>>> cosign: Building community/cosign 3.1.4-r0 (using abuild 3.18.0_rc7-r1) started Tue, 03 Nov 2026 16:53:33 +0000 >>> cosign: Validating /home/buildozer/aports/community/cosign/APKBUILD... >>> cosign: Analyzing dependencies... >>> cosign: Installing for build: build-base pcsc-lite-libs go pcsc-lite-dev (1/7) Installing pcsc-lite-libs (2.5.2-r0) (2/7) Installing go (1.27.3-r0) (3/7) Installing eudev-libs (3.2.14-r8) (4/7) Installing eudev-dev (3.2.14-r8) (5/7) Installing pcsc-lite-spy-libs (2.5.2-r0) (6/7) Installing pcsc-lite-dev (2.5.2-r0) (7/7) Installing .makedepends-cosign (20261103.165334) Executing busybox-1.38.0-r8.trigger OK: 465.6 MiB in 113 packages >>> cosign: Cleaning up srcdir >>> cosign: Cleaning up pkgdir >>> cosign: Cleaning up tmpdir >>> cosign: Fetching https://distfiles.alpinelinux.org/distfiles/edge/cosign-3.1.4.tar.gz Connecting to distfiles.alpinelinux.org (172.105.82.32:443) wget: server returned error: HTTP/1.1 404 Not Found >>> cosign: Fetching https://github.com/sigstore/cosign/archive/v3.1.4/cosign-3.1.4.tar.gz Connecting to github.com (20.26.156.215:443) Connecting to codeload.github.com (20.26.156.216:443) saving to '/var/cache/distfiles/cosign-3.1.4.tar.gz.part' cosign-3.1.4.tar.gz. 12992 --:--:-- ETA cosign-3.1.4.tar.gz. 100% |********************************| 959k 0:00:00 ETA '/var/cache/distfiles/cosign-3.1.4.tar.gz.part' saved /var/cache/distfiles/cosign-3.1.4.tar.gz: OK /home/buildozer/aports/community/cosign/x-sys-ppc64le-pie-fix.patch: OK >>> cosign: Fetching https://distfiles.alpinelinux.org/distfiles/edge/cosign-3.1.4.tar.gz /var/cache/distfiles/cosign-3.1.4.tar.gz: OK /home/buildozer/aports/community/cosign/x-sys-ppc64le-pie-fix.patch: OK >>> cosign: Unpacking /var/cache/distfiles/cosign-3.1.4.tar.gz... >>> cosign: x-sys-ppc64le-pie-fix.patch patching file go.mod patching file go.sum go: downloading github.com/google/go-containerregistry v0.22.1 go: downloading k8s.io/apimachinery v0.36.2 go: downloading github.com/sigstore/sigstore-go v1.3.0 go: downloading github.com/in-toto/attestation v1.2.0 go: downloading github.com/sigstore/sigstore v1.11.1 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.11.1 go: downloading github.com/spf13/cobra v1.10.2 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.11.1 go: downloading github.com/sigstore/rekor v1.5.4 go: downloading golang.org/x/term v0.47.0 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/aws v1.11.1 go: downloading github.com/spf13/pflag v1.0.10 go: downloading github.com/google/certificate-transparency-go v1.3.3 go: downloading golang.org/x/sync v0.24.0 go: downloading github.com/sigstore/protobuf-specs v0.5.2 go: downloading google.golang.org/protobuf v1.36.12 go: downloading github.com/secure-systems-lab/go-securesystemslib v0.11.1 go: downloading github.com/miekg/pkcs11 v1.1.2 go: downloading github.com/in-toto/in-toto-golang v0.11.0 go: downloading github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 go: downloading github.com/sigstore/sigstore/pkg/signature/kms/azure v1.11.1 go: downloading github.com/spf13/viper v1.21.0 go: downloading github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1 go: downloading sigs.k8s.io/release-utils v0.12.5 go: downloading github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 go: downloading github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.12.0 go: downloading github.com/mozillazg/docker-credential-acr-helper v0.4.1 go: downloading github.com/go-jose/go-jose/v4 v4.1.6 go: downloading github.com/mitchellh/go-wordwrap v1.0.1 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/sigstore/rekor-tiles/v2 v2.3.0 go: downloading cuelang.org/go v0.17.1 go: downloading github.com/eclipse-keypont/crypto11 v1.6.8 go: downloading github.com/dustin/go-humanize v1.0.1 go: downloading gitlab.com/gitlab-org/api/client-go/v3 v3.13.0 go: downloading github.com/open-policy-agent/opa v1.20.2 go: downloading github.com/google/go-github/v88 v88.0.0 go: downloading golang.org/x/crypto v0.58.0 go: downloading golang.org/x/oauth2 v0.37.0 go: downloading k8s.io/api v0.36.2 go: downloading k8s.io/client-go v0.36.2 go: downloading k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 go: downloading github.com/go-openapi/runtime v0.33.3 go: downloading github.com/go-openapi/strfmt v0.27.3 go: downloading github.com/go-openapi/swag/conv v0.29.2 go: downloading github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 go: downloading github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 go: downloading github.com/sigstore/timestamp-authority/v2 v2.1.5 go: downloading github.com/transparency-dev/merkle v0.0.2 go: downloading golang.org/x/sys v0.49.1-0.20261022125458-f5cb0306ac0e go: downloading github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352 go: downloading github.com/docker/docker-credential-helpers v0.9.5 go: downloading github.com/sirupsen/logrus v1.10.2 go: downloading github.com/fsnotify/fsnotify v1.10.1 go: downloading github.com/go-viper/mapstructure/v2 v2.5.0 go: downloading github.com/sagikazarmark/locafero v0.11.0 go: downloading github.com/spf13/afero v1.15.0 go: downloading github.com/spf13/cast v1.10.0 go: downloading github.com/hashicorp/go-cleanhttp v0.5.2 go: downloading github.com/hashicorp/go-retryablehttp v0.7.8 go: downloading github.com/go-openapi/errors v0.22.9 go: downloading golang.org/x/mod v0.41.0 go: downloading github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 go: downloading github.com/mozillazg/docker-credential-acr-helper/pkg/acr v0.2.2 go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.7 go: downloading go.yaml.in/yaml/v3 v3.0.5 go: downloading github.com/theupdateframework/go-tuf/v2 v2.4.2 go: downloading github.com/buildkite/agent/v3 v3.130.0 go: downloading github.com/spiffe/go-spiffe/v2 v2.8.2 go: downloading cloud.google.com/go/compute/metadata v0.10.0 go: downloading google.golang.org/api v0.301.0 go: downloading github.com/shibumi/go-pathspec v1.3.0 go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 go: downloading github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be go: downloading cloud.google.com/go/kms v1.33.0 go: downloading github.com/go-openapi/swag v0.28.0 go: downloading github.com/jellydator/ttlcache/v3 v3.4.1 go: downloading github.com/aws/aws-sdk-go-v2 v1.47.3 go: downloading github.com/aws/aws-sdk-go-v2/config v1.33.9 go: downloading github.com/aws/aws-sdk-go-v2/service/kms v1.61.4 go: downloading github.com/Azure/go-autorest/autorest v0.11.29 go: downloading github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 go: downloading cloud.google.com/go v0.123.0 go: downloading github.com/theupdateframework/go-tuf v0.7.0 go: downloading github.com/coreos/go-oidc/v3 v3.21.0 go: downloading github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c go: downloading github.com/go-openapi/swag/jsonutils v0.29.2 go: downloading github.com/go-openapi/swag/typeutils v0.29.2 go: downloading github.com/go-openapi/validate v1.0.0 go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.55.3 go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.10 go: downloading github.com/mitchellh/go-homedir v1.1.0 go: downloading github.com/aws/smithy-go v1.28.5 go: downloading github.com/subosito/gotenv v1.6.0 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading github.com/pelletier/go-toml/v2 v2.3.1 go: downloading github.com/hashicorp/vault/api v1.23.0 go: downloading github.com/Azure/go-autorest v14.2.0+incompatible go: downloading google.golang.org/genproto v0.0.0-20260715232425-e75dac1f907d go: downloading github.com/docker/cli v29.7.2+incompatible go: downloading github.com/Azure/azure-sdk-for-go v68.0.0+incompatible go: downloading github.com/Azure/go-autorest/autorest/adal v0.9.23 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/azcore v1.23.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.5.0 go: downloading sigs.k8s.io/yaml v1.6.0 go: downloading sigs.k8s.io/randfill v1.0.0 go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 go: downloading google.golang.org/grpc v1.84.0 go: downloading github.com/transparency-dev/formats v0.1.1 go: downloading github.com/pkg/errors v0.9.1 go: downloading github.com/thales-e-security/pool v0.0.2 go: downloading github.com/google/go-querystring v1.2.0 go: downloading github.com/russross/blackfriday/v2 v2.1.0 go: downloading github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 go: downloading github.com/go-chi/chi/v5 v5.3.2 go: downloading go.uber.org/zap v1.28.0 go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 go: downloading github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 go: downloading github.com/ProtonMail/go-crypto v1.4.1 go: downloading golang.org/x/text v0.43.0 go: downloading github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider v0.18.1 go: downloading github.com/alibabacloud-go/cr-20160607 v1.0.1 go: downloading github.com/alibabacloud-go/cr-20181201 v1.0.10 go: downloading github.com/alibabacloud-go/darabonba-openapi v0.2.1 go: downloading github.com/alibabacloud-go/tea-utils v1.4.5 go: downloading github.com/aliyun/credentials-go v1.4.7 go: downloading github.com/alibabacloud-go/tea v1.3.12 go: downloading github.com/phuslu/lru v1.0.18 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/oklog/ulid/v2 v2.1.2 go: downloading golang.org/x/net v0.61.0 go: downloading github.com/klauspost/compress v1.20.1 go: downloading github.com/google/go-cmp v0.7.0 go: downloading k8s.io/klog/v2 v2.140.0 go: downloading github.com/sassoftware/relic/v8 v8.2.0 go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 go: downloading k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2 go: downloading gopkg.in/inf.v0 v0.9.1 go: downloading cloud.google.com/go/iam v1.13.0 go: downloading cloud.google.com/go/longrunning v1.2.0 go: downloading github.com/googleapis/gax-go/v2 v2.26.2 go: downloading go.opentelemetry.io/otel/trace v1.46.0 go: downloading github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 go: downloading github.com/Azure/go-autorest/logger v0.2.1 go: downloading github.com/dimchansky/utfbom v1.1.1 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/hashicorp/errwrap v1.1.0 go: downloading github.com/hashicorp/go-multierror v1.1.1 go: downloading github.com/hashicorp/go-rootcerts v1.0.2 go: downloading github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 go: downloading github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 go: downloading github.com/hashicorp/hcl v1.0.1-vault-7 go: downloading github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c go: downloading go.opentelemetry.io/otel v1.46.0 go: downloading golang.org/x/time v0.16.0 go: downloading github.com/go-openapi/swag/fileutils v0.29.2 go: downloading github.com/go-openapi/swag/stringutils v0.29.2 go: downloading github.com/go-openapi/runtime/server-middleware v0.33.3 go: downloading github.com/Azure/go-autorest/tracing v0.6.0 go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.20.9 go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.20.3 go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.10.4 go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.38.4 go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.43.4 go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.51.4 go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.5.6 go: downloading github.com/Azure/go-autorest/autorest/date v0.3.0 go: downloading github.com/go-openapi/analysis v1.0.0 go: downloading github.com/golang-jwt/jwt/v4 v4.5.2 go: downloading github.com/go-openapi/jsonpointer v1.0.1 go: downloading github.com/go-openapi/spec v1.0.1 go: downloading github.com/go-openapi/loads v0.25.3 go: downloading github.com/go-openapi/swag/loading v0.29.1 go: downloading github.com/go-openapi/swag/pools v0.29.2 go: downloading github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d go: downloading go.yaml.in/yaml/v2 v2.4.4 go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go: downloading github.com/fxamacker/cbor/v2 v2.9.0 go: downloading github.com/cenkalti/backoff/v5 v5.0.3 go: downloading github.com/cockroachdb/apd/v3 v3.2.3 go: downloading cuelabs.dev/go/oci/ociregistry v0.0.0-20260601085548-328ff8e2c943 go: downloading github.com/alibabacloud-go/endpoint-util v1.1.1 go: downloading github.com/alibabacloud-go/openapi-util v0.1.0 go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.4 go: downloading github.com/alibabacloud-go/tea-xml v1.1.3 go: downloading github.com/AliyunContainerService/ack-ram-tool/pkg/ecsmetadata v0.0.9 go: downloading github.com/alibabacloud-go/debug v1.0.1 go: downloading gopkg.in/ini.v1 v1.67.3 go: downloading github.com/json-iterator/go v1.1.12 go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc go: downloading github.com/natefinch/atomic v1.0.1 go: downloading github.com/go-logr/logr v1.4.4 go: downloading go.opentelemetry.io/otel/metric v1.46.0 go: downloading github.com/ryanuber/go-glob v1.0.0 go: downloading github.com/hashicorp/go-sockaddr v1.0.7 go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.8.6 go: downloading github.com/google/gnostic-models v0.7.0 go: downloading github.com/emicklei/proto v1.14.3 go: downloading github.com/protocolbuffers/txtpbfmt v0.0.0-20260420112717-c39628bde8b5 go: downloading github.com/rogpeppe/go-internal v1.16.0 go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.5.6 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.21 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.14.6 go: downloading github.com/cloudflare/circl v1.6.3 go: downloading github.com/go-openapi/swag/yamlutils v0.29.1 go: downloading github.com/go-openapi/swag/mangling v0.29.1 go: downloading github.com/tjfoc/gmsm v1.4.1 go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/go-openapi/jsonreference v1.0.2 go: downloading github.com/clbanning/mxj/v2 v2.7.0 go: downloading github.com/golang/snappy v1.0.0 go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0 go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go: downloading connectrpc.com/connect v1.20.0 go: downloading github.com/buildkite/go-pipeline v0.17.1 go: downloading github.com/buildkite/roko v1.4.0 go: downloading github.com/pborman/uuid v1.2.1 go: downloading github.com/emicklei/go-restful/v3 v3.13.0 go: downloading buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260709200747-435963d16310.1 go: downloading github.com/go-openapi/swag/cmdutils v0.29.2 go: downloading github.com/go-openapi/swag/netutils v0.29.2 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/buildkite/interpolate v0.1.5 go: downloading github.com/oleiade/reflections v1.1.0 go: downloading github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 go: downloading github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9 go: downloading github.com/lestrrat-go/jwx/v3 v3.2.0 go: downloading github.com/gobwas/glob v0.2.3 go: downloading github.com/tchap/go-patricia/v2 v2.3.3 go: downloading github.com/vektah/gqlparser/v2 v2.5.36 go: downloading github.com/yashtewari/glob-intersection v0.2.0 go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb go: downloading github.com/agnivade/levenshtein v1.2.1 go: downloading github.com/lestrrat-go/option/v2 v2.0.0 go: downloading github.com/lestrrat-go/dsig v1.3.0 go: downloading github.com/lestrrat-go/httprc/v3 v3.0.6 go: downloading github.com/valyala/fastjson v1.6.10 go: downloading github.com/lestrrat-go/blackmagic v1.0.4 go: downloading github.com/lestrrat-go/httpcc v1.0.1 go: downloading cloud.google.com/go/auth v0.24.1-0.20261001053825-dbc26066f70a go: downloading cloud.google.com/go/auth/oauth2adapt v0.3.0 go: downloading github.com/google/s2a-go v0.1.11 go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.22 go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0 go: downloading github.com/felixge/httpsnoop v1.1.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 go: downloading github.com/AzureAD/microsoft-authentication-library-for-go v1.8.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0 go: downloading github.com/kylelemons/godebug v1.1.0 go: downloading github.com/golang-jwt/jwt/v5 v5.3.1 go: downloading github.com/stretchr/testify v1.12.1 go: downloading github.com/depcheck-test/depcheck-test v0.0.0-20220607135614-199033aaa936 go: downloading github.com/kelseyhightower/envconfig v1.4.0 go: downloading github.com/tink-crypto/tink-go-awskms/v3 v3.0.0 go: downloading github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0 go: downloading github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0 go: downloading github.com/tink-crypto/tink-go/v2 v2.8.0 go: downloading golang.org/x/tools v0.51.0 ? github.com/sigstore/cosign/v3/cmd/conformance [no test files] ? github.com/sigstore/cosign/v3/cmd/cosign [no test files] === RUN TestPrintEnv === RUN TestPrintEnv/no_descriptions_and_sensitive_variables === RUN TestPrintEnv/descriptions_but_sensitive_variable_is_unset === RUN TestPrintEnv/sensitive_variable_is_non-empty_but_show_sensitive_variables_is_disabled === RUN TestPrintEnv/sensitive_variable_is_empty === RUN TestPrintEnv/sensitive_variable_is_non-empty_and_show_sensitive_variables_is_enabled === RUN TestPrintEnv/sensitive_variable_is_non-empty_but_show_descriptions_is_disabled === RUN TestPrintEnv/print_unregistered_variable_with_description === RUN TestPrintEnv/print_unregistered_variable_with_description_(sensitive_enabled) === RUN TestPrintEnv/print_unregistered_variable_without_description === RUN TestPrintEnv/print_unregistered_variable_without_description_(sensitive_enabled) === RUN TestPrintEnv/print_empty_unregistered_variable === RUN TestPrintEnv/print_empty_unregistered_variable_(sensitive_enabled) --- PASS: TestPrintEnv (0.00s) --- PASS: TestPrintEnv/no_descriptions_and_sensitive_variables (0.00s) --- PASS: TestPrintEnv/descriptions_but_sensitive_variable_is_unset (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_non-empty_but_show_sensitive_variables_is_disabled (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_empty (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_non-empty_and_show_sensitive_variables_is_enabled (0.00s) --- PASS: TestPrintEnv/sensitive_variable_is_non-empty_but_show_descriptions_is_disabled (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_with_description (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_with_description_(sensitive_enabled) (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_without_description (0.00s) --- PASS: TestPrintEnv/print_unregistered_variable_without_description_(sensitive_enabled) (0.00s) --- PASS: TestPrintEnv/print_empty_unregistered_variable (0.00s) --- PASS: TestPrintEnv/print_empty_unregistered_variable_(sensitive_enabled) (0.00s) === RUN TestLoadCmdAllowHTTPRegistry === RUN TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=true_reaches_the_HTTP_registry === RUN TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=false_fails_to_connect_to_HTTP-only_registry --- PASS: TestLoadCmdAllowHTTPRegistry (0.01s) --- PASS: TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=true_reaches_the_HTTP_registry (0.00s) --- PASS: TestLoadCmdAllowHTTPRegistry/AllowHTTPRegistry=false_fails_to_connect_to_HTTP-only_registry (0.00s) === RUN TestVersionOutput === RUN TestVersionOutput/ASCII === RUN TestVersionOutput/JSON --- PASS: TestVersionOutput (0.01s) --- PASS: TestVersionOutput/ASCII (0.00s) --- PASS: TestVersionOutput/JSON (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli 0.095s === RUN TestSignatureBytesTrimsTrailingWhitespace --- PASS: TestSignatureBytesTrimsTrailingWhitespace (0.00s) === RUN TestSignatureBytesFileWithoutTrailingWhitespaceUnaffected --- PASS: TestSignatureBytesFileWithoutTrailingWhitespaceUnaffected (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/attach 0.050s === RUN TestAttestBlobCmdLocalKeyAndSk --- PASS: TestAttestBlobCmdLocalKeyAndSk (0.00s) === RUN TestAttestBlobCmdLocalKeyAndCert === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/no_cert Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCJwcmVkaWNhdGUiOnsiYnVpbGRUeXBlIjoieCIsImJ1aWxkZXIiOnsiaWQiOiIyIn19fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCOTPCGU7W5SqVmcu/UtxCmH5hvhNJf5MXEglSr4/DPdwIgeiTu5Tp1iZJOUPLxzrqJNTsPvoF7pE5DikPIuy/niJ0="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCJwcmVkaWNhdGUiOnsiYnVpbGRUeXBlIjoieCIsImJ1aWxkZXIiOnsiaWQiOiIyIn19fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQCZyCWZu98eJVBaS5/61I7LOPQ8OaKWnXJV+2n8cg8fTwIhAPxrO1mKg7U6ajdELLBzHNxno/ISNzoK3/27ny2lyWre"}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/new_bundle_generation Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/output.bundle === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_no_match_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCJwcmVkaWNhdGUiOnsiYnVpbGRUeXBlIjoieCIsImJ1aWxkZXIiOnsiaWQiOiIyIn19fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIChdVUAarIiz+ykKpxRProAB5ywt0kC6bEeuFVz0lIoYAiB6u8qozUVSdteZjt58TCXE4EosuCHOzCeq5veEr32Awg=="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_partial Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCJwcmVkaWNhdGUiOnsiYnVpbGRUeXBlIjoieCIsImJ1aWxkZXIiOnsiaWQiOiIyIn19fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQD5iHDeNrrunJ6Umais2YzbpEu0eG+/YjZMcoio55yNIAIhALG7ItaS/HIgsefFKwIf+PpKR7hiJ1wHzIPKhRqbmyo6"}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_includes_root Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YwLjIiLCJwcmVkaWNhdGUiOnsiYnVpbGRUeXBlIjoieCIsImJ1aWxkZXIiOnsiaWQiOiIyIn19fQ==","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQD7cmLWLbbNY13HTRxzEHTku3rzARaRLF/kRZ/HYQ4AxQIgKjjj+gWjvedPf0Mp0JYBzoamG6nlGssFQWhA1StVfac="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_chain_bad Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate02.json === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1 === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/no_cert Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwicHJlZGljYXRlIjp7ImJ1aWxkRGVmaW5pdGlvbiI6e30sInJ1bkRldGFpbHMiOnt9fX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQC5rpeYyAr7SrrotueadqCrN5iQEoSd3jX7OjC63J1towIhANa3uyzqCUyHLa7ls8sUrD/8HkBtfY8yQ5cg/sBKsUnw"}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwicHJlZGljYXRlIjp7ImJ1aWxkRGVmaW5pdGlvbiI6e30sInJ1bkRldGFpbHMiOnt9fX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIEA2+I49P3EtgOJLcWnOv2MBvIxv0ozm1Y0ntojZb1H5AiAhjBwcWl6ifUZaF6N8iBFuNsOGnQjYEuxWMMJLj87MpQ=="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/new_bundle_generation Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/output.bundle === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_no_match_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_matches_key Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwicHJlZGljYXRlIjp7ImJ1aWxkRGVmaW5pdGlvbiI6e30sInJ1bkRldGFpbHMiOnt9fX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIQCAu/9MK3Jy3WttZypHt+WV1+aq+3CG9sGodcohk7lK5gIgNvS6fj3ViCH2fQIMkbh/2TMxPksAeD1gC1UgDAt8jrQ="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_partial Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json Signing artifact... Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwicHJlZGljYXRlIjp7ImJ1aWxkRGVmaW5pdGlvbiI6e30sInJ1bkRldGFpbHMiOnt9fX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEYCIQDrLQPw+PPL28GRbESkp2pQ2H1FxDqS1D3+d38iPBGZ8gIhANN0b2Wz4xS+kBU5ltZ/8mZEyfns+M1/w48yT7b9O6BO"}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_includes_root Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json Signing artifact... {"payload":"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjAuMSIsInN1YmplY3QiOlt7Im5hbWUiOiJmb28udHh0IiwiZGlnZXN0Ijp7InNoYTI1NiI6IjJjMjZiNDZiNjhmZmM2OGZmOTliNDUzYzFkMzA0MTM0MTM0MjJkNzA2NDgzYmZhMGY5OGE1ZTg4NjI2NmU3YWUifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9zbHNhLmRldi9wcm92ZW5hbmNlL3YxIiwicHJlZGljYXRlIjp7ImJ1aWxkRGVmaW5pdGlvbiI6e30sInJ1bkRldGFpbHMiOnt9fX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIClHIb0w7fMV9SBVurYqhzA8d3jxhS6tE6LsvBFosfQGAiA+/yaijEsdKGCVcb+6ieKsl6uAKZ9aGVVB8beNJRXsdg=="}]} === RUN TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_chain_bad Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlobCmdLocalKeyAndCert3586247738/001/predicate1.json --- PASS: TestAttestBlobCmdLocalKeyAndCert (3.79s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance (1.86s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/no_cert (0.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_matches_key (0.36s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/new_bundle_generation (0.22s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_no_match_key (0.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_matches_key (0.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_partial (0.22s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/cert_chain_includes_root (0.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance/fail:_cert_chain_bad (0.20s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1 (1.64s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/no_cert (0.22s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_matches_key (0.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/new_bundle_generation (0.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_no_match_key (0.20s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_matches_key (0.20s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_partial (0.20s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/cert_chain_includes_root (0.21s) --- PASS: TestAttestBlobCmdLocalKeyAndCert/slsaprovenance1/fail:_cert_chain_bad (0.20s) === RUN TestAttestBlob === RUN TestAttestBlob/slsaprovenance Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob618441874/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob618441874/001/predicate02.json Signature written in /home/buildozer/aports/community/cosign/tmp/TestAttestBlob618441874/001/dsse.intoto.jsonl Signing artifact... === RUN TestAttestBlob/slsaprovenance1 Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob618441874/001/foo.txt Using payload from: /home/buildozer/aports/community/cosign/tmp/TestAttestBlob618441874/001/predicate1.json Signing artifact... Signature written in /home/buildozer/aports/community/cosign/tmp/TestAttestBlob618441874/001/dsse.intoto.jsonl --- PASS: TestAttestBlob (0.61s) --- PASS: TestAttestBlob/slsaprovenance (0.21s) --- PASS: TestAttestBlob/slsaprovenance1 (0.20s) === RUN TestBadRekorEntryType === RUN TestBadRekorEntryType/slsaprovenance1 === RUN TestBadRekorEntryType/slsaprovenance --- PASS: TestBadRekorEntryType (0.20s) --- PASS: TestBadRekorEntryType/slsaprovenance1 (0.00s) --- PASS: TestBadRekorEntryType/slsaprovenance (0.00s) === RUN TestStatementPath Using statement from: /home/buildozer/aports/community/cosign/tmp/TestStatementPath3067705647/001/statement.json Signing artifact... {"payload":"ewoJCSJfdHlwZSI6ICJodHRwczovL2luLXRvdG8uaW8vU3RhdGVtZW50L3YxIiwKCQkic3ViamVjdCI6IFsKCQkJewoJCQkJIm5hbWUiOiAiZm9vIiwKCQkJCSJkaWdlc3QiOiB7CgkJCQkJInNoYTI1NiI6ICJkZWFkYmVlZiIKCQkJCX0KCQkJfQoJCV0sCgkJInByZWRpY2F0ZVR5cGUiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS9DdXN0b21QcmVkaWNhdGUvdjEiLAoJCSJwcmVkaWNhdGUiOiB7CgkJCSJmb28iOiAiYmFyIgoJCX0KCX0=","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEQCIEHPL44eolj+KJon4LVcE8qwNQv68K+P2V4X1ZMo2DdBAiB/14lY9V94UutHP+aFOGOdNhtrt9jmzYz+ChUVt9TXkg=="}]} --- PASS: TestStatementPath (0.40s) === RUN TestPredicateReader === RUN TestPredicateReader/standard_input Using payload from: standard input === RUN TestPredicateReader/regular_file Using payload from: /home/buildozer/aports/community/cosign/tmp/TestPredicateReaderregular_file2319495577/001/payload.json === RUN TestPredicateReader/missing_file Using payload from: payload.json --- PASS: TestPredicateReader (0.00s) --- PASS: TestPredicateReader/standard_input (0.00s) --- PASS: TestPredicateReader/regular_file (0.00s) --- PASS: TestPredicateReader/missing_file (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/attest 5.045s === RUN TestCreateCmd --- PASS: TestCreateCmd (0.01s) === RUN TestCreateCmd_FailOnIgnoreTlogWithSET === RUN TestCreateCmd_FailOnIgnoreTlogWithSET/Fail_when_bundle_has_SET_and_IgnoreTlog_is_true === RUN TestCreateCmd_FailOnIgnoreTlogWithSET/Pass_when_bundle_has_no_SET_and_IgnoreTlog_is_true --- PASS: TestCreateCmd_FailOnIgnoreTlogWithSET (0.01s) --- PASS: TestCreateCmd_FailOnIgnoreTlogWithSET/Fail_when_bundle_has_SET_and_IgnoreTlog_is_true (0.00s) --- PASS: TestCreateCmd_FailOnIgnoreTlogWithSET/Pass_when_bundle_has_no_SET_and_IgnoreTlog_is_true (0.00s) === RUN TestCreateFromContainerCmd 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:525e0658429119c4718eeb274b342d16ea9fbc966961b22f54e129f3306f8d81 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:2d501006b556b1fc480f15e39e811af5a94ef2adc06adecee866109475b48eec 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/9089201966772929504 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/5268074130205370414 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/9089201966772929504?digest=sha256%3A525e0658429119c4718eeb274b342d16ea9fbc966961b22f54e129f3306f8d81 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/5268074130205370414?digest=sha256%3A2d501006b556b1fc480f15e39e811af5a94ef2adc06adecee866109475b48eec 2026/11/03 16:55:44 PUT /v2/repo/manifests/tag 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.sig 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 HEAD /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.sig 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:187b5b466658ea45b017ee94dd9cd97465618cd3b0d5d9100eb9c07c4cd4d3e0 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:d4cea95b5d9ce9342c09d8f19da6220934656aad2406dd193f847807793be2dc 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/1760516321680462850 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/756071355998853100 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/756071355998853100?digest=sha256%3Ad4cea95b5d9ce9342c09d8f19da6220934656aad2406dd193f847807793be2dc 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/1760516321680462850?digest=sha256%3A187b5b466658ea45b017ee94dd9cd97465618cd3b0d5d9100eb9c07c4cd4d3e0 2026/11/03 16:55:44 PUT /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.sig 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.att 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 HEAD /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.att 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:3ce9d98eb37886c7e87d80b192e6840f27e11695e1567c33d7308a21f831e8fd 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:f54cb0c44fb7b91a375de17a474f53cb087f2afa4b2530856b969d3c0055ea97 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/2996781285003996453 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/6010895150080108001 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/2996781285003996453?digest=sha256%3A3ce9d98eb37886c7e87d80b192e6840f27e11695e1567c33d7308a21f831e8fd 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/6010895150080108001?digest=sha256%3Af54cb0c44fb7b91a375de17a474f53cb087f2afa4b2530856b969d3c0055ea97 2026/11/03 16:55:44 PUT /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.att 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/repo/referrers/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.sig 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.att WARNING: unable to convert signatures into attestations; skipping 2026/11/03 16:55:44 GET /v2/repo/blobs/sha256:f54cb0c44fb7b91a375de17a474f53cb087f2afa4b2530856b969d3c0055ea97 2026/11/03 16:55:44 HEAD /v2/repo/manifests/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/9186854475231288009 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/9186854475231288009?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:5455d0fd2539aa291fd6354b5e5e75cb542f68f24e6f34f5287a5075fe7f3895 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/4868654371108715629 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/4868654371108715629?digest=sha256%3A5455d0fd2539aa291fd6354b5e5e75cb542f68f24e6f34f5287a5075fe7f3895 2026/11/03 16:55:44 PUT /v2/repo/manifests/sha256:7ea7e417cd6cfc3a160544bd153fd2c9b24cba53e9a5033267fe032db25ffcf0 2026/11/03 16:55:44 GET /v2/repo/referrers/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 Converted 1 legacy attestation(s) for 127.0.0.1:39789/repo@sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009; skipped 0 already present 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/referrers/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:7ea7e417cd6cfc3a160544bd153fd2c9b24cba53e9a5033267fe032db25ffcf0 2026/11/03 16:55:44 GET /v2/repo/blobs/sha256:5455d0fd2539aa291fd6354b5e5e75cb542f68f24e6f34f5287a5075fe7f3895 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/referrers/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/repo/referrers/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:7ea7e417cd6cfc3a160544bd153fd2c9b24cba53e9a5033267fe032db25ffcf0 2026/11/03 16:55:44 GET /v2/repo/blobs/sha256:5455d0fd2539aa291fd6354b5e5e75cb542f68f24e6f34f5287a5075fe7f3895 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.sig 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009.att WARNING: unable to convert signatures into attestations; skipping 2026/11/03 16:55:44 GET /v2/repo/blobs/sha256:f54cb0c44fb7b91a375de17a474f53cb087f2afa4b2530856b969d3c0055ea97 Converted 0 legacy attestation(s) for 127.0.0.1:39789/repo@sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009; skipped 1 already present 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/referrers/sha256:b1c83735196d96cc66fdb26739fec31084a8ed43904f4d3b9376b00d4f8d3009 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:7ea7e417cd6cfc3a160544bd153fd2c9b24cba53e9a5033267fe032db25ffcf0 2026/11/03 16:55:44 GET /v2/repo/blobs/sha256:5455d0fd2539aa291fd6354b5e5e75cb542f68f24e6f34f5287a5075fe7f3895 --- PASS: TestCreateFromContainerCmd (0.06s) === RUN TestCreateFromContainerCmd_NoLegacyMaterial 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:82a759a64fb00dcedb37b5a2c0a02fb5e87657f37b6e288911c48ac2353d4daa 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 HEAD /v2/repo/blobs/sha256:6a86e28b255c4bbee71a04d2d618af8ec5713f31ec9bd9dd39613f17c9c7a130 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/7868782867547176610 2026/11/03 16:55:44 PATCH /v2/repo/blobs/uploads/8146298865080674022 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/7868782867547176610?digest=sha256%3A82a759a64fb00dcedb37b5a2c0a02fb5e87657f37b6e288911c48ac2353d4daa 2026/11/03 16:55:44 PUT /v2/repo/blobs/uploads/8146298865080674022?digest=sha256%3A6a86e28b255c4bbee71a04d2d618af8ec5713f31ec9bd9dd39613f17c9c7a130 2026/11/03 16:55:44 PUT /v2/repo/manifests/tag 2026/11/03 16:55:44 GET /v2/ 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256:37978cf2088eb4e94b30d1a7cc149f601617b85c40e4c820a58e8f7c467b4044 2026/11/03 16:55:44 GET /v2/repo/referrers/sha256:37978cf2088eb4e94b30d1a7cc149f601617b85c40e4c820a58e8f7c467b4044 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-37978cf2088eb4e94b30d1a7cc149f601617b85c40e4c820a58e8f7c467b4044.sig 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 16:55:44 GET /v2/repo/manifests/sha256-37978cf2088eb4e94b30d1a7cc149f601617b85c40e4c820a58e8f7c467b4044.att 404 MANIFEST_UNKNOWN Unknown manifest --- PASS: TestCreateFromContainerCmd_NoLegacyMaterial (0.01s) === RUN TestInspectCmd === RUN TestInspectCmd/v0.3_bundle_with_single_cert WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_missing_media_type WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_unrecognized_media_type WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_missing_verification_material WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. === RUN TestInspectCmd/Bundle_with_missing_content WARNING: This command only inspects the contents of the bundle. It does not perform cryptographic verification or verify log inclusion. --- PASS: TestInspectCmd (1.12s) --- PASS: TestInspectCmd/v0.3_bundle_with_single_cert (0.51s) --- PASS: TestInspectCmd/Bundle_with_missing_media_type (0.16s) --- PASS: TestInspectCmd/Bundle_with_unrecognized_media_type (0.15s) --- PASS: TestInspectCmd/Bundle_with_missing_verification_material (0.16s) --- PASS: TestInspectCmd/Bundle_with_missing_content (0.15s) === RUN TestPopulateVerificationMaterialSummary === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_public_key === RUN TestPopulateVerificationMaterialSummary/v0.1_bundle_with_single_cert_(expects_warning) === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_certificate_chain_(expects_warning) === RUN TestPopulateVerificationMaterialSummary/v0.1_bundle_with_tlog_entry_missing_promise === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_tlog_entry_missing_proof === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_raw_bytes === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_chain === RUN TestPopulateVerificationMaterialSummary/v0.3_bundle_with_missing_verification_material_content --- PASS: TestPopulateVerificationMaterialSummary (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_public_key (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.1_bundle_with_single_cert_(expects_warning) (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_certificate_chain_(expects_warning) (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.1_bundle_with_tlog_entry_missing_promise (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_tlog_entry_missing_proof (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_raw_bytes (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_empty_certificate_chain (0.00s) --- PASS: TestPopulateVerificationMaterialSummary/v0.3_bundle_with_missing_verification_material_content (0.00s) === RUN TestPopulateCertificateSummary === RUN TestPopulateCertificateSummary/ECDSA === RUN TestPopulateCertificateSummary/Ed25519 === RUN TestPopulateCertificateSummary/RSA --- PASS: TestPopulateCertificateSummary (0.21s) --- PASS: TestPopulateCertificateSummary/ECDSA (0.00s) --- PASS: TestPopulateCertificateSummary/Ed25519 (0.00s) --- PASS: TestPopulateCertificateSummary/RSA (0.00s) === RUN TestPopulateCertificateSummary_Authority === RUN TestPopulateCertificateSummary_Authority/Found_in_initialized_trusted_root === RUN TestPopulateCertificateSummary_Authority/Not_found_in_initialized_trusted_root --- PASS: TestPopulateCertificateSummary_Authority (0.00s) --- PASS: TestPopulateCertificateSummary_Authority/Found_in_initialized_trusted_root (0.00s) --- PASS: TestPopulateCertificateSummary_Authority/Not_found_in_initialized_trusted_root (0.00s) === RUN TestPopulateTlogEntrySummary === RUN TestPopulateTlogEntrySummary/Not_found_in_initialized_trusted_root === RUN TestPopulateTlogEntrySummary/Found_in_initialized_trusted_root === RUN TestPopulateTlogEntrySummary/with_kind/version === RUN TestPopulateTlogEntrySummary/with_canonicalized_body --- PASS: TestPopulateTlogEntrySummary (0.00s) --- PASS: TestPopulateTlogEntrySummary/Not_found_in_initialized_trusted_root (0.00s) --- PASS: TestPopulateTlogEntrySummary/Found_in_initialized_trusted_root (0.00s) --- PASS: TestPopulateTlogEntrySummary/with_kind/version (0.00s) --- PASS: TestPopulateTlogEntrySummary/with_canonicalized_body (0.00s) === RUN TestPopulateContentSummary === RUN TestPopulateContentSummary/DSSE_Envelope === RUN TestPopulateContentSummary/Message_Signature --- PASS: TestPopulateContentSummary (0.00s) --- PASS: TestPopulateContentSummary/DSSE_Envelope (0.00s) --- PASS: TestPopulateContentSummary/Message_Signature (0.00s) === RUN TestPopulateTimestampSummary --- PASS: TestPopulateTimestampSummary (0.00s) === RUN TestPopulateContentSummary_DsseSignatures === RUN TestPopulateContentSummary_DsseSignatures/Valid_Base64_Key_Hint === RUN TestPopulateContentSummary_DsseSignatures/Invalid_Base64_Key_Hint === RUN TestPopulateContentSummary_DsseSignatures/Key_Hint_Mismatch --- PASS: TestPopulateContentSummary_DsseSignatures (0.00s) --- PASS: TestPopulateContentSummary_DsseSignatures/Valid_Base64_Key_Hint (0.00s) --- PASS: TestPopulateContentSummary_DsseSignatures/Invalid_Base64_Key_Hint (0.00s) --- PASS: TestPopulateContentSummary_DsseSignatures/Key_Hint_Mismatch (0.00s) === RUN TestPopulateTlogEntrySummary_Inclusion === RUN TestPopulateTlogEntrySummary_Inclusion/Inclusion_promise === RUN TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_invalid_checkpoint === RUN TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_valid_checkpoint --- PASS: TestPopulateTlogEntrySummary_Inclusion (0.00s) --- PASS: TestPopulateTlogEntrySummary_Inclusion/Inclusion_promise (0.00s) --- PASS: TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_invalid_checkpoint (0.00s) --- PASS: TestPopulateTlogEntrySummary_Inclusion/Inclusion_proof_with_valid_checkpoint (0.00s) === RUN TestUpgradeBundle === RUN TestUpgradeBundle/Already_v0.3 Bundle is already at v0.3, no upgrade needed. === RUN TestUpgradeBundle/Upgrade_v0.1_to_v0.3 Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Certificate 1: === RUN TestUpgradeBundle/Upgrade_v0.2_to_v0.3 Upgrading from v0.2 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Certificate 1: === RUN TestUpgradeBundle/Upgrade_with_Email_SAN Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: foo@bar.com === RUN TestUpgradeBundle/Upgrade_with_URI_SAN Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: https://example.com/workflow === RUN TestUpgradeBundle/Upgrade_with_Subject Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: CN=my-identity,O=dev === RUN TestUpgradeBundle/Upgrade_with_no_identity Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0 Identity: === RUN TestUpgradeBundle/Missing_VerificationMaterial === RUN TestUpgradeBundle/Missing_Content_in_VerificationMaterial === RUN TestUpgradeBundle/Unsupported_version === RUN TestUpgradeBundle/Upgrade_with_missing_inclusion_proof Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Fetching missing inclusion proof from Rekor for log index 42... --- PASS: TestUpgradeBundle (0.00s) --- PASS: TestUpgradeBundle/Already_v0.3 (0.00s) --- PASS: TestUpgradeBundle/Upgrade_v0.1_to_v0.3 (0.00s) --- PASS: TestUpgradeBundle/Upgrade_v0.2_to_v0.3 (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_Email_SAN (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_URI_SAN (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_Subject (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_no_identity (0.00s) --- PASS: TestUpgradeBundle/Missing_VerificationMaterial (0.00s) --- PASS: TestUpgradeBundle/Missing_Content_in_VerificationMaterial (0.00s) --- PASS: TestUpgradeBundle/Unsupported_version (0.00s) --- PASS: TestUpgradeBundle/Upgrade_with_missing_inclusion_proof (0.00s) === RUN TestUpgradeCmd === RUN TestUpgradeCmd/File_Output Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: Successfully upgraded bundle written to /home/buildozer/aports/community/cosign/tmp/TestUpgradeCmdFile_Output3407653367/001/output.json === RUN TestUpgradeCmd/Stdout_Fallback Upgrading from v0.1 to v0.3... Truncating certificate chain to only the leaf certificate... Certificate 0: --- PASS: TestUpgradeCmd (0.00s) --- PASS: TestUpgradeCmd/File_Output (0.00s) --- PASS: TestUpgradeCmd/Stdout_Fallback (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/bundle 1.491s === RUN TestCopyAttachmentTagPrefix Copying index.docker.io/library/alpine@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a to index.docker.io/library/test-alpine:test-tagsha256-be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a... Copying