLeafHash/bytes_body === RUN TestComputeLeafHash/object_body --- PASS: TestComputeLeafHash (0.00s) --- PASS: TestComputeLeafHash/success (0.00s) --- PASS: TestComputeLeafHash/invalid_base64 (0.00s) --- PASS: TestComputeLeafHash/nil_body (0.00s) --- PASS: TestComputeLeafHash/bytes_body (0.00s) --- PASS: TestComputeLeafHash/object_body (0.00s) === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_root_hash === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_log_index === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_tree_size === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/non-string_body --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_root_hash (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_log_index (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_tree_size (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/non-string_body (0.00s) === RUN TestGetTSACertsFromEnv --- PASS: TestGetTSACertsFromEnv (0.00s) === RUN TestGetTSACertsFromPath --- PASS: TestGetTSACertsFromPath (0.00s) === RUN TestGetTSACertsFromTUF --- PASS: TestGetTSACertsFromTUF (0.00s) === RUN Test_IntotoSubjectClaimVerifier --- PASS: Test_IntotoSubjectClaimVerifier (0.00s) === RUN TestVerifyBundle === RUN TestVerifyBundle/valid === RUN TestVerifyBundle/valid_blob_signature === RUN TestVerifyBundle/invalid,_wrong_artifact === RUN TestVerifyBundle/invalid_blob_signature,_wrong_artifact === RUN TestVerifyBundle/valid,_pattern_match_issuer === RUN TestVerifyBundle/valid,_pattern_match_subject === RUN TestVerifyBundle/invalid,_pattern_match_issuer === RUN TestVerifyBundle/invalid,_pattern_match_subject === RUN TestVerifyBundle/invalid,_exact_issuer_mismatch === RUN TestVerifyBundle/invalid,_exact_subject_mismatch === RUN TestVerifyBundle/invalid,_multiple_identities === RUN TestVerifyBundle/require_SCT,_missing_SCT === RUN TestVerifyBundle/invalid_trusted_material === RUN TestVerifyBundle/do_not_require_tlog,_missing_tlog === RUN TestVerifyBundle/do_not_require_tsa,_missing_tsa === RUN TestVerifyBundle/require_tlog,_missing_tlog === RUN TestVerifyBundle/require_SET,_missing_set === RUN TestVerifyBundle/require_tsa,_missing_tsa === RUN TestVerifyBundle/invalid_blob_signature,_wrong_Fulcio_root === RUN TestVerifyBundle/invalid_blob_signature,_integrated_time_outside_certificate_validity === RUN TestVerifyBundle/valid_blob_signature,_integrated_time_outside_certificate_validity,_tlog_ignored === RUN TestVerifyBundle/invalid_blob_signature,_corrupted_SET === RUN TestVerifyBundle/invalid_blob_signature,_tlog_entry_from_different_signing_event --- PASS: TestVerifyBundle (0.04s) --- PASS: TestVerifyBundle/valid (0.00s) --- PASS: TestVerifyBundle/valid_blob_signature (0.00s) --- PASS: TestVerifyBundle/invalid,_wrong_artifact (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_wrong_artifact (0.00s) --- PASS: TestVerifyBundle/valid,_pattern_match_issuer (0.00s) --- PASS: TestVerifyBundle/valid,_pattern_match_subject (0.00s) --- PASS: TestVerifyBundle/invalid,_pattern_match_issuer (0.00s) --- PASS: TestVerifyBundle/invalid,_pattern_match_subject (0.00s) --- PASS: TestVerifyBundle/invalid,_exact_issuer_mismatch (0.00s) --- PASS: TestVerifyBundle/invalid,_exact_subject_mismatch (0.00s) --- PASS: TestVerifyBundle/invalid,_multiple_identities (0.00s) --- PASS: TestVerifyBundle/require_SCT,_missing_SCT (0.00s) --- PASS: TestVerifyBundle/invalid_trusted_material (0.00s) --- PASS: TestVerifyBundle/do_not_require_tlog,_missing_tlog (0.00s) --- PASS: TestVerifyBundle/do_not_require_tsa,_missing_tsa (0.00s) --- PASS: TestVerifyBundle/require_tlog,_missing_tlog (0.00s) --- PASS: TestVerifyBundle/require_SET,_missing_set (0.00s) --- PASS: TestVerifyBundle/require_tsa,_missing_tsa (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_wrong_Fulcio_root (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_integrated_time_outside_certificate_validity (0.00s) --- PASS: TestVerifyBundle/valid_blob_signature,_integrated_time_outside_certificate_validity,_tlog_ignored (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_corrupted_SET (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_tlog_entry_from_different_signing_event (0.00s) === RUN TestVerifyBundleGitHubWorkflowExtensions === RUN TestVerifyBundleGitHubWorkflowExtensions/valid,_no_extensions_required === RUN TestVerifyBundleGitHubWorkflowExtensions/valid,_all_extensions_match === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_trigger_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_sha_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_name_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_repository_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_ref_mismatch --- PASS: TestVerifyBundleGitHubWorkflowExtensions (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/valid,_no_extensions_required (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/valid,_all_extensions_match (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_trigger_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_sha_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_name_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_repository_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_ref_mismatch (0.00s) === RUN TestVerifyBundleWithSigVerifier === RUN TestVerifyBundleWithSigVerifier/valid === RUN TestVerifyBundleWithSigVerifier/invalid,_wrong_artifact === RUN TestVerifyBundleWithSigVerifier/invalid,_sigverifier_not_set --- PASS: TestVerifyBundleWithSigVerifier (0.00s) --- PASS: TestVerifyBundleWithSigVerifier/valid (0.00s) --- PASS: TestVerifyBundleWithSigVerifier/invalid,_wrong_artifact (0.00s) --- PASS: TestVerifyBundleWithSigVerifier/invalid,_sigverifier_not_set (0.00s) === RUN TestCheckOptsBundleOptions === RUN TestCheckOptsBundleOptions/default_returns_no_options === RUN TestCheckOptsBundleOptions/AllowCertificateChain_adds_option --- PASS: TestCheckOptsBundleOptions (0.00s) --- PASS: TestCheckOptsBundleOptions/default_returns_no_options (0.00s) --- PASS: TestCheckOptsBundleOptions/AllowCertificateChain_adds_option (0.00s) === RUN TestVerifyNewBundleConcurrentNoDataRace --- PASS: TestVerifyNewBundleConcurrentNoDataRace (0.00s) === RUN TestRekorV2Bundle === RUN TestRekorV2Bundle/IgnoreTlog_true === RUN TestRekorV2Bundle/SigVerifier_set === RUN TestRekorV2Bundle/Rekor_v1_entry === RUN TestRekorV2Bundle/Rekor_v2_entry === RUN TestRekorV2Bundle/Mixed_entries === RUN TestRekorV2Bundle/Already_set_with_Rekor_v1 --- PASS: TestRekorV2Bundle (0.00s) --- PASS: TestRekorV2Bundle/IgnoreTlog_true (0.00s) --- PASS: TestRekorV2Bundle/SigVerifier_set (0.00s) --- PASS: TestRekorV2Bundle/Rekor_v1_entry (0.00s) --- PASS: TestRekorV2Bundle/Rekor_v2_entry (0.00s) --- PASS: TestRekorV2Bundle/Mixed_entries (0.00s) --- PASS: TestRekorV2Bundle/Already_set_with_Rekor_v1 (0.00s) === RUN TestGetBundles_Empty 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:e7400810e89127dbeb0ff083a0e15184df9bd4642cabfd9e62c4d8b631611262 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:8dc72bedf767b39400b0c024f76d5093559953fb39e325911d0b57ca9febc6ed 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:555d981f5975ea751e96428ca96ec5317407b2498b63d9eff27939190f42baf8 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:a51054254b472a7ad6a2a592e9e2f1f5371e7c9e979b9f27505870ce684b3edc 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5395898650214402897 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/3475828923468207541 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/1992963249919450517 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5910348445733152194 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5395898650214402897?digest=sha256%3A8dc72bedf767b39400b0c024f76d5093559953fb39e325911d0b57ca9febc6ed 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/3475828923468207541?digest=sha256%3A555d981f5975ea751e96428ca96ec5317407b2498b63d9eff27939190f42baf8 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/1992963249919450517?digest=sha256%3Aa51054254b472a7ad6a2a592e9e2f1f5371e7c9e979b9f27505870ce684b3edc 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5910348445733152194?digest=sha256%3Ae7400810e89127dbeb0ff083a0e15184df9bd4642cabfd9e62c4d8b631611262 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:5f7aafb946ef7236ff189b0cda5cd27d1343288d743e3b7ccd494ba1fcd8c83c 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:b51aaa908299ee9941176e9067edcbc1a4ce15219c8f562f3335e4138b626b07 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:c8ebf763424d366e2a1955ce0d6a32cba4df59b211a12ebc567fa129bcd8d1b8 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:c86caf20aea040520be6541948de60704986ce4fdeab3bdd3610248745e16e8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/9193196007634086029 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5989099241720590633 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5007156810294197943 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/9193196007634086029?digest=sha256%3Ac8ebf763424d366e2a1955ce0d6a32cba4df59b211a12ebc567fa129bcd8d1b8 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/8546073896362083825 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5989099241720590633?digest=sha256%3A5f7aafb946ef7236ff189b0cda5cd27d1343288d743e3b7ccd494ba1fcd8c83c 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5007156810294197943?digest=sha256%3Ab51aaa908299ee9941176e9067edcbc1a4ce15219c8f562f3335e4138b626b07 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:8c791c3cee8a6cacfe1e6d535334ff450a95ad20ba7783832b8704f248cc0f2f 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/8546073896362083825?digest=sha256%3Ac86caf20aea040520be6541948de60704986ce4fdeab3bdd3610248745e16e8a 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:dd7ae25dd29c2630aba8223c0ddceff72ff9bf491ae0df2d4de6d4170a3bb4d2 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:5ab0a2f26f11c71c95430522ddec94e98c6fe0192ae5b3f5662d53b848ccead9 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/3582908978051953151 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/3582908978051953151?digest=sha256%3A8c791c3cee8a6cacfe1e6d535334ff450a95ad20ba7783832b8704f248cc0f2f 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5155228209473045158 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/348010204226804102 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/348010204226804102?digest=sha256%3A5ab0a2f26f11c71c95430522ddec94e98c6fe0192ae5b3f5662d53b848ccead9 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5155228209473045158?digest=sha256%3Add7ae25dd29c2630aba8223c0ddceff72ff9bf491ae0df2d4de6d4170a3bb4d2 2026/11/03 11:45:14 PUT /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:e750b61304e30ddb7aa286634f2f4c67ccb479a3c2e6c9b0000ca23ad7fda8e3 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/sha256:e750b61304e30ddb7aa286634f2f4c67ccb479a3c2e6c9b0000ca23ad7fda8e3 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/20910866467978795 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/20910866467978795?