index.docker.io/library/alpine@sha256:c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d to index.docker.io/library/test-alpine:test-tagsha256-c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d... Copying index.docker.io/library/alpine@sha256:964745728d174226819257152a79b34561fe7321472eb9c8e32f461cbc7969c2 to index.docker.io/library/test-alpine:test-tagsha256-964745728d174226819257152a79b34561fe7321472eb9c8e32f461cbc7969c2... Copying index.docker.io/library/alpine@sha256:2b8ed0bd9e82c247a3817b867718404f020ab8f701bda09642ddfaa7b4f1578d to index.docker.io/library/test-alpine:test-tagsha256-2b8ed0bd9e82c247a3817b867718404f020ab8f701bda09642ddfaa7b4f1578d... Copying index.docker.io/library/alpine@sha256:a28d9fc2e441f25a4340eaa840511d5ad1e07522bd56b498af238382f40ade35 to index.docker.io/library/test-alpine:test-tagsha256-a28d9fc2e441f25a4340eaa840511d5ad1e07522bd56b498af238382f40ade35... Copying index.docker.io/library/alpine@sha256:6db0aa37b0f1ba86c31102b0972cb082a1d22ed1390440de84f1076d78d4d399 to index.docker.io/library/test-alpine:test-tagsha256-6db0aa37b0f1ba86c31102b0972cb082a1d22ed1390440de84f1076d78d4d399... Copying index.docker.io/library/alpine@sha256:563589a905f92e0add079850ab496c980d78cc70b4b30114d4d9bab1c0aa22d8 to index.docker.io/library/test-alpine:test-tagsha256-563589a905f92e0add079850ab496c980d78cc70b4b30114d4d9bab1c0aa22d8... Copying index.docker.io/library/alpine@sha256:e311ae748be7f56ae5cba304bc488f0786df68ee507513f654a5cc8597cffb42 to index.docker.io/library/test-alpine:test-tagsha256-e311ae748be7f56ae5cba304bc488f0786df68ee507513f654a5cc8597cffb42... Copying index.docker.io/library/alpine@sha256:94db52ee2ab0391093b6748b79508ce6f91a046348f67afae380f372633f5c55 to index.docker.io/library/test-alpine:test-tagsha256-94db52ee2ab0391093b6748b79508ce6f91a046348f67afae380f372633f5c55... Copying index.docker.io/library/alpine@sha256:6708ca119efec5c3fdcad5dc95d8a28a529aad8debc95872b7e12b3941882f55 to index.docker.io/library/test-alpine:test-tagsha256-6708ca119efec5c3fdcad5dc95d8a28a529aad8debc95872b7e12b3941882f55... Copying index.docker.io/library/alpine@sha256:ba50faba2da27dc9cc11c6f496125fea631b0778bcb29aaf59f904bb36ea0a8a to index.docker.io/library/test-alpine:test-tagsha256-ba50faba2da27dc9cc11c6f496125fea631b0778bcb29aaf59f904bb36ea0a8a... Copying index.docker.io/library/alpine@sha256:8603c585662f0dcd519f4838a40ea3ef98542466848021ffd3c7b7979896362a to index.docker.io/library/test-alpine:test-tagsha256-8603c585662f0dcd519f4838a40ea3ef98542466848021ffd3c7b7979896362a... Copying index.docker.io/library/alpine@sha256:1aee90cdbda4ad57477d7481c68b64ad16e03f2ed23e200f719a22bfc55407be to index.docker.io/library/test-alpine:test-tagsha256-1aee90cdbda4ad57477d7481c68b64ad16e03f2ed23e200f719a22bfc55407be... Copying index.docker.io/library/alpine@sha256:4451fbe20381b2a23da80f7a6f68f30f3ff0ff2f4a4a074505a52bd46423fb39 to index.docker.io/library/test-alpine:test-tagsha256-4451fbe20381b2a23da80f7a6f68f30f3ff0ff2f4a4a074505a52bd46423fb39... Copying index.docker.io/library/alpine@sha256:37480ae6d5242e16a2f59464deed2018531936746a1a3928df39b4ce5dab6b4c to index.docker.io/library/test-alpine:test-tagsha256-37480ae6d5242e16a2f59464deed2018531936746a1a3928df39b4ce5dab6b4c... Copying index.docker.io/library/alpine@sha256:e56e90d77a05614cba94ec4c791282e108f3eac66d697781a79f9c0ccf2f6804 to index.docker.io/library/test-alpine:test-tagsha256-e56e90d77a05614cba94ec4c791282e108f3eac66d697781a79f9c0ccf2f6804... Copying index.docker.io/library/alpine@sha256:12fab14f7a43d3fabe0a4047c9b8b2de354608c1421ab7df6e265508f67a7c74 to index.docker.io/library/test-alpine:test-tagsha256-12fab14f7a43d3fabe0a4047c9b8b2de354608c1421ab7df6e265508f67a7c74... --- PASS: TestCopyAttachmentTagPrefix (3.71s) === RUN TestCopyPlatformOpt Copying index.docker.io/library/alpine@sha256:c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d to index.docker.io/library/test-alpine:sha256-c26612752c78b18faacd63c7d50f4592c2e7b0f25e0e20e82bd74e465c57ab0d... --- PASS: TestCopyPlatformOpt (1.18s) === RUN TestParseOnlyOpt --sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--sig-only is deprecated, use --only=sig instead--- PASS: TestParseOnlyOpt (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/copy 4.955s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/debug [no test files] === RUN TestGetImagesFromDockerfile === RUN TestGetImagesFromDockerfile/plain === RUN TestGetImagesFromDockerfile/tag === RUN TestGetImagesFromDockerfile/tag_with_as === RUN TestGetImagesFromDockerfile/digest === RUN TestGetImagesFromDockerfile/fancy-from === RUN TestGetImagesFromDockerfile/multistage === RUN TestGetImagesFromDockerfile/with-arg === RUN TestGetImagesFromDockerfile/with-value-from-arg === RUN TestGetImagesFromDockerfile/with-value-from-env === RUN TestGetImagesFromDockerfile/with-multiple-values-from-env === RUN TestGetImagesFromDockerfile/with-value-from-arg-from-env === RUN TestGetImagesFromDockerfile/image-in-copy === RUN TestGetImagesFromDockerfile/image-in-copy-with-env === RUN TestGetImagesFromDockerfile/copy-dont-include-prepare-stage-as-images === RUN TestGetImagesFromDockerfile/from-references-previous-stage - stage reference ignored: base_image === RUN TestGetImagesFromDockerfile/gauntlet --- PASS: TestGetImagesFromDockerfile (0.00s) --- PASS: TestGetImagesFromDockerfile/plain (0.00s) --- PASS: TestGetImagesFromDockerfile/tag (0.00s) --- PASS: TestGetImagesFromDockerfile/tag_with_as (0.00s) --- PASS: TestGetImagesFromDockerfile/digest (0.00s) --- PASS: TestGetImagesFromDockerfile/fancy-from (0.00s) --- PASS: TestGetImagesFromDockerfile/multistage (0.00s) --- PASS: TestGetImagesFromDockerfile/with-arg (0.00s) --- PASS: TestGetImagesFromDockerfile/with-value-from-arg (0.00s) --- PASS: TestGetImagesFromDockerfile/with-value-from-env (0.00s) --- PASS: TestGetImagesFromDockerfile/with-multiple-values-from-env (0.00s) --- PASS: TestGetImagesFromDockerfile/with-value-from-arg-from-env (0.00s) --- PASS: TestGetImagesFromDockerfile/image-in-copy (0.00s) --- PASS: TestGetImagesFromDockerfile/image-in-copy-with-env (0.00s) --- PASS: TestGetImagesFromDockerfile/copy-dont-include-prepare-stage-as-images (0.00s) --- PASS: TestGetImagesFromDockerfile/from-references-previous-stage (0.00s) --- PASS: TestGetImagesFromDockerfile/gauntlet (0.00s) === RUN TestGetImagesFromDockerfileInvalidFromLines === RUN TestGetImagesFromDockerfileInvalidFromLines/unresolvable-build-arg === RUN TestGetImagesFromDockerfileInvalidFromLines/missing-stage-name-after-as --- PASS: TestGetImagesFromDockerfileInvalidFromLines (0.00s) --- PASS: TestGetImagesFromDockerfileInvalidFromLines/unresolvable-build-arg (0.00s) --- PASS: TestGetImagesFromDockerfileInvalidFromLines/missing-stage-name-after-as (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/dockerfile 0.076s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/download [no test files] === RUN TestNoDeps === RUN TestNoDeps/github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio --- PASS: TestNoDeps (0.23s) --- PASS: TestNoDeps/github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio (0.23s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio 0.237s === RUN TestReadPasswordFn_env --- PASS: TestReadPasswordFn_env (0.00s) === RUN TestReadPasswordFn_envEmptyVal --- PASS: TestReadPasswordFn_envEmptyVal (0.00s) === RUN TestGenerationOfKeys Private key written to my-test.key Public key written to my-test.pub generate_key_pair_test.go:76: key generation for key my-test.key succeeded generate_key_pair_test.go:76: key generation for key my-test.pub succeeded generate_key_pair_test.go:83: Removing keyfile my-test.pub... generate_key_pair_test.go:85: Removed keyfile my-test.pub generate_key_pair_test.go:83: Removing keyfile my-test.key... generate_key_pair_test.go:85: Removed keyfile my-test.key --- PASS: TestGenerationOfKeys (0.26s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/generate 0.299s === RUN TestReadPasswordFn_env --- PASS: TestReadPasswordFn_env (0.00s) === RUN TestReadPasswordFn_envEmptyVal --- PASS: TestReadPasswordFn_envEmptyVal (0.00s) === RUN TestImportOfKeys Private key written to my-test.key Public key written to my-test.pub import_key_pair_test.go:115: key generation for key my-private-key.pem succeeded import_key_pair_test.go:115: key generation for key my-test.key succeeded import_key_pair_test.go:115: key generation for key my-test.pub succeeded import_key_pair_test.go:122: Removing keyfile my-test.pub... import_key_pair_test.go:124: Removed keyfile my-test.pub import_key_pair_test.go:122: Removing keyfile my-test.key... import_key_pair_test.go:124: Removed keyfile my-test.key import_key_pair_test.go:122: Removing keyfile my-private-key.pem... import_key_pair_test.go:124: Removed keyfile my-private-key.pem --- PASS: TestImportOfKeys (6.59s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/importkeypair 6.631s === RUN TestDoInitialize === RUN TestDoInitialize/tuf_v2_with_trusted_root_and_signing_config === RUN TestDoInitialize/tuf_v1 === RUN TestDoInitialize/invalid_root_-_should_not_try_to_use_embedded --- PASS: TestDoInitialize (0.09s) --- PASS: TestDoInitialize/tuf_v2_with_trusted_root_and_signing_config (0.05s) --- PASS: TestDoInitialize/tuf_v1 (0.04s) --- PASS: TestDoInitialize/invalid_root_-_should_not_try_to_use_embedded (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/initialize 0.145s === RUN TestGetImagesFromYamlManifest === RUN TestGetImagesFromYamlManifest/single_image === RUN TestGetImagesFromYamlManifest/initialize_and_container_images === RUN TestGetImagesFromYamlManifest/daemonsets === RUN TestGetImagesFromYamlManifest/jobs === RUN TestGetImagesFromYamlManifest/cronjobs === RUN TestGetImagesFromYamlManifest/multi_image === RUN TestGetImagesFromYamlManifest/multiple_resources_and_images_within_a_document === RUN TestGetImagesFromYamlManifest/no_images_found === RUN TestGetImagesFromYamlManifest/custom_type_single_image --- PASS: TestGetImagesFromYamlManifest (0.01s) --- PASS: TestGetImagesFromYamlManifest/single_image (0.00s) --- PASS: TestGetImagesFromYamlManifest/initialize_and_container_images (0.00s) --- PASS: TestGetImagesFromYamlManifest/daemonsets (0.00s) --- PASS: TestGetImagesFromYamlManifest/jobs (0.00s) --- PASS: TestGetImagesFromYamlManifest/cronjobs (0.00s) --- PASS: TestGetImagesFromYamlManifest/multi_image (0.00s) --- PASS: TestGetImagesFromYamlManifest/multiple_resources_and_images_within_a_document (0.00s) --- PASS: TestGetImagesFromYamlManifest/no_images_found (0.00s) --- PASS: TestGetImagesFromYamlManifest/custom_type_single_image (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/manifest 0.065s === RUN TestAnnotationOptions_AnnotationsMap === RUN TestAnnotationOptions_AnnotationsMap/nil === RUN TestAnnotationOptions_AnnotationsMap/valid_key === RUN TestAnnotationOptions_AnnotationsMap/value_containing_equals_sign === RUN TestAnnotationOptions_AnnotationsMap/base64_value_with_padding === RUN TestAnnotationOptions_AnnotationsMap/invalid_key --- PASS: TestAnnotationOptions_AnnotationsMap (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/nil (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/valid_key (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/value_containing_equals_sign (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/base64_value_with_padding (0.00s) --- PASS: TestAnnotationOptions_AnnotationsMap/invalid_key (0.00s) === RUN TestOneOf === RUN TestOneOf/3/3 === RUN TestOneOf/2/3 === RUN TestOneOf/1/3 === RUN TestOneOf/0/1 === RUN TestOneOf/1/1 === RUN TestOneOf/structs === RUN TestOneOf/struct === RUN TestOneOf/pointers === RUN TestOneOf/pointer --- PASS: TestOneOf (0.00s) --- PASS: TestOneOf/3/3 (0.00s) --- PASS: TestOneOf/2/3 (0.00s) --- PASS: TestOneOf/1/3 (0.00s) --- PASS: TestOneOf/0/1 (0.00s) --- PASS: TestOneOf/1/1 (0.00s) --- PASS: TestOneOf/structs (0.00s) --- PASS: TestOneOf/struct (0.00s) --- PASS: TestOneOf/pointers (0.00s) --- PASS: TestOneOf/pointer (0.00s) === RUN TestGetTLSConfig === RUN TestGetTLSConfig/Valid_CA_Cert,_Client_Cert_and_Key,_Server_Name,_Allow_Insecure === RUN TestGetTLSConfig/Wrong_key_for_client_cert === RUN TestGetTLSConfig/Wrong_ca_key === RUN TestGetTLSConfig/Invalid_CA_path --- PASS: TestGetTLSConfig (0.49s) --- PASS: TestGetTLSConfig/Valid_CA_Cert,_Client_Cert_and_Key,_Server_Name,_Allow_Insecure (0.00s) --- PASS: TestGetTLSConfig/Wrong_key_for_client_cert (0.00s) --- PASS: TestGetTLSConfig/Wrong_ca_key (0.00s) --- PASS: TestGetTLSConfig/Invalid_CA_path (0.00s) === RUN TestFlagToEnv === RUN TestFlagToEnv/rekor-url === RUN TestFlagToEnv/certificate === RUN TestFlagToEnv/k8s-keychain === RUN TestFlagToEnv/output-file === RUN TestFlagToEnv/sbom --- PASS: TestFlagToEnv (0.00s) --- PASS: TestFlagToEnv/rekor-url (0.00s) --- PASS: TestFlagToEnv/certificate (0.00s) --- PASS: TestFlagToEnv/k8s-keychain (0.00s) --- PASS: TestFlagToEnv/output-file (0.00s) --- PASS: TestFlagToEnv/sbom (0.00s) === RUN TestSignatureDigestOptionsHashAlgorithm === RUN TestSignatureDigestOptionsHashAlgorithm/unset_defers_to_caller-specific_default === RUN TestSignatureDigestOptionsHashAlgorithm/sha256 === RUN TestSignatureDigestOptionsHashAlgorithm/sha512 === RUN TestSignatureDigestOptionsHashAlgorithm/case_and_whitespace_insensitive === RUN TestSignatureDigestOptionsHashAlgorithm/unknown_algorithm_errors --- PASS: TestSignatureDigestOptionsHashAlgorithm (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/unset_defers_to_caller-specific_default (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/sha256 (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/sha512 (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/case_and_whitespace_insensitive (0.00s) --- PASS: TestSignatureDigestOptionsHashAlgorithm/unknown_algorithm_errors (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/options 0.556s === RUN TestPublicKeyLocation Public key written to cosign.pub --- PASS: TestPublicKeyLocation (0.52s) === RUN TestPublicKeyBadPrivateKey --- PASS: TestPublicKeyBadPrivateKey (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/publickey 0.562s === RUN TestNewClient === PAUSE TestNewClient === CONT TestNewClient --- PASS: TestNewClient (0.02s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/rekor 0.087s === RUN TestSignBlobCmd Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/bundle.sigstore.json MEUCIQD7NWEukACfUtMik6au3B509hWrRJzas1SAss1YuAhD/gIgQhDvdhSd2X6GrOaR1kUkzmqLZohLtazfC9Tm4gkSPTM= Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/bundle.sigstore.json Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/bundle.sigstore.json Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/bundle.sigstore.json ixpM31yFwKVkDsRoiV+Ax5yehCCeMgNGeVJZ9EeXaeVut+r8DlY/y9p7YG+bh/BTXZke9gbXt8WFYqAVvKXcBg== Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/foo.txt Signing artifact... Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd2139860255/001/bundle.sigstore.json ixpM31yFwKVkDsRoiV+Ax5yehCCeMgNGeVJZ9EeXaeVut+r8DlY/y9p7YG+bh/BTXZke9gbXt8WFYqAVvKXcBg== --- PASS: TestSignBlobCmd (1.97s) === RUN TestSignBlobCmd_LegacyBundleNoCert Using payload from: /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd_LegacyBundleNoCert3814116219/001/foo.txt Wrote bundle to file /home/buildozer/aports/community/cosign/tmp/TestSignBlobCmd_LegacyBundleNoCert3814116219/001/legacy-bundle.json MEUCIQDA7Efoh8Ix/hLeN5wUXx3g/GDKJVOzpv9KNcfTcPiagwIgV5a680yEOHVwbzpfzyIUYGBoRaHnvirn0oF6ocjgl/M= Signing artifact... --- PASS: TestSignBlobCmd_LegacyBundleNoCert (0.42s) === RUN TestSignCmdLocalKeyAndSk --- PASS: TestSignCmdLocalKeyAndSk (0.00s) === RUN TestInTotoStatementHasPredicate --- PASS: TestInTotoStatementHasPredicate (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/sign 2.468s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/sign/privacy [no test files] === RUN Test_signerFromKeyRefSuccess --- PASS: Test_signerFromKeyRefSuccess (0.46s) === RUN Test_signerFromKeyRefFailure --- PASS: Test_signerFromKeyRefFailure (1.23s) === RUN Test_signerFromKeyRefFailureEmptyChainFile --- PASS: Test_signerFromKeyRefFailureEmptyChainFile (0.42s) === RUN Test_ParseOCIReference --- PASS: Test_ParseOCIReference (0.00s) === RUN TestConfirmPrivacyStatement === RUN TestConfirmPrivacyStatement/custom_Rekor_URL_with_key_skips_public_instance_statement === RUN TestConfirmPrivacyStatement/region-specific_public_good_Rekor_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/staging_public_good_Rekor_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/cleared_public_good_Rekor_URL_with_key_skips_statement === RUN TestConfirmPrivacyStatement/keyless_with_public_good_Fulcio_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/keyless_with_staging_public_good_Fulcio_URL_shows_public_instance_statement === RUN TestConfirmPrivacyStatement/keyless_with_custom_Fulcio_URL_skips_public_instance_statement === RUN TestConfirmPrivacyStatement/public_good_Fulcio_URL_with_key_and_without_Rekor_URL_skips_statement === RUN TestConfirmPrivacyStatement/nil_signing_config_skips_public_instance_statement --- PASS: TestConfirmPrivacyStatement (0.00s) --- PASS: TestConfirmPrivacyStatement/custom_Rekor_URL_with_key_skips_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/region-specific_public_good_Rekor_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/staging_public_good_Rekor_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/cleared_public_good_Rekor_URL_with_key_skips_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/keyless_with_public_good_Fulcio_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/keyless_with_staging_public_good_Fulcio_URL_shows_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/keyless_with_custom_Fulcio_URL_skips_public_instance_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/public_good_Fulcio_URL_with_key_and_without_Rekor_URL_skips_statement (0.00s) --- PASS: TestConfirmPrivacyStatement/nil_signing_config_skips_public_instance_statement (0.00s) === RUN TestShouldUploadToTlog === RUN TestShouldUploadToTlog/tlogUpload_false_returns_false === RUN TestShouldUploadToTlog/signing_config_with_no_Rekor_URLs_returns_false === RUN TestShouldUploadToTlog/tlogUpload_true_with_Rekor_URL_returns_true === RUN TestShouldUploadToTlog/nil_signing_config_with_tlogUpload_true_returns_true --- PASS: TestShouldUploadToTlog (0.00s) --- PASS: TestShouldUploadToTlog/tlogUpload_false_returns_false (0.00s) --- PASS: TestShouldUploadToTlog/signing_config_with_no_Rekor_URLs_returns_false (0.00s) --- PASS: TestShouldUploadToTlog/tlogUpload_true_with_Rekor_URL_returns_true (0.00s) --- PASS: TestShouldUploadToTlog/nil_signing_config_with_tlogUpload_true_returns_true (0.00s) === RUN TestHasPublicGoodRekorURL === RUN TestHasPublicGoodRekorURL/nil_signing_config_returns_false === RUN TestHasPublicGoodRekorURL/empty_signing_config_returns_false === RUN TestHasPublicGoodRekorURL/custom_Rekor_URL_returns_false === RUN TestHasPublicGoodRekorURL/public_good_Rekor_URL_returns_true === RUN TestHasPublicGoodRekorURL/signing_config_with_cleared_Rekor_URLs_returns_false --- PASS: TestHasPublicGoodRekorURL (0.00s) --- PASS: TestHasPublicGoodRekorURL/nil_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodRekorURL/empty_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodRekorURL/custom_Rekor_URL_returns_false (0.00s) --- PASS: TestHasPublicGoodRekorURL/public_good_Rekor_URL_returns_true (0.00s) --- PASS: TestHasPublicGoodRekorURL/signing_config_with_cleared_Rekor_URLs_returns_false (0.00s) === RUN TestHasPublicGoodFulcioURL === RUN TestHasPublicGoodFulcioURL/nil_signing_config_returns_false === RUN TestHasPublicGoodFulcioURL/empty_signing_config_returns_false === RUN TestHasPublicGoodFulcioURL/custom_Fulcio_URL_returns_false === RUN TestHasPublicGoodFulcioURL/public_good_Fulcio_URL_returns_true === RUN TestHasPublicGoodFulcioURL/staging_public_good_Fulcio_URL_returns_true === RUN TestHasPublicGoodFulcioURL/signing_config_with_cleared_Fulcio_URLs_returns_false --- PASS: TestHasPublicGoodFulcioURL (0.00s) --- PASS: TestHasPublicGoodFulcioURL/nil_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodFulcioURL/empty_signing_config_returns_false (0.00s) --- PASS: TestHasPublicGoodFulcioURL/custom_Fulcio_URL_returns_false (0.00s) --- PASS: TestHasPublicGoodFulcioURL/public_good_Fulcio_URL_returns_true (0.00s) --- PASS: TestHasPublicGoodFulcioURL/staging_public_good_Fulcio_URL_returns_true (0.00s) --- PASS: TestHasPublicGoodFulcioURL/signing_config_with_cleared_Fulcio_URLs_returns_false (0.00s) === RUN TestIsPublicGoodURL === RUN TestIsPublicGoodURL/empty_is_not_public_good === RUN TestIsPublicGoodURL/default_Rekor_production_URL === RUN TestIsPublicGoodURL/default_Fulcio_production_URL === RUN TestIsPublicGoodURL/region-specific_production_URL === RUN TestIsPublicGoodURL/staging_Rekor_URL === RUN TestIsPublicGoodURL/staging_Fulcio_URL === RUN TestIsPublicGoodURL/region-specific_staging_URL === RUN TestIsPublicGoodURL/custom_self-hosted_URL === RUN TestIsPublicGoodURL/uppercase_hostname_is_still_public_good === RUN TestIsPublicGoodURL/lookalike_domain_is_not_public_good === RUN TestIsPublicGoodURL/lookalike_suffix_without_dot_boundary_is_not_public_good === RUN TestIsPublicGoodURL/unparseable_URL --- PASS: TestIsPublicGoodURL (0.00s) --- PASS: TestIsPublicGoodURL/empty_is_not_public_good (0.00s) --- PASS: TestIsPublicGoodURL/default_Rekor_production_URL (0.00s) --- PASS: TestIsPublicGoodURL/default_Fulcio_production_URL (0.00s) --- PASS: TestIsPublicGoodURL/region-specific_production_URL (0.00s) --- PASS: TestIsPublicGoodURL/staging_Rekor_URL (0.00s) --- PASS: TestIsPublicGoodURL/staging_Fulcio_URL (0.00s) --- PASS: TestIsPublicGoodURL/region-specific_staging_URL (0.00s) --- PASS: TestIsPublicGoodURL/custom_self-hosted_URL (0.00s) --- PASS: TestIsPublicGoodURL/uppercase_hostname_is_still_public_good (0.00s) --- PASS: TestIsPublicGoodURL/lookalike_domain_is_not_public_good (0.00s) --- PASS: TestIsPublicGoodURL/lookalike_suffix_without_dot_boundary_is_not_public_good (0.00s) --- PASS: TestIsPublicGoodURL/unparseable_URL (0.00s) === RUN TestNewLegacyBundleFromProtoBundleComponents === RUN TestNewLegacyBundleFromProtoBundleComponents/without_certificates_leaves_cert_field_empty === RUN TestNewLegacyBundleFromProtoBundleComponents/with_certificates_populates_cert_field --- PASS: TestNewLegacyBundleFromProtoBundleComponents (0.00s) --- PASS: TestNewLegacyBundleFromProtoBundleComponents/without_certificates_leaves_cert_field_empty (0.00s) --- PASS: TestNewLegacyBundleFromProtoBundleComponents/with_certificates_populates_cert_field (0.00s) === RUN TestValidateSigningOptions === RUN TestValidateSigningOptions/valid_default_online_signing_flags === RUN TestValidateSigningOptions/valid_signing_config_from_TUF === RUN TestValidateSigningOptions/valid_signing_config_from_file === RUN TestValidateSigningOptions/use_signing_config_with_custom_rekor_URL === RUN TestValidateSigningOptions/use_signing_config_with_custom_fulcio_URL === RUN TestValidateSigningOptions/use_signing_config_with_custom_OIDC_issuer === RUN TestValidateSigningOptions/use_signing_config_with_custom_TSA_server_URL === RUN TestValidateSigningOptions/signing_config_path_with_custom_service_URLs === RUN TestValidateSigningOptions/use_signing_config_with_tlog_upload_false === RUN TestValidateSigningOptions/signing_config_path_with_tlog_upload_false === RUN TestValidateSigningOptions/missing_bundle_output_with_use_signing_config === RUN TestValidateSigningOptions/missing_bundle_output_with_signing_config_path === RUN TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_use_signing_config === RUN TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_signing_config_path === RUN TestValidateSigningOptions/custom_service_URLs_without_signing_config_is_valid === RUN TestValidateSigningOptions/tlog_upload_false_without_signing_config_is_valid === RUN TestValidateSigningOptions/deprecated_output-signature_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output-attestation_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output-certificate_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output-payload_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_rfc3161-timestamp_warning_with_new_bundle_format === RUN TestValidateSigningOptions/deprecated_output_warning_with_new_bundle_format --- PASS: TestValidateSigningOptions (0.00s) --- PASS: TestValidateSigningOptions/valid_default_online_signing_flags (0.00s) --- PASS: TestValidateSigningOptions/valid_signing_config_from_TUF (0.00s) --- PASS: TestValidateSigningOptions/valid_signing_config_from_file (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_rekor_URL (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_fulcio_URL (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_OIDC_issuer (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_custom_TSA_server_URL (0.00s) --- PASS: TestValidateSigningOptions/signing_config_path_with_custom_service_URLs (0.00s) --- PASS: TestValidateSigningOptions/use_signing_config_with_tlog_upload_false (0.00s) --- PASS: TestValidateSigningOptions/signing_config_path_with_tlog_upload_false (0.00s) --- PASS: TestValidateSigningOptions/missing_bundle_output_with_use_signing_config (0.00s) --- PASS: TestValidateSigningOptions/missing_bundle_output_with_signing_config_path (0.00s) --- PASS: TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_use_signing_config (0.00s) --- PASS: TestValidateSigningOptions/legacy_bundle_format_with_explicit_bundle_path_is_valid_with_signing_config_path (0.00s) --- PASS: TestValidateSigningOptions/custom_service_URLs_without_signing_config_is_valid (0.00s) --- PASS: TestValidateSigningOptions/tlog_upload_false_without_signing_config_is_valid (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-signature_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-attestation_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-certificate_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output-payload_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_rfc3161-timestamp_warning_with_new_bundle_format (0.00s) --- PASS: TestValidateSigningOptions/deprecated_output_warning_with_new_bundle_format (0.00s) === RUN TestLoadSigningConfigAndTrustedMaterial === RUN TestLoadSigningConfigAndTrustedMaterial/empty_signing_config_file_bypasses_TUF_and_leaves_TrustedMaterial_nil === RUN TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_explicit_trusted_root_loads_TrustedMaterial_without_contacting_TUF === RUN TestLoadSigningConfigAndTrustedMaterial/invalid_signing_config_path_fails_fast_without_contacting_TUF === RUN TestLoadSigningConfigAndTrustedMaterial/TUF_trusted_root_error_logs_warning_and_continues_without_trusted_root === RUN TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_no_signing_config_and_key_ref_leaves_both_nil_and_bypasses_TUF === RUN TestLoadSigningConfigAndTrustedMaterial/signing_config_with_services_triggers_TUF_fetch === RUN TestLoadSigningConfigAndTrustedMaterial/invalid_trusted_root_path_returns_error === RUN TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_true_fails_when_TUF_signing_config_cannot_be_retrieved --- PASS: TestLoadSigningConfigAndTrustedMaterial (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/empty_signing_config_file_bypasses_TUF_and_leaves_TrustedMaterial_nil (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_explicit_trusted_root_loads_TrustedMaterial_without_contacting_TUF (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/invalid_signing_config_path_fails_fast_without_contacting_TUF (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/TUF_trusted_root_error_logs_warning_and_continues_without_trusted_root (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_false_with_no_signing_config_and_key_ref_leaves_both_nil_and_bypasses_TUF (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/signing_config_with_services_triggers_TUF_fetch (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/invalid_trusted_root_path_returns_error (0.00s) --- PASS: TestLoadSigningConfigAndTrustedMaterial/useSigningConfig_true_fails_when_TUF_signing_config_cannot_be_retrieved (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/signcommon 2.188s === RUN TestCreateCmd === RUN TestCreateCmd/missing_url === RUN TestCreateCmd/missing_api-version === RUN TestCreateCmd/missing_start-time === RUN TestCreateCmd/missing_operator === RUN TestCreateCmd/base-config_with_oidc_override --- PASS: TestCreateCmd (0.08s) --- PASS: TestCreateCmd/missing_url (0.00s) --- PASS: TestCreateCmd/missing_api-version (0.00s) --- PASS: TestCreateCmd/missing_start-time (0.00s) --- PASS: TestCreateCmd/missing_operator (0.00s) --- PASS: TestCreateCmd/base-config_with_oidc_override (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/signingconfig 0.097s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/templates [no test files] ? github.com/sigstore/cosign/v3/cmd/cosign/cli/templates/term [no test files] ? github.com/sigstore/cosign/v3/cmd/cosign/cli/triangulate [no test files] === RUN TestCreateCmdDeprecatedFlags --- PASS: TestCreateCmdDeprecatedFlags (0.04s) === RUN TestCreateCmd === RUN TestCreateCmd/fulcio_missing_url === RUN TestCreateCmd/fulcio_missing_certificate-chain === RUN TestCreateCmd/rekor_missing_url === RUN TestCreateCmd/rekor_missing_public-key === RUN TestCreateCmd/rekor_missing_start-time === RUN TestCreateCmd/tsa_missing_url === RUN TestCreateCmd/tsa_missing_certificate-chain === RUN TestCreateCmd/ctfe_missing_url === RUN TestCreateCmd/ctfe_missing_public-key === RUN TestCreateCmd/ctfe_missing_start-time --- PASS: TestCreateCmd (0.03s) --- PASS: TestCreateCmd/fulcio_missing_url (0.00s) --- PASS: TestCreateCmd/fulcio_missing_certificate-chain (0.00s) --- PASS: TestCreateCmd/rekor_missing_url (0.00s) --- PASS: TestCreateCmd/rekor_missing_public-key (0.00s) --- PASS: TestCreateCmd/rekor_missing_start-time (0.00s) --- PASS: TestCreateCmd/tsa_missing_url (0.00s) --- PASS: TestCreateCmd/tsa_missing_certificate-chain (0.00s) --- PASS: TestCreateCmd/ctfe_missing_url (0.00s) --- PASS: TestCreateCmd/ctfe_missing_public-key (0.00s) --- PASS: TestCreateCmd/ctfe_missing_start-time (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/trustedroot 0.083s ? github.com/sigstore/cosign/v3/cmd/cosign/cli/upload [no test files] === RUN TestSetTrustedMaterialNewBundleTUFError --- PASS: TestSetTrustedMaterialNewBundleTUFError (0.00s) === RUN TestSetTrustedMaterialLegacyTUFFallback --- PASS: TestSetTrustedMaterialLegacyTUFFallback (0.00s) === RUN TestVerifyAttestationMissingSubject --- PASS: TestVerifyAttestationMissingSubject (0.00s) === RUN TestVerifyAttestationMissingIssuer --- PASS: TestVerifyAttestationMissingIssuer (0.00s) === RUN TestVerifyAttestationMutuallyExclusiveFlags === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp === RUN TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_security_key --- PASS: TestVerifyAttestationMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyAttestationMutuallyExclusiveFlags/both_key_and_security_key (0.00s) === RUN TestVerifyAttestationSkWithoutIdentities --- PASS: TestVerifyAttestationSkWithoutIdentities (0.19s) === RUN TestVerifyBlobAttestation === RUN TestVerifyBlobAttestation/verify_a_slsaprovenance_predicate Verified OK === RUN TestVerifyBlobAttestation/fail_with_incorrect_predicate === RUN TestVerifyBlobAttestation/fail_with_incorrect_blob === RUN TestVerifyBlobAttestation/dsse_envelope_predicate_has_no_subject === RUN TestVerifyBlobAttestation/dsse_envelope_predicate_missing_sha256_digest === RUN TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid Verified OK === RUN TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid,_but_we_are_looking_for_different_predicatetype === RUN TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_none_has_correct_sha256_digest === RUN TestVerifyBlobAttestation/override_file_size_limit === RUN TestVerifyBlobAttestation/verify_new_bundle_with_public_key Verified OK === RUN TestVerifyBlobAttestation/verify_new_bundle_with_public_key_-_bad_sig === RUN TestVerifyBlobAttestation/verify_with_digest_instead_of_blob Verified OK --- PASS: TestVerifyBlobAttestation (0.01s) --- PASS: TestVerifyBlobAttestation/verify_a_slsaprovenance_predicate (0.00s) --- PASS: TestVerifyBlobAttestation/fail_with_incorrect_predicate (0.00s) --- PASS: TestVerifyBlobAttestation/fail_with_incorrect_blob (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_predicate_has_no_subject (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_predicate_missing_sha256_digest (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_one_is_valid,_but_we_are_looking_for_different_predicatetype (0.00s) --- PASS: TestVerifyBlobAttestation/dsse_envelope_has_multiple_subjects,_none_has_correct_sha256_digest (0.00s) --- PASS: TestVerifyBlobAttestation/override_file_size_limit (0.00s) --- PASS: TestVerifyBlobAttestation/verify_new_bundle_with_public_key (0.00s) --- PASS: TestVerifyBlobAttestation/verify_new_bundle_with_public_key_-_bad_sig (0.00s) --- PASS: TestVerifyBlobAttestation/verify_with_digest_instead_of_blob (0.00s) === RUN TestVerifyBlobAttestationNoCheckClaims === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_no_path Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_another_blob_path Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_a_bundle_with_another_blob_path Verified OK === RUN TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_/dev/null Verified OK --- PASS: TestVerifyBlobAttestationNoCheckClaims (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_no_path (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_another_blob_path (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_a_bundle_with_another_blob_path (0.00s) --- PASS: TestVerifyBlobAttestationNoCheckClaims/verify_a_predicate_with_/dev/null (0.00s) === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp === RUN TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_security_key --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyBlobAttestationMutuallyExclusiveFlags/both_key_and_security_key (0.00s) === RUN TestVerifyBlobAttestation_MalformedPayloads === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Standalone_Signature verify_blob_attestation_test.go:434: [missing predicate type Standalone] PASS: returned error: converting to consumable policy validation: missing predicate type === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Old_Bundle_Format verify_blob_attestation_test.go:460: [missing predicate type Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/New_Bundle_Format verify_blob_attestation_test.go:492: [missing predicate type New Bundle] PASS: returned error: converting to consumable policy validation: missing predicate type === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Standalone_Signature verify_blob_attestation_test.go:434: [missing payload field in json Standalone] PASS: returned error: converting to consumable policy validation: could not find payload in payload data === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Old_Bundle_Format verify_blob_attestation_test.go:460: [missing payload field in json Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/New_Bundle_Format verify_blob_attestation_test.go:492: [missing payload field in json New Bundle] PASS: returned error: failed to fetch signature content: validation error: invalid attestation: missing valid envelope === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Standalone_Signature verify_blob_attestation_test.go:434: [payload is valid base64 but inner is not valid in-toto statement Standalone] PASS: returned error: converting to consumable policy validation: unmarshal in-toto statement: invalid character 'o' in literal null (expecting 'u') === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Old_Bundle_Format verify_blob_attestation_test.go:460: [payload is valid base64 but inner is not valid in-toto statement Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/New_Bundle_Format verify_blob_attestation_test.go:492: [payload is valid base64 but inner is not valid in-toto statement New Bundle] PASS: returned error: failed to fetch envelope statement: validation error: invalid attestation: decoding json === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02 === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Standalone_Signature verify_blob_attestation_test.go:434: [unmarshaling ProvenanceStatementSLSA02 Standalone] PASS: returned error: converting to consumable policy validation: unmarshaling ProvenanceStatementSLSA02): json: cannot unmarshal array into Go struct field ProvenanceStatementSLSA02.predicate.builder of type common.ProvenanceBuilder === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Old_Bundle_Format verify_blob_attestation_test.go:460: [unmarshaling ProvenanceStatementSLSA02 Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/New_Bundle_Format verify_blob_attestation_test.go:492: [unmarshaling ProvenanceStatementSLSA02 New Bundle] PASS: returned error: converting to consumable policy validation: unmarshaling ProvenanceStatementSLSA02): json: cannot unmarshal array into Go struct field ProvenanceStatementSLSA02.predicate.builder of type common.ProvenanceBuilder === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Standalone_Signature verify_blob_attestation_test.go:434: [unmarshaling CosignVulnStatement Standalone] PASS: returned error: converting to consumable policy validation: unmarshaling CosignVulnStatement: json: cannot unmarshal array into Go struct field CosignVulnStatement.predicate.scanner of type attestation.Scanner === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Old_Bundle_Format verify_blob_attestation_test.go:460: [unmarshaling CosignVulnStatement Old Bundle] PASS: returned error: loading verifier certificate from bundle: x509: malformed serial number === RUN TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/New_Bundle_Format verify_blob_attestation_test.go:492: [unmarshaling CosignVulnStatement New Bundle] PASS: returned error: converting to consumable policy validation: unmarshaling CosignVulnStatement: json: cannot unmarshal array into Go struct field CosignVulnStatement.predicate.scanner of type attestation.Scanner --- PASS: TestVerifyBlobAttestation_MalformedPayloads (0.01s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_predicate_type/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/missing_payload_field_in_json/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/payload_is_valid_base64_but_inner_is_not_valid_in-toto_statement/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02 (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_ProvenanceStatementSLSA02/New_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Standalone_Signature (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/Old_Bundle_Format (0.00s) --- PASS: TestVerifyBlobAttestation_MalformedPayloads/unmarshaling_CosignVulnStatement/New_Bundle_Format (0.00s) === RUN TestParseBlobHashAlgorithm === RUN TestParseBlobHashAlgorithm/sha256 === RUN TestParseBlobHashAlgorithm/sha384 === RUN TestParseBlobHashAlgorithm/sha512 === RUN TestParseBlobHashAlgorithm/sha1 === RUN TestParseBlobHashAlgorithm/md5 === RUN TestParseBlobHashAlgorithm/#00 === RUN TestParseBlobHashAlgorithm/SHA256 --- PASS: TestParseBlobHashAlgorithm (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha256 (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha384 (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha512 (0.00s) --- PASS: TestParseBlobHashAlgorithm/sha1 (0.00s) --- PASS: TestParseBlobHashAlgorithm/md5 (0.00s) --- PASS: TestParseBlobHashAlgorithm/#00 (0.00s) --- PASS: TestParseBlobHashAlgorithm/SHA256 (0.00s) === RUN TestVerifyBlobAttestationSkWithoutIdentities --- PASS: TestVerifyBlobAttestationSkWithoutIdentities (0.00s) === RUN TestVerifyBlobAttestationLegacyBundlePublicKey === RUN TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_public_key_in_cert_field_fails === RUN TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_empty_cert_field_succeeds_when_key_is_provided_via_KeyRef Verified OK --- PASS: TestVerifyBlobAttestationLegacyBundlePublicKey (0.00s) --- PASS: TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_public_key_in_cert_field_fails (0.00s) --- PASS: TestVerifyBlobAttestationLegacyBundlePublicKey/legacy_bundle_with_empty_cert_field_succeeds_when_key_is_provided_via_KeyRef (0.00s) === RUN TestSignaturesRef === RUN TestSignaturesRef/raw_sig === RUN TestSignaturesRef/encoded_sig === RUN TestSignaturesRef/empty_ref --- PASS: TestSignaturesRef (0.00s) --- PASS: TestSignaturesRef/raw_sig (0.00s) --- PASS: TestSignaturesRef/encoded_sig (0.00s) --- PASS: TestSignaturesRef/empty_ref (0.00s) === RUN TestSignaturesBundle --- PASS: TestSignaturesBundle (0.00s) === RUN TestVerifyBlob === RUN TestVerifyBlob/valid_signature_with_public_key Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_no_rekor_fail === RUN TestVerifyBlob/valid_signature_with_public_key_-_rekor_entry_success Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_fails_when_public_key_is_in_cert === RUN TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_succeeds_when_key_is_provided_via_KeyRef Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_bundle_without_rekor_bundle_fails === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_SET === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_cert_mismatch === RUN TestVerifyBlob/valid_signature_with_public_key_and_bundle_cert_derived_from_public_key Verified OK === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_signature_mismatch === RUN TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_msg_&_signature_mismatch === RUN TestVerifyBlob/valid_signature_with_public_key_-_new_bundle Verified OK === RUN TestVerifyBlob/invalid_signature_with_public_key_-_new_bundle === RUN TestVerifyBlob/invalid_signature_with_public_key === RUN TestVerifyBlob/invalid_signature_with_public_key_and_no_Rekor_entry === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_rekor_entry === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_signature_mismatch === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_msg_&_signature_mismatch === RUN TestVerifyBlob/invalid_signature_with_unexpired_certificate_and_no_Rekor_entry,_expect_Rekor === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_and_Rekor_proof Verified OK === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_rekor_entry_found Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_and_no_proof,_expect_Rekor === RUN TestVerifyBlob/valid_signature_with_expired_certificate,_no_Rekor === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_rekor_lookup Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_multiple_rekor_entries Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_integrated_time === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_expiration === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_SET === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle#01 Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_entry === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle,_good_timestamp Verified OK === RUN TestVerifyBlob/valid_signature_with_expired_certificate_-_no_bundle,_good_timestamp Verified OK === RUN TestVerifyBlob/mismatched_signature_with_expired_certificate === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle,_good_timestamp Verified OK === RUN TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_bundle,_good_timestamp Verified OK --- PASS: TestVerifyBlob (0.11s) --- PASS: TestVerifyBlob/valid_signature_with_public_key (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_no_rekor_fail (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_rekor_entry_success (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_fails_when_public_key_is_in_cert (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_good_bundle_provided_succeeds_when_key_is_provided_via_KeyRef (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bundle_without_rekor_bundle_fails (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_SET (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_cert_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_and_bundle_cert_derived_from_public_key (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_bad_bundle_msg_&_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_public_key_-_new_bundle (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_public_key_-_new_bundle (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_public_key (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_public_key_and_no_Rekor_entry (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_rekor_entry (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_bad_bundle_msg_&_signature_mismatch (0.00s) --- PASS: TestVerifyBlob/invalid_signature_with_unexpired_certificate_and_no_Rekor_entry,_expect_Rekor (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_and_Rekor_proof (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_rekor_entry_found (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_and_no_proof,_expect_Rekor (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate,_no_Rekor (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_rekor_lookup (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_multiple_rekor_entries (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_integrated_time (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_expiration (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bundle_with_bad_SET (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle#01 (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_bad_rekor_entry (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_good_bundle,_good_timestamp (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_expired_certificate_-_no_bundle,_good_timestamp (0.00s) --- PASS: TestVerifyBlob/mismatched_signature_with_expired_certificate (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_good_bundle,_good_timestamp (0.00s) --- PASS: TestVerifyBlob/valid_signature_with_unexpired_certificate_-_no_bundle,_good_timestamp (0.00s) === RUN TestVerifyBlobCertMissingSubject --- PASS: TestVerifyBlobCertMissingSubject (0.00s) === RUN TestVerifyBlobMutuallyExclusiveFlags === RUN TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity_regex === RUN TestVerifyBlobMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regex === RUN TestVerifyBlobMutuallyExclusiveFlags/both_key_and_secret_key --- PASS: TestVerifyBlobMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_key_and_cert_identity_regex (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regex (0.00s) --- PASS: TestVerifyBlobMutuallyExclusiveFlags/both_key_and_secret_key (0.00s) === RUN TestVerifyBlobKeyAndCertIdentity --- PASS: TestVerifyBlobKeyAndCertIdentity (0.00s) === RUN TestVerifyBlobSkWithoutIdentities --- PASS: TestVerifyBlobSkWithoutIdentities (0.00s) === RUN TestVerifyBlobWithUnsetHashAlgorithmMatchesKeyDefault Verified OK --- PASS: TestVerifyBlobWithUnsetHashAlgorithmMatchesKeyDefault (0.01s) === RUN TestVerifyBlobCmdWithBundle === RUN TestVerifyBlobCmdWithBundle/Normal_verification Verified OK === RUN TestVerifyBlobCmdWithBundle/Mismatched_cert/sig === RUN TestVerifyBlobCmdWithBundle/Expired_cert === RUN TestVerifyBlobCmdWithBundle/dsse_Attestation Verified OK === RUN TestVerifyBlobCmdWithBundle/intoto_Attestation Verified OK === RUN TestVerifyBlobCmdWithBundle/Invalid_blob_signature === RUN TestVerifyBlobCmdWithBundle/Mismatched_certificate_email === RUN TestVerifyBlobCmdWithBundle/Mismatched_certificate_issuer === RUN TestVerifyBlobCmdWithBundle/Implicit_Fulcio_chain_with_bundle_in_non-experimental_mode Verified OK === RUN TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_rekor_and_timestamp_bundles_in_non-experimental_mode Verified OK === RUN TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_bundle_in_non-experimental_mode Verified OK === RUN TestVerifyBlobCmdWithBundle/Explicit_Fulcio_mismatched_chain_failure === RUN TestVerifyBlobCmdWithBundle/intoto_Attestation_with_keyless Verified OK --- PASS: TestVerifyBlobCmdWithBundle (0.06s) --- PASS: TestVerifyBlobCmdWithBundle/Normal_verification (0.01s) --- PASS: TestVerifyBlobCmdWithBundle/Mismatched_cert/sig (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Expired_cert (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/dsse_Attestation (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/intoto_Attestation (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Invalid_blob_signature (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Mismatched_certificate_email (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Mismatched_certificate_issuer (0.00s) --- PASS: TestVerifyBlobCmdWithBundle/Implicit_Fulcio_chain_with_bundle_in_non-experimental_mode (0.01s) --- PASS: TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_rekor_and_timestamp_bundles_in_non-experimental_mode (0.01s) --- PASS: TestVerifyBlobCmdWithBundle/Explicit_Fulcio_chain_with_bundle_in_non-experimental_mode (0.01s) --- PASS: TestVerifyBlobCmdWithBundle/Explicit_Fulcio_mismatched_chain_failure (0.01s) --- PASS: TestVerifyBlobCmdWithBundle/intoto_Attestation_with_keyless (0.00s) === RUN TestVerifyBlobCmdInvalidRootCA === RUN TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_via_certRef === RUN TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_in_bundle --- PASS: TestVerifyBlobCmdInvalidRootCA (0.01s) --- PASS: TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_via_certRef (0.00s) --- PASS: TestVerifyBlobCmdInvalidRootCA/Invalid_certificate_root_when_specifying_cert_in_bundle (0.00s) === RUN TestPrintVerification --- PASS: TestPrintVerification (0.00s) === RUN TestVerifyCertMissingSubject --- PASS: TestVerifyCertMissingSubject (0.00s) === RUN TestVerifyCertMissingIssuer --- PASS: TestVerifyCertMissingIssuer (0.00s) === RUN TestVerifyMutuallyExclusiveFlags === RUN TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity === RUN TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity_regexp === RUN TestVerifyMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp === RUN TestVerifyMutuallyExclusiveFlags/both_key_and_security_key --- PASS: TestVerifyMutuallyExclusiveFlags (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_key_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_cert_identity_and_cert_identity_regexp (0.00s) --- PASS: TestVerifyMutuallyExclusiveFlags/both_key_and_security_key (0.00s) === RUN TestLoadCertsKeylessVerification === RUN TestLoadCertsKeylessVerification/default_fulcio === RUN TestLoadCertsKeylessVerification/non-existent_SIGSTORE_ROOT_FILE === RUN TestLoadCertsKeylessVerification/good_certchain === RUN TestLoadCertsKeylessVerification/bad_certchain === RUN TestLoadCertsKeylessVerification/roots === RUN TestLoadCertsKeylessVerification/bad_roots === RUN TestLoadCertsKeylessVerification/roots_and_intermediate === RUN TestLoadCertsKeylessVerification/bad_roots_good_intermediate === RUN TestLoadCertsKeylessVerification/good_roots_bad_intermediate --- PASS: TestLoadCertsKeylessVerification (0.19s) --- PASS: TestLoadCertsKeylessVerification/default_fulcio (0.19s) --- PASS: TestLoadCertsKeylessVerification/non-existent_SIGSTORE_ROOT_FILE (0.00s) --- PASS: TestLoadCertsKeylessVerification/good_certchain (0.00s) --- PASS: TestLoadCertsKeylessVerification/bad_certchain (0.00s) --- PASS: TestLoadCertsKeylessVerification/roots (0.00s) --- PASS: TestLoadCertsKeylessVerification/bad_roots (0.00s) --- PASS: TestLoadCertsKeylessVerification/roots_and_intermediate (0.00s) --- PASS: TestLoadCertsKeylessVerification/bad_roots_good_intermediate (0.00s) --- PASS: TestLoadCertsKeylessVerification/good_roots_bad_intermediate (0.00s) === RUN TestTransformOutputSuccess { "payloadType": "application/vnd.in-toto+json", "payload": "ewoJICAiX3R5cGUiOiAiaHR0cHM6Ly9pbi10b3RvLmlvL1N0YXRlbWVudC92MC4xIiwKCSAgInN1YmplY3QiOiBbCgkJeyAibmFtZSI6ICJhcnRpZmFjdCIsICJkaWdlc3QiOiB7ICJzaGEyNTYiOiAiZGVhZGJlZWYiIH0sICJhbm5vdGF0aW9ucyI6IHsgImZvbyI6ICJiYXIiIH0gfQoJICBdLAoJICAicHJlZGljYXRlVHlwZSI6ICJodHRwczovL3Nsc2EuZGV2L3Byb3ZlbmFuY2UvdjAuMiIKCX0=", "signatures": [ { "keyid": "test", "sig": "MAo=" } ] } --- PASS: TestTransformOutputSuccess (0.00s) === RUN TestVerifySkWithoutIdentities --- PASS: TestVerifySkWithoutIdentities (0.01s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/cli/verify 0.690s === RUN TestWrapWithGenericCosignError error_wrap_test.go:32: generic cosign error successfully returned --- PASS: TestWrapWithGenericCosignError (0.00s) === RUN TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingDoesNotExist exit_code_lookup_test.go:31: Correct default exit code returned --- PASS: TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingDoesNotExist (0.00s) === RUN TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingExists exit_code_lookup_test.go:41: Correct default exit code returned --- PASS: TestDefaultExitCodeReturnIfErrorTypeToExitCodeMappingExists (0.00s) PASS ok github.com/sigstore/cosign/v3/cmd/cosign/errors 0.017s ? github.com/sigstore/cosign/v3/cmd/help [no test files] ? github.com/sigstore/cosign/v3/cmd/sample [no test files] === RUN Test_idToken === RUN Test_idToken/empty_string === RUN Test_idToken/valid_jwt === RUN Test_idToken/not_a_jwt_or_file === RUN Test_idToken/file_path === RUN Test_idToken/non-existent_file --- PASS: Test_idToken (0.00s) --- PASS: Test_idToken/empty_string (0.00s) --- PASS: Test_idToken/valid_jwt (0.00s) --- PASS: Test_idToken/not_a_jwt_or_file (0.00s) --- PASS: Test_idToken/file_path (0.00s) --- PASS: Test_idToken/non-existent_file (0.00s) === RUN TestReadIDToken === RUN TestReadIDToken/raw_token === RUN TestReadIDToken/token_from_file === RUN TestReadIDToken/no_token,_providers_disabled === RUN TestReadIDToken/no_token,_specific_provider_success === RUN TestReadIDToken/no_token,_specific_provider_fail --- PASS: TestReadIDToken (0.00s) --- PASS: TestReadIDToken/raw_token (0.00s) --- PASS: TestReadIDToken/token_from_file (0.00s) --- PASS: TestReadIDToken/no_token,_providers_disabled (0.00s) --- PASS: TestReadIDToken/no_token,_specific_provider_success (0.00s) --- PASS: TestReadIDToken/no_token,_specific_provider_fail (0.00s) === RUN TestGetOAuthFlow === RUN TestGetOAuthFlow/auth_flow_set_explicitly === RUN TestGetOAuthFlow/id_token_set --- PASS: TestGetOAuthFlow (0.00s) --- PASS: TestGetOAuthFlow/auth_flow_set_explicitly (0.00s) --- PASS: TestGetOAuthFlow/id_token_set (0.00s) === RUN TestAuthenticateCaller === RUN TestAuthenticateCaller/token_flow === RUN TestAuthenticateCaller/unsupported_flow --- PASS: TestAuthenticateCaller (0.00s) --- PASS: TestAuthenticateCaller/token_flow (0.00s) --- PASS: TestAuthenticateCaller/unsupported_flow (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/auth 0.013s === RUN TestNewKMSKeypair === RUN TestNewKMSKeypair/ECDSA_key === RUN TestNewKMSKeypair/RSA_key === RUN TestNewKMSKeypair/ED25519_key === RUN TestNewKMSKeypair/Unsupported_key_type === RUN TestNewKMSKeypair/PublicKey_returns_error --- PASS: TestNewKMSKeypair (0.05s) --- PASS: TestNewKMSKeypair/ECDSA_key (0.00s) --- PASS: TestNewKMSKeypair/RSA_key (0.00s) --- PASS: TestNewKMSKeypair/ED25519_key (0.00s) --- PASS: TestNewKMSKeypair/Unsupported_key_type (0.00s) --- PASS: TestNewKMSKeypair/PublicKey_returns_error (0.00s) === RUN TestKMSKeypair_ECDSA_Methods === RUN TestKMSKeypair_ECDSA_Methods/GetHashAlgorithm === RUN TestKMSKeypair_ECDSA_Methods/GetSigningAlgorithm === RUN TestKMSKeypair_ECDSA_Methods/GetHint === RUN TestKMSKeypair_ECDSA_Methods/GetKeyAlgorithm === RUN TestKMSKeypair_ECDSA_Methods/GetPublicKey === RUN TestKMSKeypair_ECDSA_Methods/GetPublicKeyPem === RUN TestKMSKeypair_ECDSA_Methods/SignData === RUN TestKMSKeypair_ECDSA_Methods/SignData_with_error --- PASS: TestKMSKeypair_ECDSA_Methods (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetHashAlgorithm (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetSigningAlgorithm (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetHint (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetKeyAlgorithm (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetPublicKey (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/GetPublicKeyPem (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/SignData (0.00s) --- PASS: TestKMSKeypair_ECDSA_Methods/SignData_with_error (0.00s) === RUN TestKMSKeypair_ECDSA_P521_SignData --- PASS: TestKMSKeypair_ECDSA_P521_SignData (0.01s) === RUN TestKMSKeypair_ED25519_Methods === RUN TestKMSKeypair_ED25519_Methods/GetHashAlgorithm === RUN TestKMSKeypair_ED25519_Methods/GetSigningAlgorithm === RUN TestKMSKeypair_ED25519_Methods/GetHint === RUN TestKMSKeypair_ED25519_Methods/GetKeyAlgorithm === RUN TestKMSKeypair_ED25519_Methods/GetPublicKey === RUN TestKMSKeypair_ED25519_Methods/GetPublicKeyPem === RUN TestKMSKeypair_ED25519_Methods/SignData --- PASS: TestKMSKeypair_ED25519_Methods (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetHashAlgorithm (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetSigningAlgorithm (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetHint (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetKeyAlgorithm (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetPublicKey (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/GetPublicKeyPem (0.00s) --- PASS: TestKMSKeypair_ED25519_Methods/SignData (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/key 0.089s === RUN Test_FileExists === RUN Test_FileExists/file_exists === RUN Test_FileExists/file_does_not_exist === RUN Test_FileExists/other_error_e.g_cannot_access_file --- PASS: Test_FileExists (0.00s) --- PASS: Test_FileExists/file_exists (0.00s) --- PASS: Test_FileExists/file_does_not_exist (0.00s) --- PASS: Test_FileExists/other_error_e.g_cannot_access_file (0.00s) === RUN Test_HashReader === RUN Test_HashReader/SHA256 === RUN Test_HashReader/unspecified_hash_algorithm --- PASS: Test_HashReader (0.00s) --- PASS: Test_HashReader/SHA256 (0.00s) --- PASS: Test_HashReader/unspecified_hash_algorithm (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/pkg/cosign 0.026s === RUN TestGetFulcioRoots --- PASS: TestGetFulcioRoots (0.00s) === RUN TestGetFulcioRootsWithoutIntermediate --- PASS: TestGetFulcioRootsWithoutIntermediate (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/pkg/cosign/fulcio/fulcioroots 0.020s === RUN TestCheckSize === RUN TestCheckSize/size_is_within_default_limit === RUN TestCheckSize/size_exceeds_default_limit === RUN TestCheckSize/size_is_within_overridden_limit_(bytes) === RUN TestCheckSize/size_is_exceeds_overridden_limit_(bytes) === RUN TestCheckSize/size_is_within_overridden_limit_(megabytes,_short_form) === RUN TestCheckSize/size_exceeds_overridden_limit_(megabytes,_short_form) === RUN TestCheckSize/size_is_within_overridden_limit_(megabytes,_long_form) === RUN TestCheckSize/size_exceeds_overridden_limit_(megabytes,_long_form) === RUN TestCheckSize/size_is_within_overridden_limit_(mebibytes) === RUN TestCheckSize/size_exceeds_overridden_limit_(mebibytes) === RUN TestCheckSize/size_is_negative_results_in_default === RUN TestCheckSize/invalid_setting_results_in_default --- PASS: TestCheckSize (0.00s) --- PASS: TestCheckSize/size_is_within_default_limit (0.00s) --- PASS: TestCheckSize/size_exceeds_default_limit (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(bytes) (0.00s) --- PASS: TestCheckSize/size_is_exceeds_overridden_limit_(bytes) (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(megabytes,_short_form) (0.00s) --- PASS: TestCheckSize/size_exceeds_overridden_limit_(megabytes,_short_form) (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(megabytes,_long_form) (0.00s) --- PASS: TestCheckSize/size_exceeds_overridden_limit_(megabytes,_long_form) (0.00s) --- PASS: TestCheckSize/size_is_within_overridden_limit_(mebibytes) (0.00s) --- PASS: TestCheckSize/size_exceeds_overridden_limit_(mebibytes) (0.00s) --- PASS: TestCheckSize/size_is_negative_results_in_default (0.00s) --- PASS: TestCheckSize/invalid_setting_results_in_default (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/pkg/cosign/payload/size 0.011s ? github.com/sigstore/cosign/v3/internal/pkg/cosign/rekor/mock [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/cosign/tsa/client [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/cosign/tsa/mock [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/now [no test files] ? github.com/sigstore/cosign/v3/internal/pkg/oci/remote [no test files] ? github.com/sigstore/cosign/v3/internal/test [no test files] === RUN TestInfof --- PASS: TestInfof (0.00s) === RUN TestWarnf --- PASS: TestWarnf (0.00s) === RUN TestConfirm === RUN TestConfirm/no === RUN TestConfirm/no-upper === RUN TestConfirm/yes === RUN TestConfirm/yes-upper === RUN TestConfirm/default === RUN TestConfirm/empty === RUN TestConfirm/invalid === RUN TestConfirm/no-windows === RUN TestConfirm/yes-windows === RUN TestConfirm/default-windows === RUN TestConfirm/invalid#01 --- PASS: TestConfirm (0.00s) --- PASS: TestConfirm/no (0.00s) --- PASS: TestConfirm/no-upper (0.00s) --- PASS: TestConfirm/yes (0.00s) --- PASS: TestConfirm/yes-upper (0.00s) --- PASS: TestConfirm/default (0.00s) --- PASS: TestConfirm/empty (0.00s) --- PASS: TestConfirm/invalid (0.00s) --- PASS: TestConfirm/no-windows (0.00s) --- PASS: TestConfirm/yes-windows (0.00s) --- PASS: TestConfirm/default-windows (0.00s) --- PASS: TestConfirm/invalid#01 (0.00s) === RUN TestConfirmError --- PASS: TestConfirmError (0.00s) PASS ok github.com/sigstore/cosign/v3/internal/ui 0.013s === RUN TestLoadFile --- PASS: TestLoadFile (0.00s) === RUN TestLoadURL --- PASS: TestLoadURL (0.01s) === RUN TestLoadURLNon2xxStatus === RUN TestLoadURLNon2xxStatus/NotFound === RUN TestLoadURLNon2xxStatus/InternalServerError === RUN TestLoadURLNon2xxStatus/Forbidden --- PASS: TestLoadURLNon2xxStatus (0.00s) --- PASS: TestLoadURLNon2xxStatus/NotFound (0.00s) --- PASS: TestLoadURLNon2xxStatus/InternalServerError (0.00s) --- PASS: TestLoadURLNon2xxStatus/Forbidden (0.00s) === RUN TestLoadURLWithChecksum --- PASS: TestLoadURLWithChecksum (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/blob 0.017s === RUN TestCertExtensions === PAUSE TestCertExtensions === RUN TestGetCTLogPubKeys --- PASS: TestGetCTLogPubKeys (0.41s) === RUN TestGetCTLogPubKeysAlt --- PASS: TestGetCTLogPubKeysAlt (0.00s) === RUN TestErrors === RUN TestErrors/not_a_constant_3 === RUN TestErrors/not_a_string_i_am_a_string --- PASS: TestErrors (0.00s) --- PASS: TestErrors/not_a_constant_3 (0.00s) --- PASS: TestErrors/not_a_string_i_am_a_string (0.00s) === RUN TestLoadECDSAPrivateKey --- PASS: TestLoadECDSAPrivateKey (0.70s) === RUN TestReadingPrivatePemTypes === RUN TestReadingPrivatePemTypes/COSIGN_PEM_RSA_Type === RUN TestReadingPrivatePemTypes/COSIGN_PEM_EC_Type === RUN TestReadingPrivatePemTypes/SISTORE_PEM_Type --- PASS: TestReadingPrivatePemTypes (0.41s) --- PASS: TestReadingPrivatePemTypes/COSIGN_PEM_RSA_Type (0.10s) --- PASS: TestReadingPrivatePemTypes/COSIGN_PEM_EC_Type (0.21s) --- PASS: TestReadingPrivatePemTypes/SISTORE_PEM_Type (0.10s) === RUN TestWritingPrivatePemTypes --- PASS: TestWritingPrivatePemTypes (0.21s) === RUN TestImportPrivateKey === RUN TestImportPrivateKey/validrsa.key === RUN TestImportPrivateKey/validrsapkcs1.key === RUN TestImportPrivateKey/validrsapkcs8.key === RUN TestImportPrivateKey/invalidrsawithpubkey.key === RUN TestImportPrivateKey/invalidrsasmallkey.key === RUN TestImportPrivateKey/invalidrsalargekey.key === RUN TestImportPrivateKey/validecp256.key === RUN TestImportPrivateKey/validecp384.key === RUN TestImportPrivateKey/validecp521.key === RUN TestImportPrivateKey/validecpkcs8.key === RUN TestImportPrivateKey/invalidecp224.key === RUN TestImportPrivateKey/invalidecunsupported.key === RUN TestImportPrivateKey/ed25519.key === RUN TestImportPrivateKey/invalidkey.key --- PASS: TestImportPrivateKey (3.28s) --- PASS: TestImportPrivateKey/validrsa.key (0.45s) --- PASS: TestImportPrivateKey/validrsapkcs1.key (0.40s) --- PASS: TestImportPrivateKey/validrsapkcs8.key (0.41s) --- PASS: TestImportPrivateKey/invalidrsawithpubkey.key (0.00s) --- PASS: TestImportPrivateKey/invalidrsasmallkey.key (0.00s) --- PASS: TestImportPrivateKey/invalidrsalargekey.key (0.00s) --- PASS: TestImportPrivateKey/validecp256.key (0.40s) --- PASS: TestImportPrivateKey/validecp384.key (0.43s) --- PASS: TestImportPrivateKey/validecp521.key (0.40s) --- PASS: TestImportPrivateKey/validecpkcs8.key (0.41s) --- PASS: TestImportPrivateKey/invalidecp224.key (0.00s) --- PASS: TestImportPrivateKey/invalidecunsupported.key (0.00s) --- PASS: TestImportPrivateKey/ed25519.key (0.38s) --- PASS: TestImportPrivateKey/invalidkey.key (0.00s) === RUN TestObsoletePayload --- PASS: TestObsoletePayload (0.00s) === RUN TestObsoletePayloadWithAnnotations --- PASS: TestObsoletePayloadWithAnnotations (0.00s) === RUN TestGetRekorPubKeys --- PASS: TestGetRekorPubKeys (0.01s) === RUN TestGetCTLogID --- PASS: TestGetCTLogID (0.00s) === RUN TestVerifyTLogEntryOfflineFailsWithInvalidPublicKey --- PASS: TestVerifyTLogEntryOfflineFailsWithInvalidPublicKey (0.91s) === RUN TestComputeLeafHash === RUN TestComputeLeafHash/success === RUN TestComputeLeafHash/invalid_base64 === RUN TestComputeLeafHash/nil_body === RUN TestComputeLeafHash/bytes_body === RUN TestComputeLeafHash/object_body --- PASS: TestComputeLeafHash (0.00s) --- PASS: TestComputeLeafHash/success (0.00s) --- PASS: TestComputeLeafHash/invalid_base64 (0.00s) --- PASS: TestComputeLeafHash/nil_body (0.00s) --- PASS: TestComputeLeafHash/bytes_body (0.00s) --- PASS: TestComputeLeafHash/object_body (0.00s) === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_root_hash === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_log_index === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_tree_size === RUN TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/non-string_body --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_root_hash (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_log_index (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/nil_tree_size (0.00s) --- PASS: TestVerifyTLogEntryOfflineRejectsMalformedEntryWithoutPanic/non-string_body (0.00s) === RUN TestGetTSACertsFromEnv --- PASS: TestGetTSACertsFromEnv (0.00s) === RUN TestGetTSACertsFromPath --- PASS: TestGetTSACertsFromPath (0.00s) === RUN TestGetTSACertsFromTUF --- PASS: TestGetTSACertsFromTUF (0.00s) === RUN Test_IntotoSubjectClaimVerifier --- PASS: Test_IntotoSubjectClaimVerifier (0.00s) === RUN TestVerifyBundle === RUN TestVerifyBundle/valid === RUN TestVerifyBundle/valid_blob_signature === RUN TestVerifyBundle/invalid,_wrong_artifact === RUN TestVerifyBundle/invalid_blob_signature,_wrong_artifact === RUN TestVerifyBundle/valid,_pattern_match_issuer === RUN TestVerifyBundle/valid,_pattern_match_subject === RUN TestVerifyBundle/invalid,_pattern_match_issuer === RUN TestVerifyBundle/invalid,_pattern_match_subject === RUN TestVerifyBundle/invalid,_exact_issuer_mismatch === RUN TestVerifyBundle/invalid,_exact_subject_mismatch === RUN TestVerifyBundle/invalid,_multiple_identities === RUN TestVerifyBundle/require_SCT,_missing_SCT === RUN TestVerifyBundle/invalid_trusted_material === RUN TestVerifyBundle/do_not_require_tlog,_missing_tlog === RUN TestVerifyBundle/do_not_require_tsa,_missing_tsa === RUN TestVerifyBundle/require_tlog,_missing_tlog === RUN TestVerifyBundle/require_SET,_missing_set === RUN TestVerifyBundle/require_tsa,_missing_tsa === RUN TestVerifyBundle/invalid_blob_signature,_wrong_Fulcio_root === RUN TestVerifyBundle/invalid_blob_signature,_integrated_time_outside_certificate_validity === RUN TestVerifyBundle/valid_blob_signature,_integrated_time_outside_certificate_validity,_tlog_ignored === RUN TestVerifyBundle/invalid_blob_signature,_corrupted_SET === RUN TestVerifyBundle/invalid_blob_signature,_tlog_entry_from_different_signing_event --- PASS: TestVerifyBundle (0.04s) --- PASS: TestVerifyBundle/valid (0.00s) --- PASS: TestVerifyBundle/valid_blob_signature (0.00s) --- PASS: TestVerifyBundle/invalid,_wrong_artifact (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_wrong_artifact (0.00s) --- PASS: TestVerifyBundle/valid,_pattern_match_issuer (0.00s) --- PASS: TestVerifyBundle/valid,_pattern_match_subject (0.00s) --- PASS: TestVerifyBundle/invalid,_pattern_match_issuer (0.00s) --- PASS: TestVerifyBundle/invalid,_pattern_match_subject (0.00s) --- PASS: TestVerifyBundle/invalid,_exact_issuer_mismatch (0.00s) --- PASS: TestVerifyBundle/invalid,_exact_subject_mismatch (0.00s) --- PASS: TestVerifyBundle/invalid,_multiple_identities (0.00s) --- PASS: TestVerifyBundle/require_SCT,_missing_SCT (0.00s) --- PASS: TestVerifyBundle/invalid_trusted_material (0.00s) --- PASS: TestVerifyBundle/do_not_require_tlog,_missing_tlog (0.00s) --- PASS: TestVerifyBundle/do_not_require_tsa,_missing_tsa (0.00s) --- PASS: TestVerifyBundle/require_tlog,_missing_tlog (0.00s) --- PASS: TestVerifyBundle/require_SET,_missing_set (0.00s) --- PASS: TestVerifyBundle/require_tsa,_missing_tsa (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_wrong_Fulcio_root (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_integrated_time_outside_certificate_validity (0.00s) --- PASS: TestVerifyBundle/valid_blob_signature,_integrated_time_outside_certificate_validity,_tlog_ignored (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_corrupted_SET (0.00s) --- PASS: TestVerifyBundle/invalid_blob_signature,_tlog_entry_from_different_signing_event (0.00s) === RUN TestVerifyBundleGitHubWorkflowExtensions === RUN TestVerifyBundleGitHubWorkflowExtensions/valid,_no_extensions_required === RUN TestVerifyBundleGitHubWorkflowExtensions/valid,_all_extensions_match === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_trigger_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_sha_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_name_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_repository_mismatch === RUN TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_ref_mismatch --- PASS: TestVerifyBundleGitHubWorkflowExtensions (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/valid,_no_extensions_required (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/valid,_all_extensions_match (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_trigger_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_sha_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_name_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_repository_mismatch (0.00s) --- PASS: TestVerifyBundleGitHubWorkflowExtensions/invalid,_workflow_ref_mismatch (0.00s) === RUN TestVerifyBundleWithSigVerifier === RUN TestVerifyBundleWithSigVerifier/valid === RUN TestVerifyBundleWithSigVerifier/invalid,_wrong_artifact === RUN TestVerifyBundleWithSigVerifier/invalid,_sigverifier_not_set --- PASS: TestVerifyBundleWithSigVerifier (0.00s) --- PASS: TestVerifyBundleWithSigVerifier/valid (0.00s) --- PASS: TestVerifyBundleWithSigVerifier/invalid,_wrong_artifact (0.00s) --- PASS: TestVerifyBundleWithSigVerifier/invalid,_sigverifier_not_set (0.00s) === RUN TestCheckOptsBundleOptions === RUN TestCheckOptsBundleOptions/default_returns_no_options === RUN TestCheckOptsBundleOptions/AllowCertificateChain_adds_option --- PASS: TestCheckOptsBundleOptions (0.00s) --- PASS: TestCheckOptsBundleOptions/default_returns_no_options (0.00s) --- PASS: TestCheckOptsBundleOptions/AllowCertificateChain_adds_option (0.00s) === RUN TestVerifyNewBundleConcurrentNoDataRace --- PASS: TestVerifyNewBundleConcurrentNoDataRace (0.00s) === RUN TestRekorV2Bundle === RUN TestRekorV2Bundle/IgnoreTlog_true === RUN TestRekorV2Bundle/SigVerifier_set === RUN TestRekorV2Bundle/Rekor_v1_entry === RUN TestRekorV2Bundle/Rekor_v2_entry === RUN TestRekorV2Bundle/Mixed_entries === RUN TestRekorV2Bundle/Already_set_with_Rekor_v1 --- PASS: TestRekorV2Bundle (0.00s) --- PASS: TestRekorV2Bundle/IgnoreTlog_true (0.00s) --- PASS: TestRekorV2Bundle/SigVerifier_set (0.00s) --- PASS: TestRekorV2Bundle/Rekor_v1_entry (0.00s) --- PASS: TestRekorV2Bundle/Rekor_v2_entry (0.00s) --- PASS: TestRekorV2Bundle/Mixed_entries (0.00s) --- PASS: TestRekorV2Bundle/Already_set_with_Rekor_v1 (0.00s) === RUN TestGetBundles_Empty 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:aff07585556c025296f03ca1a914bd48798e976e9b86885b467ab16c2aa598f4 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:a126af5eb00843e20ae32cc1a67ae42d3540d1789d2c822a38e89ed2d66f9875 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:3228cba88f2910447f5fc51c4395bd489d0cf78d5fec30f45f1cf67961323a53 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:2244a5d030d043938bdf2adc200e4de9b38d8d17bb99791231e90e30226b2085 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/9170259802671076611 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/7151499212833402878 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/8560459535593695773 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/9170259802671076611?digest=sha256%3Aaff07585556c025296f03ca1a914bd48798e976e9b86885b467ab16c2aa598f4 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/3804432447682866694 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/7151499212833402878?digest=sha256%3Aa126af5eb00843e20ae32cc1a67ae42d3540d1789d2c822a38e89ed2d66f9875 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/8560459535593695773?digest=sha256%3A3228cba88f2910447f5fc51c4395bd489d0cf78d5fec30f45f1cf67961323a53 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:94fc472ea1606cf2ae555be3cc6974a49c6010a66fdb3609915047846014cc02 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:ea14970966c8e31e2fcfc42fe332ab3aeb21c655d371ae58e7cfa612b55dc47f 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/3804432447682866694?digest=sha256%3A2244a5d030d043938bdf2adc200e4de9b38d8d17bb99791231e90e30226b2085 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:e52f6d5476b050edd149793a3d812986c72ebc266f07895601d9ee7af6ecce15 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:a0b3f8969e0d7565b34236670e7679cb21748cb1484f2b59dcc692cef7ffa95d 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/7844762822979077007 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/6592699387529869038 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/6547119739688315299 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/7844762822979077007?digest=sha256%3Aea14970966c8e31e2fcfc42fe332ab3aeb21c655d371ae58e7cfa612b55dc47f 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/798360685309559767 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/6592699387529869038?digest=sha256%3A94fc472ea1606cf2ae555be3cc6974a49c6010a66fdb3609915047846014cc02 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/6547119739688315299?digest=sha256%3Ae52f6d5476b050edd149793a3d812986c72ebc266f07895601d9ee7af6ecce15 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:ef8d09a319f84d15ae20967ed7a72f02460cc1e60814a4986cce1a7d829f1790 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/798360685309559767?digest=sha256%3Aa0b3f8969e0d7565b34236670e7679cb21748cb1484f2b59dcc692cef7ffa95d 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:e94fc8718a968c20c30d9295bc89d9bb1122cde468e9cd770e5fdfd003f3d754 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:b636e2163f9a56178ec0ae3c1e9af2ffc405e941d885c4cbacb0eb4f2411911f 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/7099833995955852955 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/7099833995955852955?digest=sha256%3Aef8d09a319f84d15ae20967ed7a72f02460cc1e60814a4986cce1a7d829f1790 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/7704412675733616179 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/3420820323717692966 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/7704412675733616179?digest=sha256%3Ae94fc8718a968c20c30d9295bc89d9bb1122cde468e9cd770e5fdfd003f3d754 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/3420820323717692966?digest=sha256%3Ab636e2163f9a56178ec0ae3c1e9af2ffc405e941d885c4cbacb0eb4f2411911f 2026/11/03 16:55:51 PUT /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:686e49fbc1bd92552b46a8381a255d14915afee6d6c0449e9e2e044530c59e4e 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/sha256:686e49fbc1bd92552b46a8381a255d14915afee6d6c0449e9e2e044530c59e4e 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/8474658352702678255 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/8474658352702678255?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:f1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/4465703874695294548 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/4465703874695294548?digest=sha256%3Af1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 PUT /v2/repo/manifests/sha256:f65638b2d82cd075dad11a53bdbe4f767b7a42fdef234a8cff0fbb57a45dd4d2 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:686e49fbc1bd92552b46a8381a255d14915afee6d6c0449e9e2e044530c59e4e 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:686e49fbc1bd92552b46a8381a255d14915afee6d6c0449e9e2e044530c59e4e 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/sha256:f65638b2d82cd075dad11a53bdbe4f767b7a42fdef234a8cff0fbb57a45dd4d2 2026/11/03 16:55:51 GET /v2/repo/blobs/sha256:f1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4 --- PASS: TestGetBundles_Empty (0.03s) === RUN TestGetBundles_Valid 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/6951344350639173658 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/6951344350639173658?digest=sha256%3A5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 2026/11/03 16:55:51 PUT /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/5947624575957976997 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/5947624575957976997?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/5808065240048624939 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/5808065240048624939?digest=sha256%3Aa6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 PUT /v2/repo/manifests/sha256:f861ecf3ce1e35e04b6e88d2b5755b599a43b7f4a85909b22fdb4c473ce9520a 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/sha256:f861ecf3ce1e35e04b6e88d2b5755b599a43b7f4a85909b22fdb4c473ce9520a 2026/11/03 16:55:51 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 --- PASS: TestGetBundles_Valid (0.01s) === RUN TestGetBundles_WithTargetRepository 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/source-repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 16:55:51 HEAD /v2/source-repo/blobs/sha256:5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/source-repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/source-repo/blobs/uploads/4612607211560641627 2026/11/03 16:55:51 PUT /v2/source-repo/blobs/uploads/4612607211560641627?digest=sha256%3A5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 2026/11/03 16:55:51 PUT /v2/source-repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/source-repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/source-repo/manifests/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/target-repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/target-repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/target-repo/blobs/uploads/5941270628455257263 2026/11/03 16:55:51 PUT /v2/target-repo/blobs/uploads/5941270628455257263?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/target-repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/target-repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/target-repo/blobs/uploads/4879443986618409870 2026/11/03 16:55:51 PUT /v2/target-repo/blobs/uploads/4879443986618409870?digest=sha256%3Aa6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 PUT /v2/target-repo/manifests/sha256:f861ecf3ce1e35e04b6e88d2b5755b599a43b7f4a85909b22fdb4c473ce9520a 2026/11/03 16:55:51 GET /v2/target-repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/source-repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/source-repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/source-repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/target-repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/target-repo/manifests/sha256:f861ecf3ce1e35e04b6e88d2b5755b599a43b7f4a85909b22fdb4c473ce9520a 2026/11/03 16:55:51 GET /v2/target-repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 --- PASS: TestGetBundles_WithTargetRepository (0.01s) === RUN TestVerifyImageAttestationsSigstoreBundle 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag 404 NAME_UNKNOWN Unknown name 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/1410910834461454442 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/1410910834461454442?digest=sha256%3A5b943e2b943f6c81dbbd4e2eca5121f4fcc39139e3d1219d6d89bd925b77d9fe 2026/11/03 16:55:51 PUT /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag2 404 MANIFEST_UNKNOWN Unknown manifest 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:f5dab42a1bd1beab4a5aa6e82a0032bf83f3a62c9fdf13c0ea1cd5bccc508dc6 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:44abeeeee4d1aa3f2759dcf8b0f1b360bb1ee2c21d1d47aebe18b5cf24df0816 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:19a0013108776fa6f32080c18316b7a619bfe28dc309753f0b440b0ed47f9606 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:03a322050c72ae8eebef575b64c3c984817f1c9ad634716de28b544e30ad8d0e 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/8501054112450446831 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/5400059878668727754 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/5358626103395050016 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/8501054112450446831?digest=sha256%3Af5dab42a1bd1beab4a5aa6e82a0032bf83f3a62c9fdf13c0ea1cd5bccc508dc6 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/2013671521066199251 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/5400059878668727754?digest=sha256%3A03a322050c72ae8eebef575b64c3c984817f1c9ad634716de28b544e30ad8d0e 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/5358626103395050016?digest=sha256%3A19a0013108776fa6f32080c18316b7a619bfe28dc309753f0b440b0ed47f9606 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:61af5b7222e1850907743da2c1937ad423e4e5d4f40a9dfcbf85f08032067ee9 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/2013671521066199251?digest=sha256%3A44abeeeee4d1aa3f2759dcf8b0f1b360bb1ee2c21d1d47aebe18b5cf24df0816 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:51ebe7a8a38c9a62424c8334d9e80b118e0a11c7a6997d0e577cee61edec6347 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:798ccb25e13e89f7f300e7623f6e96bc4627a4c443bee9a98855a071a123616f 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:38f6152ef8aa5370f3556d0c1bbeb64b5ccf6da200564555a931998e5a399671 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/3892291963980754611 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/9125467865330926186 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/8233861433654476808 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/9135352076551919278 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/9125467865330926186?digest=sha256%3A51ebe7a8a38c9a62424c8334d9e80b118e0a11c7a6997d0e577cee61edec6347 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/3892291963980754611?digest=sha256%3A61af5b7222e1850907743da2c1937ad423e4e5d4f40a9dfcbf85f08032067ee9 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/8233861433654476808?digest=sha256%3A798ccb25e13e89f7f300e7623f6e96bc4627a4c443bee9a98855a071a123616f 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/9135352076551919278?digest=sha256%3A38f6152ef8aa5370f3556d0c1bbeb64b5ccf6da200564555a931998e5a399671 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:30720cdf2724b99f3819d6dede3d4a1a41a9cb29bd2f770b7d00b53094c2cb6c 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:b3a5c5f767c5a8749c3f5ed880035e6702a6343d969515cbde3c53272b6a1b48 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:5ba41b2d9f0636b6e38faee34f0f11567b7a58d4f032db340be53f1b61f4d2fa 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/608657918146124100 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/3003648862904568524 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/4247536928739256695 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/608657918146124100?digest=sha256%3A30720cdf2724b99f3819d6dede3d4a1a41a9cb29bd2f770b7d00b53094c2cb6c 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/4247536928739256695?digest=sha256%3A5ba41b2d9f0636b6e38faee34f0f11567b7a58d4f032db340be53f1b61f4d2fa 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/3003648862904568524?digest=sha256%3Ab3a5c5f767c5a8749c3f5ed880035e6702a6343d969515cbde3c53272b6a1b48 2026/11/03 16:55:51 PUT /v2/repo/manifests/tag2 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/5451931419279447795 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/5451931419279447795?digest=sha256%3A44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 404 BLOB_UNKNOWN Unknown blob 2026/11/03 16:55:51 POST /v2/repo/blobs/uploads/ 2026/11/03 16:55:51 PATCH /v2/repo/blobs/uploads/212980902682567099 2026/11/03 16:55:51 PUT /v2/repo/blobs/uploads/212980902682567099?digest=sha256%3Aa6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 PUT /v2/repo/manifests/sha256:f861ecf3ce1e35e04b6e88d2b5755b599a43b7f4a85909b22fdb4c473ce9520a 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/sha256:f861ecf3ce1e35e04b6e88d2b5755b599a43b7f4a85909b22fdb4c473ce9520a 2026/11/03 16:55:51 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:732112270d7e59418a8c080b134b24cabd67d250d0d0147a97ed95ba5c280aa4 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/sha256:f861ecf3ce1e35e04b6e88d2b5755b599a43b7f4a85909b22fdb4c473ce9520a 2026/11/03 16:55:51 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/tag2 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/manifests/sha256:03ed748cf4f23d1b5929ef44fa60681a1b2b7b2f651603c8772aeae298464db2 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 HEAD /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 PUT /v2/repo/manifests/sha256:ac01982172c51d440536ca3409f32fd27abb61f009c0fa37f327962d0f243937 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:03ed748cf4f23d1b5929ef44fa60681a1b2b7b2f651603c8772aeae298464db2 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/tag2 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/referrers/sha256:03ed748cf4f23d1b5929ef44fa60681a1b2b7b2f651603c8772aeae298464db2 2026/11/03 16:55:51 GET /v2/ 2026/11/03 16:55:51 GET /v2/repo/manifests/sha256:ac01982172c51d440536ca3409f32fd27abb61f009c0fa37f327962d0f243937 2026/11/03 16:55:51 GET /v2/repo/blobs/sha256:a6c1fc36d2a9d6c7844bdb3caf052947fc48b4360e421d637d4647db40d4f9b0 --- PASS: TestVerifyImageAttestationsSigstoreBundle (0.05s) === RUN TestContainsSCT --- PASS: TestContainsSCT (0.00s) === RUN TestVerifySCTError --- PASS: TestVerifySCTError (0.00s) === RUN TestVerifyEmbeddedSCT --- PASS: TestVerifyEmbeddedSCT (0.03s) === RUN Test_verifyOCIAttestation --- PASS: Test_verifyOCIAttestation (0.00s) === RUN TestVerifyImageSignature --- PASS: TestVerifyImageSignature (0.00s) === RUN TestVerifyImageSignatureMultipleSubs --- PASS: TestVerifyImageSignatureMultipleSubs (0.01s) === RUN Test_verifySignaturesErrNoSignaturesFound --- PASS: Test_verifySignaturesErrNoSignaturesFound (0.00s) === RUN Test_verifySignaturesErrNoMatchingSignatures --- PASS: Test_verifySignaturesErrNoMatchingSignatures (0.00s) === RUN TestVerifyImageSignatureWithNoChain --- PASS: TestVerifyImageSignatureWithNoChain (0.00s) === RUN TestVerifyImageSignatureWithKeyAndCert --- PASS: TestVerifyImageSignatureWithKeyAndCert (0.00s) === RUN TestVerifyImageSignatureWithInvalidPublicKeyType --- PASS: TestVerifyImageSignatureWithInvalidPublicKeyType (2.42s) === RUN TestVerifyImageSignatureWithInvalidBundleBodyType --- PASS: TestVerifyImageSignatureWithInvalidBundleBodyType (0.00s) === RUN TestVerifyImageSignatureWithOnlyRoot --- PASS: TestVerifyImageSignatureWithOnlyRoot (0.00s) === RUN TestVerifyImageSignatureWithMissingSub --- PASS: TestVerifyImageSignatureWithMissingSub (0.00s) === RUN TestVerifyImageSignatureWithExistingSub --- PASS: TestVerifyImageSignatureWithExistingSub (0.00s) === RUN TestImageSignatureVerificationWithRekor === RUN TestImageSignatureVerificationWithRekor/Verification_succeeds_with_valid_Rekor_public_keys === RUN TestImageSignatureVerificationWithRekor/Verification_fails_with_no_Rekor_public_keys === RUN TestImageSignatureVerificationWithRekor/Verification_fails_with_non-matching_Rekor_public_keys --- PASS: TestImageSignatureVerificationWithRekor (0.00s) --- PASS: TestImageSignatureVerificationWithRekor/Verification_succeeds_with_valid_Rekor_public_keys (0.00s) --- PASS: TestImageSignatureVerificationWithRekor/Verification_fails_with_no_Rekor_public_keys (0.00s) --- PASS: TestImageSignatureVerificationWithRekor/Verification_fails_with_non-matching_Rekor_public_keys (0.00s) === RUN TestVerifyImageSignatureWithSigVerifierAndTSA --- PASS: TestVerifyImageSignatureWithSigVerifierAndTSA (0.00s) === RUN TestVerifyImageSignatureWithSigVerifierAndRekorTSA --- PASS: TestVerifyImageSignatureWithSigVerifierAndRekorTSA (0.00s) === RUN TestVerifyImageSignatureWithMismatchedBundleAndTrustedRoot --- PASS: TestVerifyImageSignatureWithMismatchedBundleAndTrustedRoot (0.00s) === RUN TestValidateAndUnpackCertSuccess --- PASS: TestValidateAndUnpackCertSuccess (0.00s) === RUN TestValidateAndUnpackCertSuccessAllowAllValues --- PASS: TestValidateAndUnpackCertSuccessAllowAllValues (0.00s) === RUN TestValidateAndUnpackCertWithoutRequiredSCT --- PASS: TestValidateAndUnpackCertWithoutRequiredSCT (0.00s) === RUN TestValidateAndUnpackCertSuccessWithDnsSan --- PASS: TestValidateAndUnpackCertSuccessWithDnsSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithEmailSan --- PASS: TestValidateAndUnpackCertSuccessWithEmailSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithIpAddressSan --- PASS: TestValidateAndUnpackCertSuccessWithIpAddressSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithUriSan --- PASS: TestValidateAndUnpackCertSuccessWithUriSan (0.00s) === RUN TestValidateAndUnpackCertSuccessWithOtherNameSan --- PASS: TestValidateAndUnpackCertSuccessWithOtherNameSan (0.00s) === RUN TestValidateAndUnpackCertInvalidRoot --- PASS: TestValidateAndUnpackCertInvalidRoot (0.00s) === RUN TestValidateAndUnpackCertInvalidOidcIssuer --- PASS: TestValidateAndUnpackCertInvalidOidcIssuer (0.00s) === RUN TestValidateAndUnpackCertInvalidEmail --- PASS: TestValidateAndUnpackCertInvalidEmail (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowTrigger --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowTrigger (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowSHA --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowSHA (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowName --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowName (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowRepository --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowRepository (0.00s) === RUN TestValidateAndUnpackCertInvalidGithubWorkflowRef --- PASS: TestValidateAndUnpackCertInvalidGithubWorkflowRef (0.00s) === RUN TestValidateAndUnpackCertWithChainSuccess --- PASS: TestValidateAndUnpackCertWithChainSuccess (0.00s) === RUN TestValidateAndUnpackCertWithChainSuccessWithRoot --- PASS: TestValidateAndUnpackCertWithChainSuccessWithRoot (0.00s) === RUN TestValidateAndUnpackCertWithChainFailsWithoutChain --- PASS: TestValidateAndUnpackCertWithChainFailsWithoutChain (0.00s) === RUN TestValidateAndUnpackCertWithChainFailsWithInvalidChain --- PASS: TestValidateAndUnpackCertWithChainFailsWithInvalidChain (0.00s) === RUN TestValidateAndUnpackCertWithIdentities --- PASS: TestValidateAndUnpackCertWithIdentities (0.01s) === RUN TestValidateAndUnpackCertWithIntermediatesSuccess --- PASS: TestValidateAndUnpackCertWithIntermediatesSuccess (0.00s) === RUN TestValidateUnpackCertWithTrustedMaterial --- PASS: TestValidateUnpackCertWithTrustedMaterial (0.00s) === RUN TestValidateAndUnpackCertWithSCT --- PASS: TestValidateAndUnpackCertWithSCT (0.00s) === RUN TestCompareSigs === RUN TestCompareSigs/sigs_match === RUN TestCompareSigs/sigs_don't_match --- PASS: TestCompareSigs (0.00s) --- PASS: TestCompareSigs/sigs_match (0.00s) --- PASS: TestCompareSigs/sigs_don't_match (0.00s) === RUN TestTrustedCertSuccess --- PASS: TestTrustedCertSuccess (0.00s) === RUN TestTrustedCertSuccessNoIntermediates --- PASS: TestTrustedCertSuccessNoIntermediates (0.00s) === RUN TestTrustedCertSuccessChainFromRoot --- PASS: TestTrustedCertSuccessChainFromRoot (0.00s) === RUN TestVerifyRFC3161Timestamp 2026/11/03 16:55:53 Warning: subset of signed timestamps failed to verify: [unable to verify signed timestamps: %!w()] --- PASS: TestVerifyRFC3161Timestamp (0.01s) === RUN TestVerifyImageSignatureExpiredCACertificate --- PASS: TestVerifyImageSignatureExpiredCACertificate (0.01s) === RUN TestVerifyImageAttestation --- PASS: TestVerifyImageAttestation (0.00s) === RUN TestHasLocalBundles_V2Signatures --- PASS: TestHasLocalBundles_V2Signatures (0.01s) === RUN TestHasLocalBundles_V3Bundles --- PASS: TestHasLocalBundles_V3Bundles (0.00s) === RUN TestHasLocalBundles_NoSignatures --- PASS: TestHasLocalBundles_NoSignatures (0.01s) === RUN TestHasLocalBundles_MixedFormats --- PASS: TestHasLocalBundles_MixedFormats (0.01s) === RUN TestHasLocalBundles_InvalidPath --- PASS: TestHasLocalBundles_InvalidPath (0.00s) === RUN TestHasLocalAttestationBundles_V2Attestations --- PASS: TestHasLocalAttestationBundles_V2Attestations (0.01s) === RUN TestHasLocalAttestationBundles_V3Bundles --- PASS: TestHasLocalAttestationBundles_V3Bundles (0.01s) === RUN TestHasLocalSigstoreBundles_OCIReferrers --- PASS: TestHasLocalSigstoreBundles_OCIReferrers (0.01s) === RUN TestHasLocalSigstoreBundles_ImageIndex --- PASS: TestHasLocalSigstoreBundles_ImageIndex (0.01s) === RUN TestHasLocalSigstoreBundles_NoBlobsDir --- PASS: TestHasLocalSigstoreBundles_NoBlobsDir (0.01s) === RUN TestHasLocalSigstoreBundles_ReferrerDifferentSubject --- PASS: TestHasLocalSigstoreBundles_ReferrerDifferentSubject (0.01s) === RUN TestHasLocalSigstoreBundles_EmptyBlobsDir --- PASS: TestHasLocalSigstoreBundles_EmptyBlobsDir (0.00s) === RUN TestGetLocalBundles_MissingBlobsDir --- PASS: TestGetLocalBundles_MissingBlobsDir (0.00s) === RUN TestGetLocalBundles_ZeroBundles --- PASS: TestGetLocalBundles_ZeroBundles (0.01s) === RUN TestGetLocalBundles_InvalidPath --- PASS: TestGetLocalBundles_InvalidPath (0.00s) === RUN TestBundleHash === RUN TestBundleHash/dsse_v0.0.1 === RUN TestBundleHash/hashedrekord_v0.0.1 === RUN TestBundleHash/intoto_v0.0.1 === RUN TestBundleHash/intoto_v0.0.2 === RUN TestBundleHash/rekord_v0.0.1 --- PASS: TestBundleHash (0.00s) --- PASS: TestBundleHash/dsse_v0.0.1 (0.00s) --- PASS: TestBundleHash/hashedrekord_v0.0.1 (0.00s) --- PASS: TestBundleHash/intoto_v0.0.1 (0.00s) --- PASS: TestBundleHash/intoto_v0.0.2 (0.00s) --- PASS: TestBundleHash/rekord_v0.0.1 (0.00s) === RUN TestBundleHashWithMissingHash === RUN TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash === RUN TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash === RUN TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.value === RUN TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.algorithm === RUN TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.value === RUN TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.algorithm === RUN TestBundleHashWithMissingHash/dsse_v0.0.1_without_envelopeHash === RUN TestBundleHashWithMissingHash/hashedrekord_v0.0.1_without_data.hash === RUN TestBundleHashWithMissingHash/intoto_v0.0.1_without_content.hash --- PASS: TestBundleHashWithMissingHash (0.00s) --- PASS: TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash (0.00s) --- PASS: TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.value (0.00s) --- PASS: TestBundleHashWithMissingHash/rekord_v0.0.1_without_data.hash.algorithm (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.value (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.2_without_content.hash.algorithm (0.00s) --- PASS: TestBundleHashWithMissingHash/dsse_v0.0.1_without_envelopeHash (0.00s) --- PASS: TestBundleHashWithMissingHash/hashedrekord_v0.0.1_without_data.hash (0.00s) --- PASS: TestBundleHashWithMissingHash/intoto_v0.0.1_without_content.hash (0.00s) === RUN TestHashFields === RUN TestHashFields/both_set === RUN TestHashFields/missing_algorithm === RUN TestHashFields/missing_value === RUN TestHashFields/missing_both --- PASS: TestHashFields (0.00s) --- PASS: TestHashFields/both_set (0.00s) --- PASS: TestHashFields/missing_algorithm (0.00s) --- PASS: TestHashFields/missing_value (0.00s) --- PASS: TestHashFields/missing_both (0.00s) === RUN TestVerifyImageSignatureWithBundleBodyMissingHash === RUN TestVerifyImageSignatureWithBundleBodyMissingHash/rekord_v0.0.1 === RUN TestVerifyImageSignatureWithBundleBodyMissingHash/intoto_v0.0.2 --- PASS: TestVerifyImageSignatureWithBundleBodyMissingHash (0.00s) --- PASS: TestVerifyImageSignatureWithBundleBodyMissingHash/rekord_v0.0.1 (0.00s) --- PASS: TestVerifyImageSignatureWithBundleBodyMissingHash/intoto_v0.0.2 (0.00s) === CONT TestCertExtensions --- PASS: TestCertExtensions (0.00s) === RUN FuzzImportKeyPairLoadPrivateKey === RUN FuzzImportKeyPairLoadPrivateKey/seed#0 === RUN FuzzImportKeyPairLoadPrivateKey/seed#1 === RUN FuzzImportKeyPairLoadPrivateKey/seed#2 === RUN FuzzImportKeyPairLoadPrivateKey/seed#3 === RUN FuzzImportKeyPairLoadPrivateKey/seed#4 === RUN FuzzImportKeyPairLoadPrivateKey/seed#5 === RUN FuzzImportKeyPairLoadPrivateKey/seed#6 === RUN FuzzImportKeyPairLoadPrivateKey/seed#7 === RUN FuzzImportKeyPairLoadPrivateKey/seed#8 === RUN FuzzImportKeyPairLoadPrivateKey/seed#9 === RUN FuzzImportKeyPairLoadPrivateKey/seed#10 --- PASS: FuzzImportKeyPairLoadPrivateKey (3.08s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#0 (0.38s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#1 (0.38s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#2 (0.38s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#3 (0.37s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#4 (0.39s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#5 (0.38s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#6 (0.40s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#7 (0.40s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#8 (0.00s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#9 (0.00s) --- PASS: FuzzImportKeyPairLoadPrivateKey/seed#10 (0.00s) === RUN FuzzSigVerify --- PASS: FuzzSigVerify (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign 11.838s === RUN TestGenerateStatement === RUN TestGenerateStatement/custom === RUN TestGenerateStatement/custom_type === RUN TestGenerateStatement/custom_empty_string === RUN TestGenerateStatement/spdx_string === RUN TestGenerateStatement/spdx_string_multi-line === RUN TestGenerateStatement/spdx_json === RUN TestGenerateStatement/spdx_json_complex === RUN TestGenerateStatement/cyclonedx === RUN TestGenerateStatement/cyclonedx_complex === RUN TestGenerateStatement/link === RUN TestGenerateStatement/link_minimal === RUN TestGenerateStatement/vuln === RUN TestGenerateStatement/vuln_minimal === RUN TestGenerateStatement/openvex === RUN TestGenerateStatement/openvex_complex === RUN TestGenerateStatement/openvex_minimal === RUN TestGenerateStatement/slsaprovenance === RUN TestGenerateStatement/slsaprovenance02 === RUN TestGenerateStatement/slsaprovenance1 === RUN TestGenerateStatement/slsaprovenance1_complex --- PASS: TestGenerateStatement (0.01s) --- PASS: TestGenerateStatement/custom (0.00s) --- PASS: TestGenerateStatement/custom_type (0.00s) --- PASS: TestGenerateStatement/custom_empty_string (0.00s) --- PASS: TestGenerateStatement/spdx_string (0.00s) --- PASS: TestGenerateStatement/spdx_string_multi-line (0.00s) --- PASS: TestGenerateStatement/spdx_json (0.00s) --- PASS: TestGenerateStatement/spdx_json_complex (0.00s) --- PASS: TestGenerateStatement/cyclonedx (0.00s) --- PASS: TestGenerateStatement/cyclonedx_complex (0.00s) --- PASS: TestGenerateStatement/link (0.00s) --- PASS: TestGenerateStatement/link_minimal (0.00s) --- PASS: TestGenerateStatement/vuln (0.00s) --- PASS: TestGenerateStatement/vuln_minimal (0.00s) --- PASS: TestGenerateStatement/openvex (0.00s) --- PASS: TestGenerateStatement/openvex_complex (0.00s) --- PASS: TestGenerateStatement/openvex_minimal (0.00s) --- PASS: TestGenerateStatement/slsaprovenance (0.00s) --- PASS: TestGenerateStatement/slsaprovenance02 (0.00s) --- PASS: TestGenerateStatement/slsaprovenance1 (0.00s) --- PASS: TestGenerateStatement/slsaprovenance1_complex (0.00s) === RUN FuzzGenerateStatement --- PASS: FuzzGenerateStatement (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/attestation 0.024s === RUN TestLocalCertChainProvider_GetCertificateChain === RUN TestLocalCertChainProvider_GetCertificateChain/leaf_with_root-only_chain_drops_the_self-signed_root === RUN TestLocalCertChainProvider_GetCertificateChain/leaf_with_sub_and_root_chain_drops_the_self-signed_root === RUN TestLocalCertChainProvider_GetCertificateChain/leaf_already_present_in_chain_is_deduped_and_root_is_dropped === RUN TestLocalCertChainProvider_GetCertificateChain/invalid_leaf_PEM === RUN TestLocalCertChainProvider_GetCertificateChain/invalid_chain_PEM --- PASS: TestLocalCertChainProvider_GetCertificateChain (0.01s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/leaf_with_root-only_chain_drops_the_self-signed_root (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/leaf_with_sub_and_root_chain_drops_the_self-signed_root (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/leaf_already_present_in_chain_is_deduped_and_root_is_dropped (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/invalid_leaf_PEM (0.00s) --- PASS: TestLocalCertChainProvider_GetCertificateChain/invalid_chain_PEM (0.00s) === RUN TestRFC3161Timestamp === RUN TestRFC3161Timestamp/nil_timestamp_entry === RUN TestRFC3161Timestamp/timestamp_entry --- PASS: TestRFC3161Timestamp (0.00s) --- PASS: TestRFC3161Timestamp/nil_timestamp_entry (0.00s) --- PASS: TestRFC3161Timestamp/timestamp_entry (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/bundle 0.030s === RUN TestValidationJSON === RUN TestValidationJSON/passing_policy === RUN TestValidationJSON/passing_result_due_to_matching_rules === RUN TestValidationJSON/policy_query_evaluates_to_false_signatures_array_min_items --- PASS: TestValidationJSON (0.01s) --- PASS: TestValidationJSON/passing_policy (0.00s) --- PASS: TestValidationJSON/passing_result_due_to_matching_rules (0.00s) --- PASS: TestValidationJSON/policy_query_evaluates_to_false_signatures_array_min_items (0.00s) === RUN FuzzValidateJSON --- PASS: FuzzValidateJSON (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/cue 0.025s === RUN TestMustRegisterEnv --- PASS: TestMustRegisterEnv (0.00s) === RUN TestMustRegisterEnvWithNonRegisteredEnv --- PASS: TestMustRegisterEnvWithNonRegisteredEnv (0.00s) === RUN TestMustRegisterEnvWithInvalidCosignEnvVar --- PASS: TestMustRegisterEnvWithInvalidCosignEnvVar (0.00s) === RUN TestGetenv --- PASS: TestGetenv (0.00s) === RUN TestGetenvUnset --- PASS: TestGetenvUnset (0.00s) === RUN TestLookupEnv --- PASS: TestLookupEnv (0.00s) === RUN TestLookupEnvEmpty --- PASS: TestLookupEnvEmpty (0.00s) === RUN TestLookupEnvUnset --- PASS: TestLookupEnvUnset (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/env 0.007s === RUN TestLeafHash === RUN TestLeafHash/cert === RUN TestLeafHash/precert === RUN TestLeafHash/cert_with_embedded_SCT --- PASS: TestLeafHash (0.00s) --- PASS: TestLeafHash/cert (0.00s) --- PASS: TestLeafHash/precert (0.00s) --- PASS: TestLeafHash/cert_with_embedded_SCT (0.00s) === RUN TestLeafHashErrors === RUN TestLeafHashErrors/empty_chain === RUN TestLeafHashErrors/nil_SCT === RUN TestLeafHashErrors/no_SCTs_embedded_in_cert,_embedded_true === RUN TestLeafHashErrors/cert_contains_embedded_SCTs,_but_not_the_SCT_provided --- PASS: TestLeafHashErrors (0.00s) --- PASS: TestLeafHashErrors/empty_chain (0.00s) --- PASS: TestLeafHashErrors/nil_SCT (0.00s) --- PASS: TestLeafHashErrors/no_SCTs_embedded_in_cert,_embedded_true (0.00s) --- PASS: TestLeafHashErrors/cert_contains_embedded_SCTs,_but_not_the_SCT_provided (0.00s) === RUN TestVerifySCT === RUN TestVerifySCT/cert === RUN TestVerifySCT/precert === RUN TestVerifySCT/invalid_SCT === RUN TestVerifySCT/cert_with_embedded_SCT === RUN TestVerifySCT/cert_with_invalid_embedded_SCT --- PASS: TestVerifySCT (0.01s) --- PASS: TestVerifySCT/cert (0.00s) --- PASS: TestVerifySCT/precert (0.00s) --- PASS: TestVerifySCT/invalid_SCT (0.00s) --- PASS: TestVerifySCT/cert_with_embedded_SCT (0.00s) --- PASS: TestVerifySCT/cert_with_invalid_embedded_SCT (0.00s) === RUN TestVerifySCTWithVerifier === RUN TestVerifySCTWithVerifier/nil_signature_verifier === RUN TestVerifySCTWithVerifier/cert === RUN TestVerifySCTWithVerifier/precert === RUN TestVerifySCTWithVerifier/invalid_SCT === RUN TestVerifySCTWithVerifier/cert_with_embedded_SCT === RUN TestVerifySCTWithVerifier/cert_with_invalid_embedded_SCT --- PASS: TestVerifySCTWithVerifier (0.01s) --- PASS: TestVerifySCTWithVerifier/nil_signature_verifier (0.00s) --- PASS: TestVerifySCTWithVerifier/cert (0.00s) --- PASS: TestVerifySCTWithVerifier/precert (0.00s) --- PASS: TestVerifySCTWithVerifier/invalid_SCT (0.00s) --- PASS: TestVerifySCTWithVerifier/cert_with_embedded_SCT (0.00s) --- PASS: TestVerifySCTWithVerifier/cert_with_invalid_embedded_SCT (0.00s) === RUN TestContainsSCT === RUN TestContainsSCT/cert_doesn't_contain_any_SCTs === RUN TestContainsSCT/cert_contains_SCT_but_not_specified_SCT === RUN TestContainsSCT/cert_contains_SCT --- PASS: TestContainsSCT (0.00s) --- PASS: TestContainsSCT/cert_doesn't_contain_any_SCTs (0.00s) --- PASS: TestContainsSCT/cert_contains_SCT_but_not_specified_SCT (0.00s) --- PASS: TestContainsSCT/cert_contains_SCT (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/fulcioverifier/ctutil 0.029s ? github.com/sigstore/cosign/v3/pkg/cosign/git [no test files] ? github.com/sigstore/cosign/v3/pkg/cosign/git/github [no test files] === RUN TestIsGroup === RUN TestIsGroup/valid_project_reference === RUN TestIsGroup/valid_group_reference === RUN TestIsGroup/invalid_reference_-_neither_project_nor_group === RUN TestIsGroup/numeric_project_ID --- PASS: TestIsGroup (0.01s) --- PASS: TestIsGroup/valid_project_reference (0.01s) --- PASS: TestIsGroup/valid_group_reference (0.00s) --- PASS: TestIsGroup/invalid_reference_-_neither_project_nor_group (0.00s) --- PASS: TestIsGroup/numeric_project_ID (0.00s) === RUN TestNew --- PASS: TestNew (0.00s) === RUN TestReferenceScheme --- PASS: TestReferenceScheme (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/git/gitlab 0.045s === RUN TestSecret --- PASS: TestSecret (0.00s) === RUN TestSecretUpdate --- PASS: TestSecretUpdate (0.00s) === RUN TestParseRef === RUN TestParseRef/valid === RUN TestParseRef/invalid,_1_field === RUN TestParseRef/invalid,_more_than_2_fields --- PASS: TestParseRef (0.00s) --- PASS: TestParseRef/valid (0.00s) --- PASS: TestParseRef/invalid,_1_field (0.00s) --- PASS: TestParseRef/invalid,_more_than_2_fields (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/kubernetes 0.047s ? github.com/sigstore/cosign/v3/pkg/cosign/pivkey [no test files] ? github.com/sigstore/cosign/v3/pkg/cosign/pkcs11key [no test files] === RUN TestValidationJSON === RUN TestValidationJSON/passing_policy === RUN TestValidationJSON/undefined_result_due_to_no_matching_rules === RUN TestValidationJSON/policy_query_evaluates_to_false --- PASS: TestValidationJSON (0.01s) --- PASS: TestValidationJSON/passing_policy (0.00s) --- PASS: TestValidationJSON/undefined_result_due_to_no_matching_rules (0.00s) --- PASS: TestValidationJSON/policy_query_evaluates_to_false (0.00s) === RUN FuzzValidateJSON --- PASS: FuzzValidateJSON (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/rego 0.019s === RUN TestFilesFromFlagList === RUN TestFilesFromFlagList/empty === RUN TestFilesFromFlagList/nil === RUN TestFilesFromFlagList/plain === RUN TestFilesFromFlagList/three --- PASS: TestFilesFromFlagList (0.00s) --- PASS: TestFilesFromFlagList/empty (0.00s) --- PASS: TestFilesFromFlagList/nil (0.00s) --- PASS: TestFilesFromFlagList/plain (0.00s) --- PASS: TestFilesFromFlagList/three (0.00s) === RUN TestFileFromFlag === RUN TestFileFromFlag/plain === RUN TestFileFromFlag/os === RUN TestFileFromFlag/os_amd64 --- PASS: TestFileFromFlag (0.00s) --- PASS: TestFileFromFlag/plain (0.00s) --- PASS: TestFileFromFlag/os (0.00s) --- PASS: TestFileFromFlag/os_amd64 (0.00s) === RUN TestUploadFiles === RUN TestUploadFiles/one_file Uploading file from [testdata/foo] to [127.0.0.1:41867/foo/one:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:41867/v2/foo/one/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] === RUN TestUploadFiles/missing_file === RUN TestUploadFiles/two_files_with_platform Uploading file from [testdata/foo] to [127.0.0.1:41867/foo/two-platform:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:41867/v2/foo/two-platform/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] Uploading