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:f1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/7746854294160581742 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/7746854294160581742?digest=sha256%3Af1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 PUT /v2/repo/manifests/sha256:1ef7062680cfb4f7fbcf8e94088b11af6e25983e9847b1c2f5e2ec5011e3b2c9 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:e750b61304e30ddb7aa286634f2f4c67ccb479a3c2e6c9b0000ca23ad7fda8e3 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:e750b61304e30ddb7aa286634f2f4c67ccb479a3c2e6c9b0000ca23ad7fda8e3 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/sha256:1ef7062680cfb4f7fbcf8e94088b11af6e25983e9847b1c2f5e2ec5011e3b2c9 2026/11/03 11:45:14 GET /v2/repo/blobs/sha256:f1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4 --- PASS: TestGetBundles_Empty (0.02s) === RUN TestGetBundles_Valid 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/8945243274503751103 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/8945243274503751103?digest=sha256%3A5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 2026/11/03 11:45:14 PUT /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/7459986571853322203 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/7459986571853322203?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/4682467043656798972 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/4682467043656798972?digest=sha256%3Aa6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 PUT /v2/repo/manifests/sha256:4bc7ce1330da9a8d08de31f7ca5226227fbc7be4720f65048bfb81496bc5e7ea 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/sha256:4bc7ce1330da9a8d08de31f7ca5226227fbc7be4720f65048bfb81496bc5e7ea 2026/11/03 11:45:14 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 --- PASS: TestGetBundles_Valid (0.01s) === RUN TestGetBundles_WithTargetRepository 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/source-repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 11:45:14 HEAD /v2/source-repo/blobs/sha256:5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/source-repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/source-repo/blobs/uploads/8854496577074928848 2026/11/03 11:45:14 PUT /v2/source-repo/blobs/uploads/8854496577074928848?digest=sha256%3A5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 2026/11/03 11:45:14 PUT /v2/source-repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/source-repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/source-repo/manifests/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/target-repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/target-repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/target-repo/blobs/uploads/4591898108901726085 2026/11/03 11:45:14 PUT /v2/target-repo/blobs/uploads/4591898108901726085?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/target-repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/target-repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/target-repo/blobs/uploads/6841880904407091427 2026/11/03 11:45:14 PUT /v2/target-repo/blobs/uploads/6841880904407091427?digest=sha256%3Aa6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 PUT /v2/target-repo/manifests/sha256:4bc7ce1330da9a8d08de31f7ca5226227fbc7be4720f65048bfb81496bc5e7ea 2026/11/03 11:45:14 GET /v2/target-repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/source-repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/source-repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/source-repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/target-repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/target-repo/manifests/sha256:4bc7ce1330da9a8d08de31f7ca5226227fbc7be4720f65048bfb81496bc5e7ea 2026/11/03 11:45:14 GET /v2/target-repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 --- PASS: TestGetBundles_WithTargetRepository (0.01s) === RUN TestVerifyImageAttestationsSigstoreBundle 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5095527708979327328 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5095527708979327328?digest=sha256%3A5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 2026/11/03 11:45:14 PUT /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag2 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:bd2cf24d4b85b622085213b6747042e3d1114d023946717063c662e4c1cb65f6 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:f5da3a898b9c184126dccc7dda3cddd583f08994343148b6207176f1afda2434 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:17ec148ef96f8031c3081d884c64e8e6a552b439da7df3410b7514825f2e0823 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:ce5a08a68606b1773950bba1367762911cc61a26299ea99eace494a5d16c250a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5685348631154099064 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/631986726995430263 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5685348631154099064?digest=sha256%3Abd2cf24d4b85b622085213b6747042e3d1114d023946717063c662e4c1cb65f6 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/314885170711430236 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/3476889110599584305 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/631986726995430263?digest=sha256%3Ace5a08a68606b1773950bba1367762911cc61a26299ea99eace494a5d16c250a 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/314885170711430236?digest=sha256%3Af5da3a898b9c184126dccc7dda3cddd583f08994343148b6207176f1afda2434 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:537cfa057cfb3036d17510f9917508127d209569f55057ed80b64ee128c92b84 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/3476889110599584305?digest=sha256%3A17ec148ef96f8031c3081d884c64e8e6a552b439da7df3410b7514825f2e0823 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:b89b502c630f9b8fe1586df08042ffa04bc07af67d6b07df7e413739d3d33f03 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:d4febcd752723abed42e0caae739cde4811cbe81c3952785cab3c29ac9e7ae81 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:c5054016b7aa25a142aa9bced34027b068843ee9c62111d1e773c38cc550967b 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/474443950986909073 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/6737739291497061903 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/7226719360009418948 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/7111650446631487651 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/474443950986909073?digest=sha256%3Ab89b502c630f9b8fe1586df08042ffa04bc07af67d6b07df7e413739d3d33f03 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/7226719360009418948?digest=sha256%3Ac5054016b7aa25a142aa9bced34027b068843ee9c62111d1e773c38cc550967b 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/6737739291497061903?digest=sha256%3Ad4febcd752723abed42e0caae739cde4811cbe81c3952785cab3c29ac9e7ae81 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/7111650446631487651?digest=sha256%3A537cfa057cfb3036d17510f9917508127d209569f55057ed80b64ee128c92b84 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:d17ff4b669aea9cd381bdc28b95aa7af124135b9f751060f4850f0616f5ad0c3 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:5625f63c135c56b413a6bc59ad667d7980e651a34ef7df72f7ce2ee0b73246b8 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:f506e2cc3cd1652220848a9f0d08d1853e685c2d5110b03941f087b7abe93ffc 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/5103514975087961258 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/8511127093991473522 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/3952898232968346587 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/5103514975087961258?digest=sha256%3Ad17ff4b669aea9cd381bdc28b95aa7af124135b9f751060f4850f0616f5ad0c3 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/8511127093991473522?digest=sha256%3A5625f63c135c56b413a6bc59ad667d7980e651a34ef7df72f7ce2ee0b73246b8 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/3952898232968346587?digest=sha256%3Af506e2cc3cd1652220848a9f0d08d1853e685c2d5110b03941f087b7abe93ffc 2026/11/03 11:45:14 PUT /v2/repo/manifests/tag2 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/4421633726789009363 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/4421633726789009363?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 404 BLOB_UNKNOWN Unknown blob 2026/11/03 11:45:14 POST /v2/repo/blobs/uploads/ 2026/11/03 11:45:14 PATCH /v2/repo/blobs/uploads/7037945996446556912 2026/11/03 11:45:14 PUT /v2/repo/blobs/uploads/7037945996446556912?digest=sha256%3Aa6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 PUT /v2/repo/manifests/sha256:4bc7ce1330da9a8d08de31f7ca5226227fbc7be4720f65048bfb81496bc5e7ea 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/sha256:4bc7ce1330da9a8d08de31f7ca5226227fbc7be4720f65048bfb81496bc5e7ea 2026/11/03 11:45:14 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/sha256:4bc7ce1330da9a8d08de31f7ca5226227fbc7be4720f65048bfb81496bc5e7ea 2026/11/03 11:45:14 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/tag2 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/manifests/sha256:9ac513a0333ddfc0ae4786f469205e59d0d92dc409d700ef8269a7623f6b9b9a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 HEAD /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 PUT /v2/repo/manifests/sha256:19070a190cd4a139e0546445b094e4ca1e735f18a5214431f241e25da0e2834a 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:9ac513a0333ddfc0ae4786f469205e59d0d92dc409d700ef8269a7623f6b9b9a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/tag2 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/referrers/sha256:9ac513a0333ddfc0ae4786f469205e59d0d92dc409d700ef8269a7623f6b9b9a 2026/11/03 11:45:14 GET /v2/ 2026/11/03 11:45:14 GET /v2/repo/manifests/sha256:19070a190cd4a139e0546445b094e4ca1e735f18a5214431f241e25da0e2834a 2026/11/03 11:45:14 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 --- PASS: TestVerifyImageAttestationsSigstoreBundle (0.04s) === RUN TestContainsSCT --- PASS: TestContainsSCT (0.00s) === RUN TestVerifySCTError --- PASS: TestVerifySCTError (0.00s) === RUN TestVerifyEmbeddedSCT --- PASS: TestVerifyEmbeddedSCT (0.02s) === RUN Test_verifyOCIAttestation --- PASS: Test_verifyOCIAttestation (0.00s) === RUN TestVerifyImageSignature --- PASS: TestVerifyImageSignature (0.00s) === RUN TestVerifyImageSignatureMultipleSubs --- PASS: TestVerifyImageSignatureMultipleSubs (0.00s) === RUN Test_verifySignaturesErrNoSignaturesFound --- PASS: Test_verifySignaturesErrNoSignaturesFound (0.00s) === RUN Test_verifySignaturesErrNoMatchingSignatures --- PASS: Test_verifySignaturesErrNoMatchingSignatures (0.00s) === RUN TestVerifyImageSignatureWithNoChain --- PASS: TestVerifyImageSignatureWithNoChain (0.00s) === RUN TestVerifyImageSignatureWithKeyAndCert --- PASS: TestVerifyImageSignatureWithKeyAndCert (0.00s) === RUN TestVerifyImageSignatureWithInvalidPublicKeyType --- PASS: TestVerifyImageSignatureWithInvalidPublicKeyType (11.19s) === RUN TestVerifyImageSignatureWithInvalidBundleBodyType --- PASS: TestVerifyImageSignatureWithInvalidBundleBodyType (0.00s) === RUN TestVerifyImageSignatureWithOnlyRoot --- PASS: TestVerifyImageSignatureWithOnlyRoot (0.00s) === RUN TestVerifyImageSignatureWithMissingSub --- PASS: TestVerifyImageSignatureWithMissingSub (0.00s) === RUN TestVerifyImageSignatureWithExistingSub --- PASS: TestVerifyImageSignatureWithExistingSub (0.00s) === RUN TestImageSignatureVerificationWithRekor === RUN TestImageSignatureVerificationWithRekor/Verification_succeeds_with_valid_Rekor_public_keys === RUN TestImageSignatureVerificationWithRekor/Verification_fails_with_no_Rekor_public_keys === RUN TestImageSignatureVerificationWithRekor/Verification_fails_with_non-matching_Rekor_public_keys --- PASS: TestImageSignatureVerificationWithRekor (0.00s) --- PASS: TestImageSignatureVerificationWithRekor/Verification_succeeds_with_valid_Rekor_public_keys (0.00s) --- PASS: TestImageSignatureVerificationWithRekor/Verification_fails_with_no_Rekor_public_keys (0.00s) --- PASS: TestImageSignatureVerificationWithRekor/Verification_fails_with_non-matching_Rekor_public_keys (0.00s) === RUN TestVerifyImageSignatureWithSigVerifierAndTSA --- PASS: TestVerifyImageSignatureWithSigVerifierAndTSA (0.00s) === RUN TestVerifyImageSignatureWithSigVerifierAndRekorTSA --- PASS: TestVerifyImageSignatureWithSigVerifierAndRekorTSA (0.00s) === RUN TestVerifyImageSignatureWithMismatchedBundleAndTrustedRoot --- PASS: TestVerifyImageSignatureWithMismatchedBundleAndTrustedRoot (0.00s) === RUN TestValidateAndUnpackCertSuccess --- PASS: TestValidateAndUnpackCertSuccess (0.00s) === RUN TestValidateAndUnpackCertSuccessAllowAllValues --- PASS: TestValidateAndUnpackCertSuccessAllowAllValues (0.00s) === RUN TestValidateAndUnpackCertWithoutRequiredSCT --- PASS: TestValidateAndUnpackCertWithoutRequiredSCT (0.00s) === RUN TestValidateAndUnpackCertSuccessWithDnsSan --- PASS: TestValidateAndUnpackCertSuccessWithDnsSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithEmailSan --- PASS: TestValidateAndUnpackCertSuccessWithEmailSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithIpAddressSan --- PASS: TestValidateAndUnpackCertSuccessWithIpAddressSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithUriSan --- PASS: TestValidateAndUnpackCertSuccessWithUriSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithOtherNameSan --- PASS: TestValidateAndUnpackCertSuccessWithOtherNameSan (0.00s) === RUN TestValidateAndUnpackCertInvalidRoot --- PASS: TestValidateAndUnpackCertInvalidRoot (0.00s) === RUN TestValidateAndUnpackCertInvalidOidcIssuer --- PASS: TestValidateAndUnpackCertInvalidOidcIssuer (0.00s) === RUN TestValidateAndUnpackCertInvalidEmail --- PASS: TestValidateAndUnpackCertInvalidEmail (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowTrigger --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowTrigger (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowSHA --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowSHA (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowName --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowName (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowRepository --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowRepository (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowRef --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowRef (0.00s) === RUN TestValidateAndUnpackCertWithChainSuccess --- PASS: TestValidateAndUnpackCertWithChainSuccess (0.00s) === RUN TestValidateAndUnpackCertWithChainSuccessWithRoot --- PASS: TestValidateAndUnpackCertWithChainSuccessWithRoot (0.00s) === RUN TestValidateAndUnpackCertWithChainFailsWithoutChain --- PASS: TestValidateAndUnpackCertWithChainFailsWithoutChain (0.00s) === RUN TestValidateAndUnpackCertWithChainFailsWithInvalidChain --- PASS: TestValidateAndUnpackCertWithChainFailsWithInvalidChain (0.00s) === RUN TestValidateAndUnpackCertWithIdentities --- PASS: TestValidateAndUnpackCertWithIdentities (0.01s) === RUN TestValidateAndUnpackCertWithIntermediatesSuccess --- PASS: TestValidateAndUnpackCertWithIntermediatesSuccess (0.00s) === RUN TestValidateUnpackCertWithTrustedMaterial --- PASS: TestValidateUnpackCertWithTrustedMaterial (0.00s) === RUN TestValidateAndUnpackCertWithSCT --- PASS: TestValidateAndUnpackCertWithSCT (0.00s) === RUN TestCompareSigs === RUN TestCompareSigs/sigs_match === RUN TestCompareSigs/sigs_don't_match --- PASS: TestCompareSigs (0.00s) --- PASS: TestCompareSigs/sigs_match (0.00s) --- PASS: TestCompareSigs/sigs_don't_match (0.00s) === RUN TestTrustedCertSuccess --- PASS: TestTrustedCertSuccess (0.00s) === RUN TestTrustedCertSuccessNoIntermediates --- PASS: TestTrustedCertSuccessNoIntermediates (0.00s) === RUN TestTrustedCertSuccessChainFromRoot --- PASS: TestTrustedCertSuccessChainFromRoot (0.00s) === RUN TestVerifyRFC3161Timestamp 2026/11/03 11:45:25 Warning: subset of signed timestamps failed to verify: [unable to verify signed timestamps: %!w()] --- PASS: TestVerifyRFC3161Timestamp (0.01s) === RUN TestVerifyImageSignatureExpiredCACertificate --- PASS: TestVerifyImageSignatureExpiredCACertificate (0.00s) === RUN TestVerifyImageAttestation --- PASS: TestVerifyImageAttestation (0.00s) === RUN TestHasLocalBundles_V2Signatures --- PASS: TestHasLocalBundles_V2Signatures (0.01s) === RUN TestHasLocalBundles_V3Bundles --- PASS: TestHasLocalBundles_V3Bundles (0.01s) === RUN TestHasLocalBundles_NoSignatures --- PASS: TestHasLocalBundles_NoSignatures (0.00s) === RUN TestHasLocalBundles_MixedFormats --- PASS: TestHasLocalBundles_MixedFormats (0.01s) === RUN TestHasLocalBundles_InvalidPath --- PASS: TestHasLocalBundles_InvalidPath (0.00s) === RUN TestHasLocalAttestationBundles_V2Attestations --- PASS: TestHasLocalAttestationBundles_V2Attestations (0.00s) === RUN TestHasLocalAttestationBundles_V3Bundles --- PASS: TestHasLocalAttestationBundles_V3Bundles (0.01s) === RUN TestHasLocalSigstoreBundles_OCIReferrers --- PASS: TestHasLocalSigstoreBundles_OCIReferrers (0.01s) === RUN TestHasLocalSigstoreBundles_ImageIndex --- PASS: TestHasLocalSigstoreBundles_ImageIndex (0.01s) === RUN TestHasLocalSigstoreBundles_NoBlobsDir --- PASS: TestHasLocalSigstoreBundles_NoBlobsDir (0.00s) === RUN TestHasLocalSigstoreBundles_ReferrerDifferentSubject --- PASS: TestHasLocalSigstoreBundles_ReferrerDifferentSubject (0.01s) === RUN TestHasLocalSigstoreBundles_EmptyBlobsDir --- PASS: TestHasLocalSigstoreBundles_EmptyBlobsDir (0.00s) === RUN TestGetLocalBundles_MissingBlobsDir --- PASS: TestGetLocalBundles_MissingBlobsDir (0.00s) === RUN TestGetLocalBundles_ZeroBundles --- PASS: TestGetLocalBundles_ZeroBundles (0.00s) === RUN TestGetLocalBundles_InvalidPath --- PASS: TestGetLocalBundles_InvalidPath (0.00s) === RUN TestBundleHash === RUN TestBundleHash/dsse_v0.0.1 === RUN TestBundleHash/hashedrekord_v0.0.1 === RUN TestBundleHash/intoto_v0.0.1 === RUN TestBundleHash/intoto_v0.0.2 === RUN TestBundleHash/rekord_v0.0.1 --- PASS: TestBundleHash (0.00s) --- PASS: TestBundleHash/dsse_v0.0.1 (0.00s) --- PASS: TestBundleHash/hashedrekord_v0.0.1 (0.00s) --- PASS: TestBundleHash/intoto_v0.0.1 (0.00s) --- PASS: TestBundleHash/intoto_v0.0.2 (0.00s) --- PASS: TestBundleHash/rekord_v0.0.1 (0.00s) === RUN TestBundleHashWithMissingHash === RUN TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash === RUN TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash === RUN TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.value === RUN TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.algorithm === RUN TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.value === RUN TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.algorithm === RUN TestBundleHashWithMissingHash/dsse_v0.0.1_without_envelopeHash === RUN TestBundleHashWithMissingHash/hashedrekord_v0.0.1_without_data.hash === RUN TestBundleHashWithMissingHash/intoto_v0.0.1_without_content.hash --- PASS: TestBundleHashWithMissingHash (0.00s) --- PASS: TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash (0.00s) --- PASS: TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.value (0.00s) --- PASS: TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.algorithm (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.value (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.algorithm (0.00s) --- PASS: TestBundleHashWithMissingHash/dsse_v0.0.1_without_envelopeHash (0.00s) --- PASS: TestBundleHashWithMissingHash/hashedrekord_v0.0.1_without_data.hash (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.1_without_content.hash (0.00s) === RUN TestHashFields === RUN TestHashFields/both_set === RUN TestHashFields/missing_algorithm === RUN TestHashFields/missing_value === RUN TestHashFields/missing_both --- PASS: TestHashFields (0.00s) --- PASS: TestHashFields/both_set (0.00s) --- PASS: TestHashFields/missing_algorithm (0.00s) --- PASS: TestHashFields/missing_value (0.00s) --- PASS: TestHashFields/missing_both (0.00s) === RUN TestVerifyImageSignatureWithBundleBodyMissingHash === RUN TestVerifyImageSignatureWithBundleBodyMissingHash/rekord_v0.0.1 === RUN TestVerifyImageSignatureWithBundleBodyMissingHash/intoto_v0.0.2 --- PASS: TestVerifyImageSignatureWithBundleBodyMissingHash (0.00s) --- PASS: TestVerifyImageSignatureWithBundleBodyMissingHash/rekord_v0.0.1 (0.00s) --- PASS: TestVerifyImageSignatureWithBundleBodyMissingHash/intoto_v0.0.2 (0.00s) === CONT TestCertExtensions --- PASS: TestCertExtensions (0.00s) === RUN FuzzImportKeyPairLoadPrivateKey === RUN FuzzImportKeyPairLoadPrivateKey/seed#0 === RUN FuzzImportKeyPairLoadPrivateKey/seed#1 === RUN FuzzImportKeyPairLoadPrivateKey/seed#2 === RUN FuzzImportKeyPairLoadPrivateKey/seed#3 === RUN FuzzImportKeyPairLoadPrivateKey/seed#4 === RUN FuzzImportKeyPairLoadPrivateKey/seed#5 === RUN FuzzImportKeyPairLoadPrivateKey/seed#6 === RUN FuzzImportKeyPairLoadPrivateKey/seed#7 === RUN FuzzImportKeyPairLoadPrivateKey/seed#8 === RUN FuzzImportKeyPairLoadPrivateKey/seed#9 === RUN FuzzImportKeyPairLoadPrivateKey/seed#10 --- PASS: FuzzImportKeyPairLoadPrivateKey (3.14s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#0 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#1 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#2 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#3 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#4 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#5 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#6 (0.40s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#7 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#8 (0.00s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#9 (0.00s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#10 (0.00s) === RUN FuzzSigVerify --- PASS: FuzzSigVerify (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign 23.146s === RUN TestGenerateStatement === RUN TestGenerateStatement/custom === RUN TestGenerateStatement/custom_type === RUN TestGenerateStatement/custom_empty_string === RUN TestGenerateStatement/spdx_string === RUN TestGenerateStatement/spdx_string_multi-line === RUN TestGenerateStatement/spdx_json === RUN TestGenerateStatement/spdx_json_complex === RUN TestGenerateStatement/cyclonedx === RUN TestGenerateStatement/cyclonedx_complex === RUN TestGenerateStatement/link === RUN TestGenerateStatement/link_minimal === RUN TestGenerateStatement/vuln === RUN TestGenerateStatement/vuln_minimal === RUN TestGenerateStatement/openvex === RUN TestGenerateStatement/openvex_complex === RUN TestGenerateStatement/openvex_minimal === RUN TestGenerateStatement/slsaprovenance === RUN TestGenerateStatement/slsaprovenance02 === RUN TestGenerateStatement/slsaprovenance1 === RUN TestGenerateStatement/slsaprovenance1_complex --- PASS: TestGenerateStatement (0.01s) --- PASS: TestGenerateStatement/custom (0.00s) --- PASS: TestGenerateStatement/custom_type (0.00s) --- PASS: TestGenerateStatement/custom_empty_string (0.00s) --- PASS: TestGenerateStatement/spdx_string (0.00s) --- PASS: TestGenerateStatement/spdx_string_multi-line (0.00s) --- PASS: TestGenerateStatement/spdx_json (0.00s) --- PASS: TestGenerateStatement/spdx_json_complex (0.00s) --- PASS: TestGenerateStatement/cyclonedx (0.00s) --- PASS: TestGenerateStatement/cyclonedx_complex (0.00s) --- PASS: TestGenerateStatement/link (0.00s) --- PASS: TestGenerateStatement/link_minimal (0.00s) --- PASS: TestGenerateStatement/vuln (0.00s) --- PASS: TestGenerateStatement/vuln_minimal (0.00s) --- PASS: TestGenerateStatement/openvex (0.00s) --- PASS: TestGenerateStatement/openvex_complex (0.00s) --- PASS: TestGenerateStatement/openvex_minimal (0.00s) --- PASS: TestGenerateStatement/slsaprovenance (0.00s) --- PASS: TestGenerateStatement/slsaprovenance02 (0.00s) --- PASS: TestGenerateStatement/slsaprovenance1 (0.00s) --- PASS: TestGenerateStatement/slsaprovenance1_complex (0.00s) === RUN FuzzGenerateStatement --- PASS: FuzzGenerateStatement (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/attestation 0.107s === RUN TestLocalCertChainProvider_GetCertificateChain === RUN TestLocalCertChainProvider_GetCertificateChain/leaf_with_root-only_chain_drops_the_self-signed_root === RUN TestLocalCertChainProvider_GetCertificateChain/leaf_with_sub_and_root_chain_drops_the_self-signed_root === RUN TestLocalCertChainProvider_GetCertificateChain/leaf_already_present_in_chain_is_deduped_and_root_is_dropped === RUN TestLocalCertChainProvider_GetCertificateChain/invalid_leaf_PEM === RUN TestLocalCertChainProvider_GetCertificateChain/invalid_chain_PEM --- PASS: TestLocalCertChainProvider_GetCertificateChain (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/leaf_with_root-only_chain_drops_the_self-signed_root (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/leaf_with_sub_and_root_chain_drops_the_self-signed_root (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/leaf_already_present_in_chain_is_deduped_and_root_is_dropped (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/invalid_leaf_PEM (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/invalid_chain_PEM (0.00s) === RUN TestRFC3161Timestamp === RUN TestRFC3161Timestamp/nil_timestamp_entry === RUN TestRFC3161Timestamp/timestamp_entry --- PASS: TestRFC3161Timestamp (0.00s) --- PASS: TestRFC3161Timestamp/nil_timestamp_entry (0.00s) --- PASS: TestRFC3161Timestamp/timestamp_entry (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/bundle 0.185s === RUN TestValidationJSON === RUN TestValidationJSON/passing_policy === RUN TestValidationJSON/passing_result_due_to_matching_rules === RUN TestValidationJSON/policy_query_evaluates_to_false_signatures_array_min_items --- PASS: TestValidationJSON (0.01s) --- PASS: TestValidationJSON/passing_policy (0.01s) --- PASS: TestValidationJSON/passing_result_due_to_matching_rules (0.00s) --- PASS: TestValidationJSON/policy_query_evaluates_to_false_signatures_array_min_items (0.00s) === RUN FuzzValidateJSON --- PASS: FuzzValidateJSON (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/cue 0.181s === RUN TestMustRegisterEnv --- PASS: TestMustRegisterEnv (0.00s) === RUN TestMustRegisterEnvWithNonRegisteredEnv --- PASS: TestMustRegisterEnvWithNonRegisteredEnv (0.00s) === RUN TestMustRegisterEnvWithInvalidCosignEnvVar --- PASS: TestMustRegisterEnvWithInvalidCosignEnvVar (0.00s) === RUN TestGetenv --- PASS: TestGetenv (0.00s) === RUN TestGetenvUnset --- PASS: TestGetenvUnset (0.00s) === RUN TestLookupEnv --- PASS: TestLookupEnv (0.00s) === RUN TestLookupEnvEmpty --- PASS: TestLookupEnvEmpty (0.00s) === RUN TestLookupEnvUnset --- PASS: TestLookupEnvUnset (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/env 0.048s === RUN TestLeafHash === RUN TestLeafHash/cert === RUN TestLeafHash/precert === RUN TestLeafHash/cert_with_embedded_SCT --- PASS: TestLeafHash (0.00s) --- PASS: TestLeafHash/cert (0.00s) --- PASS: TestLeafHash/precert (0.00s) --- PASS: TestLeafHash/cert_with_embedded_SCT (0.00s) === RUN TestLeafHashErrors === RUN TestLeafHashErrors/empty_chain === RUN TestLeafHashErrors/nil_SCT === RUN TestLeafHashErrors/no_SCTs_embedded_in_cert,_embedded_true === RUN TestLeafHashErrors/cert_contains_embedded_SCTs,_but_not_the_SCT_provided --- PASS: TestLeafHashErrors (0.00s) --- PASS: TestLeafHashErrors/empty_chain (0.00s) --- PASS: TestLeafHashErrors/nil_SCT (0.00s) --- PASS: TestLeafHashErrors/no_SCTs_embedded_in_cert,_embedded_true (0.00s) --- PASS: TestLeafHashErrors/cert_contains_embedded_SCTs,_but_not_the_SCT_provided (0.00s) === RUN TestVerifySCT === RUN TestVerifySCT/cert === RUN TestVerifySCT/precert === RUN TestVerifySCT/invalid_SCT === RUN TestVerifySCT/cert_with_embedded_SCT === RUN TestVerifySCT/cert_with_invalid_embedded_SCT --- PASS: TestVerifySCT (0.00s) --- PASS: TestVerifySCT/cert (0.00s) --- PASS: TestVerifySCT/precert (0.00s) --- PASS: TestVerifySCT/invalid_SCT (0.00s) --- PASS: TestVerifySCT/cert_with_embedded_SCT (0.00s) --- PASS: TestVerifySCT/cert_with_invalid_embedded_SCT (0.00s) === RUN TestVerifySCTWithVerifier === RUN TestVerifySCTWithVerifier/nil_signature_verifier === RUN TestVerifySCTWithVerifier/cert === RUN TestVerifySCTWithVerifier/precert === RUN TestVerifySCTWithVerifier/invalid_SCT === RUN TestVerifySCTWithVerifier/cert_with_embedded_SCT === RUN TestVerifySCTWithVerifier/cert_with_invalid_embedded_SCT --- PASS: TestVerifySCTWithVerifier (0.00s) --- PASS: TestVerifySCTWithVerifier/nil_signature_verifier (0.00s) --- PASS: TestVerifySCTWithVerifier/cert (0.00s) --- PASS: TestVerifySCTWithVerifier/precert (0.00s) --- PASS: TestVerifySCTWithVerifier/invalid_SCT (0.00s) --- PASS: TestVerifySCTWithVerifier/cert_with_embedded_SCT (0.00s) --- PASS: TestVerifySCTWithVerifier/cert_with_invalid_embedded_SCT (0.00s) === RUN TestContainsSCT === RUN TestContainsSCT/cert_doesn't_contain_any_SCTs === RUN TestContainsSCT/cert_contains_SCT_but_not_specified_SCT === RUN TestContainsSCT/cert_contains_SCT --- PASS: TestContainsSCT (0.00s) --- PASS: TestContainsSCT/cert_doesn't_contain_any_SCTs (0.00s) --- PASS: TestContainsSCT/cert_contains_SCT_but_not_specified_SCT (0.00s) --- PASS: TestContainsSCT/cert_contains_SCT (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/fulcioverifier/ctutil 0.076s ? github.com/sigstore/cosign/v3/pkg/cosign/git [no test files] ? github.com/sigstore/cosign/v3/pkg/cosign/git/github [no test files] === RUN TestIsGroup === RUN TestIsGroup/valid_project_reference === RUN TestIsGroup/valid_group_reference === RUN TestIsGroup/invalid_reference_-_neither_project_nor_group === RUN TestIsGroup/numeric_project_ID --- PASS: TestIsGroup (0.01s) --- PASS: TestIsGroup/valid_project_reference (0.01s) --- PASS: TestIsGroup/valid_group_reference (0.00s) --- PASS: TestIsGroup/invalid_reference_-_neither_project_nor_group (0.00s) --- PASS: TestIsGroup/numeric_project_ID (0.00s) === RUN TestNew --- PASS: TestNew (0.00s) === RUN TestReferenceScheme --- PASS: TestReferenceScheme (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/git/gitlab 0.196s === RUN TestSecret --- PASS: TestSecret (0.00s) === RUN TestSecretUpdate --- PASS: TestSecretUpdate (0.00s) === RUN TestParseRef === RUN TestParseRef/valid === RUN TestParseRef/invalid,_1_field === RUN TestParseRef/invalid,_more_than_2_fields --- PASS: TestParseRef (0.00s) --- PASS: TestParseRef/valid (0.00s) --- PASS: TestParseRef/invalid,_1_field (0.00s) --- PASS: TestParseRef/invalid,_more_than_2_fields (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/kubernetes 0.218s ? github.com/sigstore/cosign/v3/pkg/cosign/pivkey [no test files] ? github.com/sigstore/cosign/v3/pkg/cosign/pkcs11key [no test files] === RUN TestValidationJSON === RUN TestValidationJSON/passing_policy === RUN TestValidationJSON/undefined_result_due_to_no_matching_rules === RUN TestValidationJSON/policy_query_evaluates_to_false --- PASS: TestValidationJSON (0.01s) --- PASS: TestValidationJSON/passing_policy (0.00s) --- PASS: TestValidationJSON/undefined_result_due_to_no_matching_rules (0.00s) --- PASS: TestValidationJSON/policy_query_evaluates_to_false (0.00s) === RUN FuzzValidateJSON --- PASS: FuzzValidateJSON (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/rego 0.193s === RUN TestFilesFromFlagList === RUN TestFilesFromFlagList/empty === RUN TestFilesFromFlagList/nil === RUN TestFilesFromFlagList/plain === RUN TestFilesFromFlagList/three --- PASS: TestFilesFromFlagList (0.00s) --- PASS: TestFilesFromFlagList/empty (0.00s) --- PASS: TestFilesFromFlagList/nil (0.00s) --- PASS: TestFilesFromFlagList/plain (0.00s) --- PASS: TestFilesFromFlagList/three (0.00s) === RUN TestFileFromFlag === RUN TestFileFromFlag/plain === RUN TestFileFromFlag/os === RUN TestFileFromFlag/os_amd64 --- PASS: TestFileFromFlag (0.00s) --- PASS: TestFileFromFlag/plain (0.00s) --- PASS: TestFileFromFlag/os (0.00s) --- PASS: TestFileFromFlag/os_amd64 (0.00s) === RUN TestUploadFiles === RUN TestUploadFiles/one_file Uploading file from [testdata/foo] to [127.0.0.1:45515/foo/one:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:45515/v2/foo/one/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] === RUN TestUploadFiles/missing_file === RUN TestUploadFiles/two_files_with_platform Uploading file from [testdata/foo] to [127.0.0.1:45515/foo/two-platform:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:45515/v2/foo/two-platform/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] Uploading file from [testdata/bar] to [127.0.0.1:45515/foo/two-platform:latest] with media type [text/plain] File [testdata/bar] is available directly at [127.0.0.1:45515/v2/foo/two-platform/blobs/sha256:7d865e959b2466918c9863afca942d0fb89d7c9ac0c99bafc3749504ded97730] === RUN TestUploadFiles/one_file_with_annotations Uploading file from [testdata/foo] to [127.0.0.1:45515/foo/one-annotations:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:45515/v2/foo/one-annotations/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] === RUN TestUploadFiles/two_files_with_annotations Uploading file from [testdata/foo] to [127.0.0.1:45515/foo/two-annotations:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:45515/v2/foo/two-annotations/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] Uploading file from [testdata/bar] to [127.0.0.1:45515/foo/two-annotations:latest] with media type [text/plain] File [testdata/bar] is available directly at [127.0.0.1:45515/v2/foo/two-annotations/blobs/sha256:7d865e959b2466918c9863afca942d0fb89d7c9ac0c99bafc3749504ded97730] --- PASS: TestUploadFiles (0.03s) --- PASS: TestUploadFiles/one_file (0.01s) --- PASS: TestUploadFiles/missing_file (0.00s) --- PASS: TestUploadFiles/two_files_with_platform (0.01s) --- PASS: TestUploadFiles/one_file_with_annotations (0.00s) --- PASS: TestUploadFiles/two_files_with_annotations (0.01s) === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/missing_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/null_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/object_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/number_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/invalid_base64_payload --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/missing_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/null_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/object_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/number_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/invalid_base64_payload (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/remote 0.235s ? github.com/sigstore/cosign/v3/pkg/oci [no test files] === RUN TestEmptyImage === RUN TestEmptyImage/unset === RUN TestEmptyImage/set_false === RUN TestEmptyImage/set_true --- PASS: TestEmptyImage (0.00s) --- PASS: TestEmptyImage/unset (0.00s) --- PASS: TestEmptyImage/set_false (0.00s) --- PASS: TestEmptyImage/set_true (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/empty 0.193s === RUN TestSignature === RUN TestSignature/just_payload_and_signature === RUN TestSignature/with_empty_other_keys === RUN TestSignature/missing_signature === RUN TestSignature/min_plus_bad_bundle === RUN TestSignature/min_plus_bad_cert === RUN TestSignature/min_plus_empty_cert === RUN TestSignature/min_plus_bad_chain === RUN TestSignature/min_plus_bundle === RUN TestSignature/min_plus_good_cert === RUN TestSignature/min_plus_bad_chain#01 === RUN TestSignature/payload_size_exceeds_default_limit === RUN TestSignature/payload_size_exceeds_overridden_limit === RUN TestSignature/payload_size_is_within_overridden_limit --- PASS: TestSignature (0.01s) --- PASS: TestSignature/just_payload_and_signature (0.00s) --- PASS: TestSignature/with_empty_other_keys (0.00s) --- PASS: TestSignature/missing_signature (0.00s) --- PASS: TestSignature/min_plus_bad_bundle (0.00s) --- PASS: TestSignature/min_plus_bad_cert (0.00s) --- PASS: TestSignature/min_plus_empty_cert (0.00s) --- PASS: TestSignature/min_plus_bad_chain (0.00s) --- PASS: TestSignature/min_plus_bundle (0.00s) --- PASS: TestSignature/min_plus_good_cert (0.00s) --- PASS: TestSignature/min_plus_bad_chain#01 (0.00s) --- PASS: TestSignature/payload_size_exceeds_default_limit (0.00s) --- PASS: TestSignature/payload_size_exceeds_overridden_limit (0.00s) --- PASS: TestSignature/payload_size_is_within_overridden_limit (0.00s) === RUN TestSignatureWithTSAAnnotation === RUN TestSignatureWithTSAAnnotation/just_payload_and_signature === RUN TestSignatureWithTSAAnnotation/with_empty_other_keys === RUN TestSignatureWithTSAAnnotation/missing_signature === RUN TestSignatureWithTSAAnnotation/min_plus_bad_bundle === RUN TestSignatureWithTSAAnnotation/min_plus_bad_cert === RUN TestSignatureWithTSAAnnotation/min_plus_bad_chain === RUN TestSignatureWithTSAAnnotation/min_plus_RFC3161_timestamp_bundle --- PASS: TestSignatureWithTSAAnnotation (0.01s) --- PASS: TestSignatureWithTSAAnnotation/just_payload_and_signature (0.00s) --- PASS: TestSignatureWithTSAAnnotation/with_empty_other_keys (0.00s) --- PASS: TestSignatureWithTSAAnnotation/missing_signature (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_bad_bundle (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_bad_cert (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_bad_chain (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_RFC3161_timestamp_bundle (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/internal/signature 0.204s === RUN TestGet === RUN TestGet/within_limit === RUN TestGet/exceeds_limit --- PASS: TestGet (0.00s) --- PASS: TestGet/within_limit (0.00s) --- PASS: TestGet/exceeds_limit (0.00s) === RUN TestReadWrite --- PASS: TestReadWrite (0.01s) === RUN TestAppendImagePreservesArtifactType --- PASS: TestAppendImagePreservesArtifactType (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/layout 0.208s === RUN TestMapImage === RUN TestMapImage/one_call_to_identity_mutator === RUN TestMapImage/error_propagates === RUN TestMapImage/new_result_image === RUN TestMapImage/filtered_image --- PASS: TestMapImage (0.00s) --- PASS: TestMapImage/one_call_to_identity_mutator (0.00s) --- PASS: TestMapImage/error_propagates (0.00s) --- PASS: TestMapImage/new_result_image (0.00s) --- PASS: TestMapImage/filtered_image (0.00s) === RUN TestMapImageIndex === RUN TestMapImageIndex/six_calls_to_identity_mutator === RUN TestMapImageIndex/just_one_call_to_root_index_w/_ErrSkipChildren === RUN TestMapImageIndex/two_calls_to_mutator_with_IsAfterChildren === RUN TestMapImageIndex/test_filtering_images === RUN TestMapImageIndex/test_filtering_indices === RUN TestMapImageIndex/error_propagates_from_child_image === RUN TestMapImageIndex/error_propagates_from_child_index --- PASS: TestMapImageIndex (0.01s) --- PASS: TestMapImageIndex/six_calls_to_identity_mutator (0.00s) --- PASS: TestMapImageIndex/just_one_call_to_root_index_w/_ErrSkipChildren (0.00s) --- PASS: TestMapImageIndex/two_calls_to_mutator_with_IsAfterChildren (0.00s) --- PASS: TestMapImageIndex/test_filtering_images (0.00s) --- PASS: TestMapImageIndex/test_filtering_indices (0.00s) --- PASS: TestMapImageIndex/error_propagates_from_child_image (0.00s) --- PASS: TestMapImageIndex/error_propagates_from_child_index (0.00s) === RUN TestAppendManifests === RUN TestAppendManifests/unsigned === RUN TestAppendManifests/signed --- PASS: TestAppendManifests (0.03s) --- PASS: TestAppendManifests/unsigned (0.00s) --- PASS: TestAppendManifests/signed (0.00s) === RUN TestSignEntity === RUN TestSignEntity/attach_SBOMs === RUN TestSignEntity/without_duplicate_detector_(signature) === RUN TestSignEntity/without_duplicate_detector_(attestation) === RUN TestSignEntity/with_duplicate_detector_(signature) === RUN TestSignEntity/with_duplicate_detector_(attestation) === RUN TestSignEntity/with_erroring_duplicate_detector_(signature) === RUN TestSignEntity/with_erroring_duplicate_detector_(attestation) === RUN TestSignEntity/with_replace_op_(attestation) --- PASS: TestSignEntity (0.01s) --- PASS: TestSignEntity/attach_SBOMs (0.00s) --- PASS: TestSignEntity/without_duplicate_detector_(signature) (0.00s) --- PASS: TestSignEntity/without_duplicate_detector_(attestation) (0.00s) --- PASS: TestSignEntity/with_duplicate_detector_(signature) (0.00s) --- PASS: TestSignEntity/with_duplicate_detector_(attestation) (0.00s) --- PASS: TestSignEntity/with_erroring_duplicate_detector_(signature) (0.00s) --- PASS: TestSignEntity/with_erroring_duplicate_detector_(attestation) (0.00s) --- PASS: TestSignEntity/with_replace_op_(attestation) (0.00s) === RUN TestSignatureWithAnnotations === RUN TestSignatureWithAnnotations/Payloads_match === RUN TestSignatureWithAnnotations/Base64Signatures_match === RUN TestSignatureWithAnnotations/Bundles_match === RUN TestSignatureWithAnnotations/RFC3161_timestamp_bundles_match === RUN TestSignatureWithAnnotations/Certs_match === RUN TestSignatureWithAnnotations/Chains_match === RUN TestSignatureWithAnnotations/MediaTypes_match === RUN TestSignatureWithAnnotations/Annotations_match === RUN TestSignatureWithAnnotations/DiffIDs_match === RUN TestSignatureWithAnnotations/Sizes_match === RUN TestSignatureWithAnnotations/Compressed_values_match === RUN TestSignatureWithAnnotations/Uncompressed_values_match --- PASS: TestSignatureWithAnnotations (0.00s) --- PASS: TestSignatureWithAnnotations/Payloads_match (0.00s) --- PASS: TestSignatureWithAnnotations/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithAnnotations/Bundles_match (0.00s) --- PASS: TestSignatureWithAnnotations/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithAnnotations/Certs_match (0.00s) --- PASS: TestSignatureWithAnnotations/Chains_match (0.00s) --- PASS: TestSignatureWithAnnotations/MediaTypes_match (0.00s) --- PASS: TestSignatureWithAnnotations/Annotations_match (0.00s) --- PASS: TestSignatureWithAnnotations/DiffIDs_match (0.00s) --- PASS: TestSignatureWithAnnotations/Sizes_match (0.00s) --- PASS: TestSignatureWithAnnotations/Compressed_values_match (0.00s) --- PASS: TestSignatureWithAnnotations/Uncompressed_values_match (0.00s) === RUN TestSignatureWithBundle === RUN TestSignatureWithBundle/Payloads_match === RUN TestSignatureWithBundle/Base64Signatures_match === RUN TestSignatureWithBundle/Bundles_match === RUN TestSignatureWithBundle/RFC3161_timestamp_bundles_match === RUN TestSignatureWithBundle/Certs_match === RUN TestSignatureWithBundle/Chains_match === RUN TestSignatureWithBundle/MediaTypes_match === RUN TestSignatureWithBundle/Annotations_match === RUN TestSignatureWithBundle/DiffIDs_match === RUN TestSignatureWithBundle/Sizes_match === RUN TestSignatureWithBundle/Compressed_values_match === RUN TestSignatureWithBundle/Uncompressed_values_match --- PASS: TestSignatureWithBundle (0.00s) --- PASS: TestSignatureWithBundle/Payloads_match (0.00s) --- PASS: TestSignatureWithBundle/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithBundle/Bundles_match (0.00s) --- PASS: TestSignatureWithBundle/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithBundle/Certs_match (0.00s) --- PASS: TestSignatureWithBundle/Chains_match (0.00s) --- PASS: TestSignatureWithBundle/MediaTypes_match (0.00s) --- PASS: TestSignatureWithBundle/Annotations_match (0.00s) --- PASS: TestSignatureWithBundle/DiffIDs_match (0.00s) --- PASS: TestSignatureWithBundle/Sizes_match (0.00s) --- PASS: TestSignatureWithBundle/Compressed_values_match (0.00s) --- PASS: TestSignatureWithBundle/Uncompressed_values_match (0.00s) === RUN TestSignatureWithRFC3161Timestamp === RUN TestSignatureWithRFC3161Timestamp/Payloads_match === RUN TestSignatureWithRFC3161Timestamp/Base64Signatures_match === RUN TestSignatureWithRFC3161Timestamp/Bundles_match === RUN TestSignatureWithRFC3161Timestamp/RFC3161_timestamp_bundles_match === RUN TestSignatureWithRFC3161Timestamp/Certs_match === RUN TestSignatureWithRFC3161Timestamp/Chains_match === RUN TestSignatureWithRFC3161Timestamp/MediaTypes_match === RUN TestSignatureWithRFC3161Timestamp/Annotations_match === RUN TestSignatureWithRFC3161Timestamp/DiffIDs_match === RUN TestSignatureWithRFC3161Timestamp/Sizes_match === RUN TestSignatureWithRFC3161Timestamp/Compressed_values_match === RUN TestSignatureWithRFC3161Timestamp/Uncompressed_values_match --- PASS: TestSignatureWithRFC3161Timestamp (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Payloads_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Bundles_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Certs_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Chains_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/MediaTypes_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Annotations_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/DiffIDs_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Sizes_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Compressed_values_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Uncompressed_values_match (0.00s) === RUN TestSignatureWithCertChain === RUN TestSignatureWithCertChain/Payloads_match === RUN TestSignatureWithCertChain/Base64Signatures_match === RUN TestSignatureWithCertChain/Bundles_match === RUN TestSignatureWithCertChain/RFC3161_timestamp_bundles_match === RUN TestSignatureWithCertChain/Certs_match === RUN TestSignatureWithCertChain/Chains_match === RUN TestSignatureWithCertChain/MediaTypes_match === RUN TestSignatureWithCertChain/Annotations_match === RUN TestSignatureWithCertChain/DiffIDs_match === RUN TestSignatureWithCertChain/Sizes_match === RUN TestSignatureWithCertChain/Compressed_values_match === RUN TestSignatureWithCertChain/Uncompressed_values_match --- PASS: TestSignatureWithCertChain (0.00s) --- PASS: TestSignatureWithCertChain/Payloads_match (0.00s) --- PASS: TestSignatureWithCertChain/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithCertChain/Bundles_match (0.00s) --- PASS: TestSignatureWithCertChain/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithCertChain/Certs_match (0.00s) --- PASS: TestSignatureWithCertChain/Chains_match (0.00s) --- PASS: TestSignatureWithCertChain/MediaTypes_match (0.00s) --- PASS: TestSignatureWithCertChain/Annotations_match (0.00s) --- PASS: TestSignatureWithCertChain/DiffIDs_match (0.00s) --- PASS: TestSignatureWithCertChain/Sizes_match (0.00s) --- PASS: TestSignatureWithCertChain/Compressed_values_match (0.00s) --- PASS: TestSignatureWithCertChain/Uncompressed_values_match (0.00s) === RUN TestSignatureWithMediaType === RUN TestSignatureWithMediaType/Payloads_match === RUN TestSignatureWithMediaType/Base64Signatures_match === RUN TestSignatureWithMediaType/Bundles_match === RUN TestSignatureWithMediaType/RFC3161_timestamp_bundles_match === RUN TestSignatureWithMediaType/Certs_match === RUN TestSignatureWithMediaType/Chains_match === RUN TestSignatureWithMediaType/MediaTypes_match === RUN TestSignatureWithMediaType/Annotations_match === RUN TestSignatureWithMediaType/DiffIDs_match === RUN TestSignatureWithMediaType/Sizes_match === RUN TestSignatureWithMediaType/Compressed_values_match === RUN TestSignatureWithMediaType/Uncompressed_values_match --- PASS: TestSignatureWithMediaType (0.00s) --- PASS: TestSignatureWithMediaType/Payloads_match (0.00s) --- PASS: TestSignatureWithMediaType/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithMediaType/Bundles_match (0.00s) --- PASS: TestSignatureWithMediaType/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithMediaType/Certs_match (0.00s) --- PASS: TestSignatureWithMediaType/Chains_match (0.00s) --- PASS: TestSignatureWithMediaType/MediaTypes_match (0.00s) --- PASS: TestSignatureWithMediaType/Annotations_match (0.00s) --- PASS: TestSignatureWithMediaType/DiffIDs_match (0.00s) --- PASS: TestSignatureWithMediaType/Sizes_match (0.00s) --- PASS: TestSignatureWithMediaType/Compressed_values_match (0.00s) --- PASS: TestSignatureWithMediaType/Uncompressed_values_match (0.00s) === RUN TestSignatureWithEverything === RUN TestSignatureWithEverything/Payloads_match === RUN TestSignatureWithEverything/Base64Signatures_match === RUN TestSignatureWithEverything/Bundles_match === RUN TestSignatureWithEverything/RFC3161_timestamp_bundles_match === RUN TestSignatureWithEverything/Certs_match === RUN TestSignatureWithEverything/Chains_match === RUN TestSignatureWithEverything/MediaTypes_match === RUN TestSignatureWithEverything/Annotations_match === RUN TestSignatureWithEverything/DiffIDs_match === RUN TestSignatureWithEverything/Sizes_match === RUN TestSignatureWithEverything/Compressed_values_match === RUN TestSignatureWithEverything/Uncompressed_values_match --- PASS: TestSignatureWithEverything (0.00s) --- PASS: TestSignatureWithEverything/Payloads_match (0.00s) --- PASS: TestSignatureWithEverything/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithEverything/Bundles_match (0.00s) --- PASS: TestSignatureWithEverything/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithEverything/Certs_match (0.00s) --- PASS: TestSignatureWithEverything/Chains_match (0.00s) --- PASS: TestSignatureWithEverything/MediaTypes_match (0.00s) --- PASS: TestSignatureWithEverything/Annotations_match (0.00s) --- PASS: TestSignatureWithEverything/DiffIDs_match (0.00s) --- PASS: TestSignatureWithEverything/Sizes_match (0.00s) --- PASS: TestSignatureWithEverything/Compressed_values_match (0.00s) --- PASS: TestSignatureWithEverything/Uncompressed_values_match (0.00s) === RUN TestSignatureWithEverythingTSA === RUN TestSignatureWithEverythingTSA/Payloads_match === RUN TestSignatureWithEverythingTSA/Base64Signatures_match === RUN TestSignatureWithEverythingTSA/Bundles_match === RUN TestSignatureWithEverythingTSA/RFC3161_timestamp_bundles_match === RUN TestSignatureWithEverythingTSA/Certs_match === RUN TestSignatureWithEverythingTSA/Chains_match === RUN TestSignatureWithEverythingTSA/MediaTypes_match === RUN TestSignatureWithEverythingTSA/Annotations_match === RUN TestSignatureWithEverythingTSA/DiffIDs_match === RUN TestSignatureWithEverythingTSA/Sizes_match === RUN TestSignatureWithEverythingTSA/Compressed_values_match === RUN TestSignatureWithEverythingTSA/Uncompressed_values_match --- PASS: TestSignatureWithEverythingTSA (0.00s) --- PASS: TestSignatureWithEverythingTSA/Payloads_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Bundles_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Certs_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Chains_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/MediaTypes_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Annotations_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/DiffIDs_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Sizes_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Compressed_values_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Uncompressed_values_match (0.00s) === RUN TestSignatureWithEmptyCertChain --- PASS: TestSignatureWithEmptyCertChain (0.00s) === RUN TestAppendSignatures --- PASS: TestAppendSignatures (0.00s) === RUN TestReplaceSignatures --- PASS: TestReplaceSignatures (0.00s) === RUN TestGet === RUN TestGet/within_limit === RUN TestGet/base_exceeds_limit === RUN TestGet/append_exceeds_limit === RUN TestGet/sum_exceeds_limit --- PASS: TestGet (0.00s) --- PASS: TestGet/within_limit (0.00s) --- PASS: TestGet/base_exceeds_limit (0.00s) --- PASS: TestGet/append_exceeds_limit (0.00s) --- PASS: TestGet/sum_exceeds_limit (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/mutate 0.258s ? github.com/sigstore/cosign/v3/pkg/oci/platform [no test files] === RUN TestResolveDigest === RUN TestResolveDigest/digest_doesn't_call_remote.Get === RUN TestResolveDigest/tag_calls_remote.Get === RUN TestResolveDigest/remote.Get_errors_propagate --- PASS: TestResolveDigest (0.00s) --- PASS: TestResolveDigest/digest_doesn't_call_remote.Get (0.00s) --- PASS: TestResolveDigest/tag_calls_remote.Get (0.00s) --- PASS: TestResolveDigest/remote.Get_errors_propagate (0.00s) === RUN TestSignedImage --- PASS: TestSignedImage (0.02s) === RUN TestSignedImageWithAttachment --- PASS: TestSignedImageWithAttachment (0.53s) === RUN TestSignedImageIndex --- PASS: TestSignedImageIndex (0.03s) === RUN TestOptions === RUN TestOptions/no_options === RUN TestOptions/signature_option === RUN TestOptions/attestation_option === RUN TestOptions/sbom_option === RUN TestOptions/target_repo_option === RUN TestOptions/remote_options_option === RUN TestOptions/more_remote_options_option === RUN TestOptions/bundle_options_option --- PASS: TestOptions (0.00s) --- PASS: TestOptions/no_options (0.00s) --- PASS: TestOptions/signature_option (0.00s) --- PASS: TestOptions/attestation_option (0.00s) --- PASS: TestOptions/sbom_option (0.00s) --- PASS: TestOptions/target_repo_option (0.00s) --- PASS: TestOptions/remote_options_option (0.00s) --- PASS: TestOptions/more_remote_options_option (0.00s) --- PASS: TestOptions/bundle_options_option (0.00s) === RUN TestGetEnvTargetRepository === RUN TestGetEnvTargetRepository/good === RUN TestGetEnvTargetRepository/bad === RUN TestGetEnvTargetRepository/empty === RUN TestGetEnvTargetRepository/registry_without_repository_path --- PASS: TestGetEnvTargetRepository (0.00s) --- PASS: TestGetEnvTargetRepository/good (0.00s) --- PASS: TestGetEnvTargetRepository/bad (0.00s) --- PASS: TestGetEnvTargetRepository/empty (0.00s) --- PASS: TestGetEnvTargetRepository/registry_without_repository_path (0.00s) === RUN TestReferrers_NoTargetRepository --- PASS: TestReferrers_NoTargetRepository (0.00s) === RUN TestReferrers_WithTargetRepository --- PASS: TestReferrers_WithTargetRepository (0.00s) === RUN TestReferrers_ArtifactTypeFilter --- PASS: TestReferrers_ArtifactTypeFilter (0.00s) === RUN TestTagMethods === RUN TestTagMethods/signature_passed_a_tag === RUN TestTagMethods/signature_passed_a_tag_(w/_custom_suffix) === RUN TestTagMethods/signature_passed_a_digest === RUN TestTagMethods/attestation_passed_a_tag === RUN TestTagMethods/attestation_passed_a_tag_(w/_custom_suffix) === RUN TestTagMethods/attestation_passed_a_digest === RUN TestTagMethods/sbom_passed_a_tag === RUN TestTagMethods/sbom_passed_a_tag_(w/_custom_suffix) === RUN TestTagMethods/sbom_passed_a_digest --- PASS: TestTagMethods (0.00s) --- PASS: TestTagMethods/signature_passed_a_tag (0.00s) --- PASS: TestTagMethods/signature_passed_a_tag_(w/_custom_suffix) (0.00s) --- PASS: TestTagMethods/signature_passed_a_digest (0.00s) --- PASS: TestTagMethods/attestation_passed_a_tag (0.00s) --- PASS: TestTagMethods/attestation_passed_a_tag_(w/_custom_suffix) (0.00s) --- PASS: TestTagMethods/attestation_passed_a_digest (0.00s) --- PASS: TestTagMethods/sbom_passed_a_tag (0.00s) --- PASS: TestTagMethods/sbom_passed_a_tag_(w/_custom_suffix) (0.00s) --- PASS: TestTagMethods/sbom_passed_a_digest (0.00s) === RUN TestTagMethodErrors === RUN TestTagMethodErrors/signature_passed_a_tag --- PASS: TestTagMethodErrors (0.00s) --- PASS: TestTagMethodErrors/signature_passed_a_tag (0.00s) === RUN TestDockercontentDigest === RUN TestDockercontentDigest/docker_content_digest_for_tag === RUN TestDockercontentDigest/docker_content_digest_for_attestation === RUN TestDockercontentDigest/docker_content_digest_for_SBOM --- PASS: TestDockercontentDigest (0.00s) --- PASS: TestDockercontentDigest/docker_content_digest_for_tag (0.00s) --- PASS: TestDockercontentDigest/docker_content_digest_for_attestation (0.00s) --- PASS: TestDockercontentDigest/docker_content_digest_for_SBOM (0.00s) === RUN TestPayload === RUN TestPayload/within_default_limit === RUN TestPayload/excceds_default_limit === RUN TestPayload/exceeds_overridden_limit === RUN TestPayload/within_overridden_limit --- PASS: TestPayload (0.00s) --- PASS: TestPayload/within_default_limit (0.00s) --- PASS: TestPayload/excceds_default_limit (0.00s) --- PASS: TestPayload/exceeds_overridden_limit (0.00s) --- PASS: TestPayload/within_overridden_limit (0.00s) === RUN TestReadCappedWithinLimit --- PASS: TestReadCappedWithinLimit (0.00s) === RUN TestReadCappedRejectsOversizedPayload --- PASS: TestReadCappedRejectsOversizedPayload (0.00s) === RUN TestReadCappedRejectsDecompressionBomb --- PASS: TestReadCappedRejectsDecompressionBomb (0.18s) === RUN TestSignaturesErrors === RUN TestSignaturesErrors/404_returns_empty === RUN TestSignaturesErrors/other_transport_errors_propagate === RUN TestSignaturesErrors/other_errors_propagate === RUN TestSignaturesErrors/too_many_layers --- PASS: TestSignaturesErrors (0.00s) --- PASS: TestSignaturesErrors/404_returns_empty (0.00s) --- PASS: TestSignaturesErrors/other_transport_errors_propagate (0.00s) --- PASS: TestSignaturesErrors/other_errors_propagate (0.00s) --- PASS: TestSignaturesErrors/too_many_layers (0.00s) === RUN TestSignedUnknown --- PASS: TestSignedUnknown (0.00s) === RUN TestSignedUnknownWithAttachment --- PASS: TestSignedUnknownWithAttachment (0.91s) === RUN TestWriteSignatures --- PASS: TestWriteSignatures (0.00s) === RUN TestWriteAttestations --- PASS: TestWriteAttestations (0.00s) === RUN TestReferrerManifest --- PASS: TestReferrerManifest (0.00s) === RUN TestTaggableManifest --- PASS: TestTaggableManifest (0.00s) === RUN TestWriteAttestationNewBundleFormat --- PASS: TestWriteAttestationNewBundleFormat (0.00s) === RUN TestWriteAttestationsReferrer --- PASS: TestWriteAttestationsReferrer (0.00s) === RUN TestWriteAttestationsReferrerPreservesAnnotations --- PASS: TestWriteAttestationsReferrerPreservesAnnotations (0.00s) === RUN TestWriteReferrer --- PASS: TestWriteReferrer (0.00s) === RUN TestWriteReferrerErrorHandling --- PASS: TestWriteReferrerErrorHandling (0.00s) === RUN TestWriteSignaturesExperimentalOCI Uploading signature for [gcr.io/test/image@sha256:1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef] to [gcr.io/test/image@sha256:29a896c0dabf10be6d6331372505f2b275c32511dc9e972d4a90bddaecf2a123] with config.mediaType [application/vnd.dev.cosign.artifact.sig.v1+json] layers[0].mediaType [application/vnd.dev.cosign.simplesigning.v1+json]. --- PASS: TestWriteSignaturesExperimentalOCI (0.00s) === RUN TestWriteSignedImageIndexImages_BundleUploadOrder --- PASS: TestWriteSignedImageIndexImages_BundleUploadOrder (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/remote 1.864s === RUN TestImage --- PASS: TestImage (0.00s) === RUN TestImageIndex --- PASS: TestImageIndex (0.01s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/signed 0.213s === RUN TestNewFile === RUN TestNewFile/check_size === RUN TestNewFile/check_media_type === RUN TestNewFile/check_hashes === RUN TestNewFile/check_content === RUN TestNewFile/check_date === RUN TestNewFile/check_annotations === RUN TestNewFile/huge_file_payload --- PASS: TestNewFile (0.00s) --- PASS: TestNewFile/check_size (0.00s) --- PASS: TestNewFile/check_media_type (0.00s) --- PASS: TestNewFile/check_hashes (0.00s) --- PASS: TestNewFile/check_content (0.00s) --- PASS: TestNewFile/check_date (0.00s) --- PASS: TestNewFile/check_annotations (0.00s) --- PASS: TestNewFile/huge_file_payload (0.00s) === RUN TestOptions === RUN TestOptions/no_options === RUN TestOptions/with_layer_media_type === RUN TestOptions/with_config_media_type === RUN TestOptions/with_annotations === RUN TestOptions/with_cert_chain === RUN TestOptions/with_bundle === RUN TestOptions/with_RFC3161_timestamp_bundle === RUN TestOptions/with_RFC3161Timestamp_and_Rekor_bundle === RUN TestOptions/with_RFC3161Timestamp_and_Rekor_bundle#01 --- PASS: TestOptions (0.00s) --- PASS: TestOptions/no_options (0.00s) --- PASS: TestOptions/with_layer_media_type (0.00s) --- PASS: TestOptions/with_config_media_type (0.00s) --- PASS: TestOptions/with_annotations (0.00s) --- PASS: TestOptions/with_cert_chain (0.00s) --- PASS: TestOptions/with_bundle (0.00s) --- PASS: TestOptions/with_RFC3161_timestamp_bundle (0.00s) --- PASS: TestOptions/with_RFC3161Timestamp_and_Rekor_bundle (0.00s) --- PASS: TestOptions/with_RFC3161Timestamp_and_Rekor_bundle#01 (0.00s) === RUN TestNewSignatureBasic === RUN TestNewSignatureBasic/check_size === RUN TestNewSignatureBasic/check_media_type === RUN TestNewSignatureBasic/check_hashes === RUN TestNewSignatureBasic/check_content === RUN TestNewSignatureBasic/check_annotations === RUN TestNewSignatureBasic/check_signature_accessors --- PASS: TestNewSignatureBasic (0.00s) --- PASS: TestNewSignatureBasic/check_size (0.00s) --- PASS: TestNewSignatureBasic/check_media_type (0.00s) --- PASS: TestNewSignatureBasic/check_hashes (0.00s) --- PASS: TestNewSignatureBasic/check_content (0.00s) --- PASS: TestNewSignatureBasic/check_annotations (0.00s) --- PASS: TestNewSignatureBasic/check_signature_accessors (0.00s) === RUN TestNewAttestationBasic === RUN TestNewAttestationBasic/check_size === RUN TestNewAttestationBasic/check_media_type === RUN TestNewAttestationBasic/check_hashes === RUN TestNewAttestationBasic/check_content === RUN TestNewAttestationBasic/check_annotations === RUN TestNewAttestationBasic/check_signature_accessors --- PASS: TestNewAttestationBasic (0.00s) --- PASS: TestNewAttestationBasic/check_size (0.00s) --- PASS: TestNewAttestationBasic/check_media_type (0.00s) --- PASS: TestNewAttestationBasic/check_hashes (0.00s) --- PASS: TestNewAttestationBasic/check_content (0.00s) --- PASS: TestNewAttestationBasic/check_annotations (0.00s) --- PASS: TestNewAttestationBasic/check_signature_accessors (0.00s) === RUN TestNewSignatureCertChainAndBundle === RUN TestNewSignatureCertChainAndBundle/check_signature_accessors === RUN TestNewSignatureCertChainAndBundle/check_annotations --- PASS: TestNewSignatureCertChainAndBundle (0.00s) --- PASS: TestNewSignatureCertChainAndBundle/check_signature_accessors (0.00s) --- PASS: TestNewSignatureCertChainAndBundle/check_annotations (0.00s) === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_signature_accessors === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_annotations === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_signature_accessors === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_rekor_and_tsa_annotations --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_signature_accessors (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_annotations (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_signature_accessors (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_rekor_and_tsa_annotations (0.00s) === RUN TestNewSignatureBadCertChain === RUN TestNewSignatureBadCertChain/check_signature_accessors --- PASS: TestNewSignatureBadCertChain (0.00s) --- PASS: TestNewSignatureBadCertChain/check_signature_accessors (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/static 0.180s === RUN TestMapImage === RUN TestMapImage/walk_image,_no_errors === RUN TestMapImage/error_propagates --- PASS: TestMapImage (0.00s) --- PASS: TestMapImage/walk_image,_no_errors (0.00s) --- PASS: TestMapImage/error_propagates (0.00s) === RUN TestMapImageIndex === RUN TestMapImageIndex/six_calls_to_identity_mutator --- PASS: TestMapImageIndex (0.01s) --- PASS: TestMapImageIndex/six_calls_to_identity_mutator (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/walk 0.190s === RUN TestFailures --- PASS: TestFailures (0.00s) === RUN TestErroringPayload --- PASS: TestErroringPayload (0.00s) === RUN TestAttestationToPayloadJson --- PASS: TestAttestationToPayloadJson (0.00s) === RUN TestPayloadProvider --- PASS: TestPayloadProvider (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/policy 0.243s ? github.com/sigstore/cosign/v3/pkg/providers [no test files] ? github.com/sigstore/cosign/v3/pkg/providers/all [no test files] ? github.com/sigstore/cosign/v3/pkg/providers/buildkite [no test files] === RUN TestEnvVar === RUN TestEnvVar/true === RUN TestEnvVar/false --- PASS: TestEnvVar (0.00s) --- PASS: TestEnvVar/true (0.00s) --- PASS: TestEnvVar/false (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/providers/envvar 0.063s ? github.com/sigstore/cosign/v3/pkg/providers/filesystem [no test files] === RUN TestProvide_NoDuplicateAuthHeaders error fetching GitHub OIDC token (will retry): Get "http://127.0.0.1:43297?test=1&audience=sigstore": EOF error fetching GitHub OIDC token (will retry): Get "http://127.0.0.1:43297?test=1&audience=sigstore": EOF --- PASS: TestProvide_NoDuplicateAuthHeaders (2.01s) === RUN TestProvide_ErrorResponse === RUN TestProvide_ErrorResponse/non-JSON_body_on_a_failing_status === RUN TestProvide_ErrorResponse/long_error_body_is_truncated === RUN TestProvide_ErrorResponse/empty_error_body === RUN TestProvide_ErrorResponse/malformed_JSON_body_on_success --- PASS: TestProvide_ErrorResponse (0.00s) --- PASS: TestProvide_ErrorResponse/non-JSON_body_on_a_failing_status (0.00s) --- PASS: TestProvide_ErrorResponse/long_error_body_is_truncated (0.00s) --- PASS: TestProvide_ErrorResponse/empty_error_body (0.00s) --- PASS: TestProvide_ErrorResponse/malformed_JSON_body_on_success (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/providers/github 2.096s ? github.com/sigstore/cosign/v3/pkg/providers/google [no test files] === RUN TestGetSocketPath --- PASS: TestGetSocketPath (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/providers/spiffe 0.121s === RUN TestSignerFromPrivateKeyFileRef === PAUSE TestSignerFromPrivateKeyFileRef === RUN TestPublicKeyFromFileRef === PAUSE TestPublicKeyFromFileRef === RUN TestPublicKeyFromEnvVar --- PASS: TestPublicKeyFromEnvVar (0.20s) === RUN TestSignerVerifierFromEnvVar --- PASS: TestSignerVerifierFromEnvVar (0.37s) === RUN TestVerifierForKeyRefError --- PASS: TestVerifierForKeyRefError (0.00s) === RUN TestPublicKeyFromKeyRefAutoDetectAlgorithm === PAUSE TestPublicKeyFromKeyRefAutoDetectAlgorithm === CONT TestSignerFromPrivateKeyFileRef === CONT TestPublicKeyFromKeyRefAutoDetectAlgorithm === CONT TestPublicKeyFromFileRef === RUN TestSignerFromPrivateKeyFileRef/good_password === PAUSE TestSignerFromPrivateKeyFileRef/good_password === RUN TestSignerFromPrivateKeyFileRef/bad_password === PAUSE TestSignerFromPrivateKeyFileRef/bad_password === CONT TestSignerFromPrivateKeyFileRef/good_password === CONT TestSignerFromPrivateKeyFileRef/bad_password --- PASS: TestPublicKeyFromKeyRefAutoDetectAlgorithm (0.03s) --- PASS: TestPublicKeyFromFileRef (0.19s) --- PASS: TestSignerFromPrivateKeyFileRef (0.00s) --- PASS: TestSignerFromPrivateKeyFileRef/good_password (0.37s) --- PASS: TestSignerFromPrivateKeyFileRef/bad_password (0.37s) PASS ok github.com/sigstore/cosign/v3/pkg/signature 1.164s ? github.com/sigstore/cosign/v3/pkg/types [no test files] ? github.com/sigstore/cosign/v3/test/cmd/getoidctoken [no test files] >>> cosign: Entering fakeroot... >>> cosign-bash-completion*: Running split function bashcomp... 'usr/share/bash-completion/completions' -> '/home/buildozer/aports/community/cosign/pkg/cosign-bash-completion/usr/share/bash-completion/completions' >>> cosign-bash-completion*: Preparing subpackage cosign-bash-completion... >>> cosign-bash-completion*: Running postcheck for cosign-bash-completion >>> cosign-fish-completion*: Running split function fishcomp... libfakeroot internal error: payload not recognized! 'usr/share/fish/vendor_completions.d' -> '/home/buildozer/aports/community/cosign/pkg/cosign-fish-completion/usr/share/fish/vendor_completions.d' >>> cosign-fish-completion*: Preparing subpackage cosign-fish-completion... >>> cosign-fish-completion*: Running postcheck for cosign-fish-completion >>> cosign-zsh-completion*: Running split function zshcomp... 'usr/share/zsh/site-functions' -> '/home/buildozer/aports/community/cosign/pkg/cosign-zsh-completion/usr/share/zsh/site-functions' >>> cosign-zsh-completion*: Preparing subpackage cosign-zsh-completion... >>> cosign-zsh-completion*: Running postcheck for cosign-zsh-completion >>> cosign*: Running postcheck for cosign >>> cosign*: Preparing package cosign... >>> cosign*: Stripping binaries >>> cosign*: Scanning shared objects >>> cosign*: Tracing dependencies... pcsc-lite-libs so:libc.musl-aarch64.so.1 >>> cosign*: Package size: 102.6 MB >>> cosign*: Compressing data... >>> cosign*: Create checksum... >>> cosign*: Create cosign-3.1.4-r0.apk >>> cosign-bash-completion*: Tracing dependencies... >>> cosign-bash-completion*: Package size: 122.1 KB >>> cosign-bash-completion*: Compressing data... >>> cosign-bash-completion*: Create checksum... >>> cosign-bash-completion*: Create cosign-bash-completion-3.1.4-r0.apk >>> cosign-fish-completion*: Tracing dependencies... >>> cosign-fish-completion*: Package size: 9.5 KB >>> cosign-fish-completion*: Compressing data... >>> cosign-fish-completion*: Create checksum... >>> cosign-fish-completion*: Create cosign-fish-completion-3.1.4-r0.apk >>> cosign-zsh-completion*: Tracing dependencies... >>> cosign-zsh-completion*: Package size: 7.6 KB >>> cosign-zsh-completion*: Compressing data... >>> cosign-zsh-completion*: Create checksum... >>> cosign-zsh-completion*: Create cosign-zsh-completion-3.1.4-r0.apk >>> cosign: Build complete at Tue, 03 Nov 2026 11:45:30 +0000 elapsed time 0h 1m 29s >>> cosign: Cleaning up srcdir >>> cosign: Cleaning up pkgdir >>> cosign: Cleaning up tmpdir >>> cosign: Uninstalling dependencies... (1/7) Purging .makedepends-cosign (20261103.114401) (2/7) Purging go (1.27.3-r0) (3/7) Purging pcsc-lite-dev (2.5.2-r0) (4/7) Purging eudev-dev (3.2.14-r8) (5/7) Purging eudev-libs (3.2.14-r8) (6/7) Purging pcsc-lite-libs (2.5.2-r0) (7/7) Purging pcsc-lite-spy-libs (2.5.2-r0) Executing busybox-1.38.0-r8.trigger OK: 433.6 MiB in 109 packages >>> cosign: Updating the community/aarch64 repository index... >>> cosign: Signing the index...