file from [testdata/bar] to [127.0.0.1:41867/foo/two-platform:latest] with media type [text/plain] File [testdata/bar] is available directly at [127.0.0.1:41867/v2/foo/two-platform/blobs/sha256:7d865e959b2466918c9863afca942d0fb89d7c9ac0c99bafc3749504ded97730] === RUN TestUploadFiles/one_file_with_annotations Uploading file from [testdata/foo] to [127.0.0.1:41867/foo/one-annotations:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:41867/v2/foo/one-annotations/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] === RUN TestUploadFiles/two_files_with_annotations Uploading file from [testdata/foo] to [127.0.0.1:41867/foo/two-annotations:latest] with media type [text/plain] File [testdata/foo] is available directly at [127.0.0.1:41867/v2/foo/two-annotations/blobs/sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c] Uploading file from [testdata/bar] to [127.0.0.1:41867/foo/two-annotations:latest] with media type [text/plain] File [testdata/bar] is available directly at [127.0.0.1:41867/v2/foo/two-annotations/blobs/sha256:7d865e959b2466918c9863afca942d0fb89d7c9ac0c99bafc3749504ded97730] --- PASS: TestUploadFiles (0.05s) --- PASS: TestUploadFiles/one_file (0.01s) --- PASS: TestUploadFiles/missing_file (0.00s) --- PASS: TestUploadFiles/two_files_with_platform (0.01s) --- PASS: TestUploadFiles/one_file_with_annotations (0.00s) --- PASS: TestUploadFiles/two_files_with_annotations (0.02s) === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/missing_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/null_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/object_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/number_payload === RUN TestReplaceOpRejectsNonStringPayloadWithoutPanic/invalid_base64_payload --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/missing_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/null_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/object_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/number_payload (0.00s) --- PASS: TestReplaceOpRejectsNonStringPayloadWithoutPanic/invalid_base64_payload (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/cosign/remote 0.072s ? github.com/sigstore/cosign/v3/pkg/oci [no test files] === RUN TestEmptyImage === RUN TestEmptyImage/unset === RUN TestEmptyImage/set_false === RUN TestEmptyImage/set_true --- PASS: TestEmptyImage (0.00s) --- PASS: TestEmptyImage/unset (0.00s) --- PASS: TestEmptyImage/set_false (0.00s) --- PASS: TestEmptyImage/set_true (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/empty 0.026s === RUN TestSignature === RUN TestSignature/just_payload_and_signature === RUN TestSignature/with_empty_other_keys === RUN TestSignature/missing_signature === RUN TestSignature/min_plus_bad_bundle === RUN TestSignature/min_plus_bad_cert === RUN TestSignature/min_plus_empty_cert === RUN TestSignature/min_plus_bad_chain === RUN TestSignature/min_plus_bundle === RUN TestSignature/min_plus_good_cert === RUN TestSignature/min_plus_bad_chain#01 === RUN TestSignature/payload_size_exceeds_default_limit === RUN TestSignature/payload_size_exceeds_overridden_limit === RUN TestSignature/payload_size_is_within_overridden_limit --- PASS: TestSignature (0.01s) --- PASS: TestSignature/just_payload_and_signature (0.00s) --- PASS: TestSignature/with_empty_other_keys (0.00s) --- PASS: TestSignature/missing_signature (0.00s) --- PASS: TestSignature/min_plus_bad_bundle (0.00s) --- PASS: TestSignature/min_plus_bad_cert (0.00s) --- PASS: TestSignature/min_plus_empty_cert (0.00s) --- PASS: TestSignature/min_plus_bad_chain (0.00s) --- PASS: TestSignature/min_plus_bundle (0.00s) --- PASS: TestSignature/min_plus_good_cert (0.00s) --- PASS: TestSignature/min_plus_bad_chain#01 (0.00s) --- PASS: TestSignature/payload_size_exceeds_default_limit (0.00s) --- PASS: TestSignature/payload_size_exceeds_overridden_limit (0.00s) --- PASS: TestSignature/payload_size_is_within_overridden_limit (0.00s) === RUN TestSignatureWithTSAAnnotation === RUN TestSignatureWithTSAAnnotation/just_payload_and_signature === RUN TestSignatureWithTSAAnnotation/with_empty_other_keys === RUN TestSignatureWithTSAAnnotation/missing_signature === RUN TestSignatureWithTSAAnnotation/min_plus_bad_bundle === RUN TestSignatureWithTSAAnnotation/min_plus_bad_cert === RUN TestSignatureWithTSAAnnotation/min_plus_bad_chain === RUN TestSignatureWithTSAAnnotation/min_plus_RFC3161_timestamp_bundle --- PASS: TestSignatureWithTSAAnnotation (0.01s) --- PASS: TestSignatureWithTSAAnnotation/just_payload_and_signature (0.00s) --- PASS: TestSignatureWithTSAAnnotation/with_empty_other_keys (0.00s) --- PASS: TestSignatureWithTSAAnnotation/missing_signature (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_bad_bundle (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_bad_cert (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_bad_chain (0.00s) --- PASS: TestSignatureWithTSAAnnotation/min_plus_RFC3161_timestamp_bundle (0.01s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/internal/signature 0.054s === RUN TestGet === RUN TestGet/within_limit === RUN TestGet/exceeds_limit --- PASS: TestGet (0.00s) --- PASS: TestGet/within_limit (0.00s) --- PASS: TestGet/exceeds_limit (0.00s) === RUN TestReadWrite --- PASS: TestReadWrite (0.03s) === RUN TestAppendImagePreservesArtifactType --- PASS: TestAppendImagePreservesArtifactType (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/layout 0.063s === RUN TestMapImage === RUN TestMapImage/one_call_to_identity_mutator === RUN TestMapImage/error_propagates === RUN TestMapImage/new_result_image === RUN TestMapImage/filtered_image --- PASS: TestMapImage (0.00s) --- PASS: TestMapImage/one_call_to_identity_mutator (0.00s) --- PASS: TestMapImage/error_propagates (0.00s) --- PASS: TestMapImage/new_result_image (0.00s) --- PASS: TestMapImage/filtered_image (0.00s) === RUN TestMapImageIndex === RUN TestMapImageIndex/six_calls_to_identity_mutator === RUN TestMapImageIndex/just_one_call_to_root_index_w/_ErrSkipChildren === RUN TestMapImageIndex/two_calls_to_mutator_with_IsAfterChildren === RUN TestMapImageIndex/test_filtering_images === RUN TestMapImageIndex/test_filtering_indices === RUN TestMapImageIndex/error_propagates_from_child_image === RUN TestMapImageIndex/error_propagates_from_child_index --- PASS: TestMapImageIndex (0.01s) --- PASS: TestMapImageIndex/six_calls_to_identity_mutator (0.00s) --- PASS: TestMapImageIndex/just_one_call_to_root_index_w/_ErrSkipChildren (0.00s) --- PASS: TestMapImageIndex/two_calls_to_mutator_with_IsAfterChildren (0.00s) --- PASS: TestMapImageIndex/test_filtering_images (0.00s) --- PASS: TestMapImageIndex/test_filtering_indices (0.00s) --- PASS: TestMapImageIndex/error_propagates_from_child_image (0.00s) --- PASS: TestMapImageIndex/error_propagates_from_child_index (0.00s) === RUN TestAppendManifests === RUN TestAppendManifests/unsigned === RUN TestAppendManifests/signed --- PASS: TestAppendManifests (0.03s) --- PASS: TestAppendManifests/unsigned (0.00s) --- PASS: TestAppendManifests/signed (0.00s) === RUN TestSignEntity === RUN TestSignEntity/attach_SBOMs === RUN TestSignEntity/without_duplicate_detector_(signature) === RUN TestSignEntity/without_duplicate_detector_(attestation) === RUN TestSignEntity/with_duplicate_detector_(signature) === RUN TestSignEntity/with_duplicate_detector_(attestation) === RUN TestSignEntity/with_erroring_duplicate_detector_(signature) === RUN TestSignEntity/with_erroring_duplicate_detector_(attestation) === RUN TestSignEntity/with_replace_op_(attestation) --- PASS: TestSignEntity (0.01s) --- PASS: TestSignEntity/attach_SBOMs (0.00s) --- PASS: TestSignEntity/without_duplicate_detector_(signature) (0.00s) --- PASS: TestSignEntity/without_duplicate_detector_(attestation) (0.00s) --- PASS: TestSignEntity/with_duplicate_detector_(signature) (0.00s) --- PASS: TestSignEntity/with_duplicate_detector_(attestation) (0.00s) --- PASS: TestSignEntity/with_erroring_duplicate_detector_(signature) (0.00s) --- PASS: TestSignEntity/with_erroring_duplicate_detector_(attestation) (0.00s) --- PASS: TestSignEntity/with_replace_op_(attestation) (0.00s) === RUN TestSignatureWithAnnotations === RUN TestSignatureWithAnnotations/Payloads_match === RUN TestSignatureWithAnnotations/Base64Signatures_match === RUN TestSignatureWithAnnotations/Bundles_match === RUN TestSignatureWithAnnotations/RFC3161_timestamp_bundles_match === RUN TestSignatureWithAnnotations/Certs_match === RUN TestSignatureWithAnnotations/Chains_match === RUN TestSignatureWithAnnotations/MediaTypes_match === RUN TestSignatureWithAnnotations/Annotations_match === RUN TestSignatureWithAnnotations/DiffIDs_match === RUN TestSignatureWithAnnotations/Sizes_match === RUN TestSignatureWithAnnotations/Compressed_values_match === RUN TestSignatureWithAnnotations/Uncompressed_values_match --- PASS: TestSignatureWithAnnotations (0.00s) --- PASS: TestSignatureWithAnnotations/Payloads_match (0.00s) --- PASS: TestSignatureWithAnnotations/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithAnnotations/Bundles_match (0.00s) --- PASS: TestSignatureWithAnnotations/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithAnnotations/Certs_match (0.00s) --- PASS: TestSignatureWithAnnotations/Chains_match (0.00s) --- PASS: TestSignatureWithAnnotations/MediaTypes_match (0.00s) --- PASS: TestSignatureWithAnnotations/Annotations_match (0.00s) --- PASS: TestSignatureWithAnnotations/DiffIDs_match (0.00s) --- PASS: TestSignatureWithAnnotations/Sizes_match (0.00s) --- PASS: TestSignatureWithAnnotations/Compressed_values_match (0.00s) --- PASS: TestSignatureWithAnnotations/Uncompressed_values_match (0.00s) === RUN TestSignatureWithBundle === RUN TestSignatureWithBundle/Payloads_match === RUN TestSignatureWithBundle/Base64Signatures_match === RUN TestSignatureWithBundle/Bundles_match === RUN TestSignatureWithBundle/RFC3161_timestamp_bundles_match === RUN TestSignatureWithBundle/Certs_match === RUN TestSignatureWithBundle/Chains_match === RUN TestSignatureWithBundle/MediaTypes_match === RUN TestSignatureWithBundle/Annotations_match === RUN TestSignatureWithBundle/DiffIDs_match === RUN TestSignatureWithBundle/Sizes_match === RUN TestSignatureWithBundle/Compressed_values_match === RUN TestSignatureWithBundle/Uncompressed_values_match --- PASS: TestSignatureWithBundle (0.00s) --- PASS: TestSignatureWithBundle/Payloads_match (0.00s) --- PASS: TestSignatureWithBundle/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithBundle/Bundles_match (0.00s) --- PASS: TestSignatureWithBundle/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithBundle/Certs_match (0.00s) --- PASS: TestSignatureWithBundle/Chains_match (0.00s) --- PASS: TestSignatureWithBundle/MediaTypes_match (0.00s) --- PASS: TestSignatureWithBundle/Annotations_match (0.00s) --- PASS: TestSignatureWithBundle/DiffIDs_match (0.00s) --- PASS: TestSignatureWithBundle/Sizes_match (0.00s) --- PASS: TestSignatureWithBundle/Compressed_values_match (0.00s) --- PASS: TestSignatureWithBundle/Uncompressed_values_match (0.00s) === RUN TestSignatureWithRFC3161Timestamp === RUN TestSignatureWithRFC3161Timestamp/Payloads_match === RUN TestSignatureWithRFC3161Timestamp/Base64Signatures_match === RUN TestSignatureWithRFC3161Timestamp/Bundles_match === RUN TestSignatureWithRFC3161Timestamp/RFC3161_timestamp_bundles_match === RUN TestSignatureWithRFC3161Timestamp/Certs_match === RUN TestSignatureWithRFC3161Timestamp/Chains_match === RUN TestSignatureWithRFC3161Timestamp/MediaTypes_match === RUN TestSignatureWithRFC3161Timestamp/Annotations_match === RUN TestSignatureWithRFC3161Timestamp/DiffIDs_match === RUN TestSignatureWithRFC3161Timestamp/Sizes_match === RUN TestSignatureWithRFC3161Timestamp/Compressed_values_match === RUN TestSignatureWithRFC3161Timestamp/Uncompressed_values_match --- PASS: TestSignatureWithRFC3161Timestamp (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Payloads_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Bundles_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Certs_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Chains_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/MediaTypes_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Annotations_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/DiffIDs_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Sizes_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Compressed_values_match (0.00s) --- PASS: TestSignatureWithRFC3161Timestamp/Uncompressed_values_match (0.00s) === RUN TestSignatureWithCertChain === RUN TestSignatureWithCertChain/Payloads_match === RUN TestSignatureWithCertChain/Base64Signatures_match === RUN TestSignatureWithCertChain/Bundles_match === RUN TestSignatureWithCertChain/RFC3161_timestamp_bundles_match === RUN TestSignatureWithCertChain/Certs_match === RUN TestSignatureWithCertChain/Chains_match === RUN TestSignatureWithCertChain/MediaTypes_match === RUN TestSignatureWithCertChain/Annotations_match === RUN TestSignatureWithCertChain/DiffIDs_match === RUN TestSignatureWithCertChain/Sizes_match === RUN TestSignatureWithCertChain/Compressed_values_match === RUN TestSignatureWithCertChain/Uncompressed_values_match --- PASS: TestSignatureWithCertChain (0.00s) --- PASS: TestSignatureWithCertChain/Payloads_match (0.00s) --- PASS: TestSignatureWithCertChain/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithCertChain/Bundles_match (0.00s) --- PASS: TestSignatureWithCertChain/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithCertChain/Certs_match (0.00s) --- PASS: TestSignatureWithCertChain/Chains_match (0.00s) --- PASS: TestSignatureWithCertChain/MediaTypes_match (0.00s) --- PASS: TestSignatureWithCertChain/Annotations_match (0.00s) --- PASS: TestSignatureWithCertChain/DiffIDs_match (0.00s) --- PASS: TestSignatureWithCertChain/Sizes_match (0.00s) --- PASS: TestSignatureWithCertChain/Compressed_values_match (0.00s) --- PASS: TestSignatureWithCertChain/Uncompressed_values_match (0.00s) === RUN TestSignatureWithMediaType === RUN TestSignatureWithMediaType/Payloads_match === RUN TestSignatureWithMediaType/Base64Signatures_match === RUN TestSignatureWithMediaType/Bundles_match === RUN TestSignatureWithMediaType/RFC3161_timestamp_bundles_match === RUN TestSignatureWithMediaType/Certs_match === RUN TestSignatureWithMediaType/Chains_match === RUN TestSignatureWithMediaType/MediaTypes_match === RUN TestSignatureWithMediaType/Annotations_match === RUN TestSignatureWithMediaType/DiffIDs_match === RUN TestSignatureWithMediaType/Sizes_match === RUN TestSignatureWithMediaType/Compressed_values_match === RUN TestSignatureWithMediaType/Uncompressed_values_match --- PASS: TestSignatureWithMediaType (0.00s) --- PASS: TestSignatureWithMediaType/Payloads_match (0.00s) --- PASS: TestSignatureWithMediaType/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithMediaType/Bundles_match (0.00s) --- PASS: TestSignatureWithMediaType/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithMediaType/Certs_match (0.00s) --- PASS: TestSignatureWithMediaType/Chains_match (0.00s) --- PASS: TestSignatureWithMediaType/MediaTypes_match (0.00s) --- PASS: TestSignatureWithMediaType/Annotations_match (0.00s) --- PASS: TestSignatureWithMediaType/DiffIDs_match (0.00s) --- PASS: TestSignatureWithMediaType/Sizes_match (0.00s) --- PASS: TestSignatureWithMediaType/Compressed_values_match (0.00s) --- PASS: TestSignatureWithMediaType/Uncompressed_values_match (0.00s) === RUN TestSignatureWithEverything === RUN TestSignatureWithEverything/Payloads_match === RUN TestSignatureWithEverything/Base64Signatures_match === RUN TestSignatureWithEverything/Bundles_match === RUN TestSignatureWithEverything/RFC3161_timestamp_bundles_match === RUN TestSignatureWithEverything/Certs_match === RUN TestSignatureWithEverything/Chains_match === RUN TestSignatureWithEverything/MediaTypes_match === RUN TestSignatureWithEverything/Annotations_match === RUN TestSignatureWithEverything/DiffIDs_match === RUN TestSignatureWithEverything/Sizes_match === RUN TestSignatureWithEverything/Compressed_values_match === RUN TestSignatureWithEverything/Uncompressed_values_match --- PASS: TestSignatureWithEverything (0.00s) --- PASS: TestSignatureWithEverything/Payloads_match (0.00s) --- PASS: TestSignatureWithEverything/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithEverything/Bundles_match (0.00s) --- PASS: TestSignatureWithEverything/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithEverything/Certs_match (0.00s) --- PASS: TestSignatureWithEverything/Chains_match (0.00s) --- PASS: TestSignatureWithEverything/MediaTypes_match (0.00s) --- PASS: TestSignatureWithEverything/Annotations_match (0.00s) --- PASS: TestSignatureWithEverything/DiffIDs_match (0.00s) --- PASS: TestSignatureWithEverything/Sizes_match (0.00s) --- PASS: TestSignatureWithEverything/Compressed_values_match (0.00s) --- PASS: TestSignatureWithEverything/Uncompressed_values_match (0.00s) === RUN TestSignatureWithEverythingTSA === RUN TestSignatureWithEverythingTSA/Payloads_match === RUN TestSignatureWithEverythingTSA/Base64Signatures_match === RUN TestSignatureWithEverythingTSA/Bundles_match === RUN TestSignatureWithEverythingTSA/RFC3161_timestamp_bundles_match === RUN TestSignatureWithEverythingTSA/Certs_match === RUN TestSignatureWithEverythingTSA/Chains_match === RUN TestSignatureWithEverythingTSA/MediaTypes_match === RUN TestSignatureWithEverythingTSA/Annotations_match === RUN TestSignatureWithEverythingTSA/DiffIDs_match === RUN TestSignatureWithEverythingTSA/Sizes_match === RUN TestSignatureWithEverythingTSA/Compressed_values_match === RUN TestSignatureWithEverythingTSA/Uncompressed_values_match --- PASS: TestSignatureWithEverythingTSA (0.00s) --- PASS: TestSignatureWithEverythingTSA/Payloads_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Base64Signatures_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Bundles_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/RFC3161_timestamp_bundles_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Certs_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Chains_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/MediaTypes_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Annotations_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/DiffIDs_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Sizes_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Compressed_values_match (0.00s) --- PASS: TestSignatureWithEverythingTSA/Uncompressed_values_match (0.00s) === RUN TestSignatureWithEmptyCertChain --- PASS: TestSignatureWithEmptyCertChain (0.00s) === RUN TestAppendSignatures --- PASS: TestAppendSignatures (0.00s) === RUN TestReplaceSignatures --- PASS: TestReplaceSignatures (0.00s) === RUN TestGet === RUN TestGet/within_limit === RUN TestGet/base_exceeds_limit === RUN TestGet/append_exceeds_limit === RUN TestGet/sum_exceeds_limit --- PASS: TestGet (0.00s) --- PASS: TestGet/within_limit (0.00s) --- PASS: TestGet/base_exceeds_limit (0.00s) --- PASS: TestGet/append_exceeds_limit (0.00s) --- PASS: TestGet/sum_exceeds_limit (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/mutate 0.095s ? github.com/sigstore/cosign/v3/pkg/oci/platform [no test files] === RUN TestResolveDigest === RUN TestResolveDigest/digest_doesn't_call_remote.Get === RUN TestResolveDigest/tag_calls_remote.Get === RUN TestResolveDigest/remote.Get_errors_propagate --- PASS: TestResolveDigest (0.00s) --- PASS: TestResolveDigest/digest_doesn't_call_remote.Get (0.00s) --- PASS: TestResolveDigest/tag_calls_remote.Get (0.00s) --- PASS: TestResolveDigest/remote.Get_errors_propagate (0.00s) === RUN TestSignedImage --- PASS: TestSignedImage (0.02s) === RUN TestSignedImageWithAttachment --- PASS: TestSignedImageWithAttachment (1.54s) === RUN TestSignedImageIndex --- PASS: TestSignedImageIndex (0.04s) === RUN TestOptions === RUN TestOptions/no_options === RUN TestOptions/signature_option === RUN TestOptions/attestation_option === RUN TestOptions/sbom_option === RUN TestOptions/target_repo_option === RUN TestOptions/remote_options_option === RUN TestOptions/more_remote_options_option === RUN TestOptions/bundle_options_option --- PASS: TestOptions (0.00s) --- PASS: TestOptions/no_options (0.00s) --- PASS: TestOptions/signature_option (0.00s) --- PASS: TestOptions/attestation_option (0.00s) --- PASS: TestOptions/sbom_option (0.00s) --- PASS: TestOptions/target_repo_option (0.00s) --- PASS: TestOptions/remote_options_option (0.00s) --- PASS: TestOptions/more_remote_options_option (0.00s) --- PASS: TestOptions/bundle_options_option (0.00s) === RUN TestGetEnvTargetRepository === RUN TestGetEnvTargetRepository/good === RUN TestGetEnvTargetRepository/bad === RUN TestGetEnvTargetRepository/empty === RUN TestGetEnvTargetRepository/registry_without_repository_path --- PASS: TestGetEnvTargetRepository (0.00s) --- PASS: TestGetEnvTargetRepository/good (0.00s) --- PASS: TestGetEnvTargetRepository/bad (0.00s) --- PASS: TestGetEnvTargetRepository/empty (0.00s) --- PASS: TestGetEnvTargetRepository/registry_without_repository_path (0.00s) === RUN TestReferrers_NoTargetRepository --- PASS: TestReferrers_NoTargetRepository (0.00s) === RUN TestReferrers_WithTargetRepository --- PASS: TestReferrers_WithTargetRepository (0.00s) === RUN TestReferrers_ArtifactTypeFilter --- PASS: TestReferrers_ArtifactTypeFilter (0.00s) === RUN TestTagMethods === RUN TestTagMethods/signature_passed_a_tag === RUN TestTagMethods/signature_passed_a_tag_(w/_custom_suffix) === RUN TestTagMethods/signature_passed_a_digest === RUN TestTagMethods/attestation_passed_a_tag === RUN TestTagMethods/attestation_passed_a_tag_(w/_custom_suffix) === RUN TestTagMethods/attestation_passed_a_digest === RUN TestTagMethods/sbom_passed_a_tag === RUN TestTagMethods/sbom_passed_a_tag_(w/_custom_suffix) === RUN TestTagMethods/sbom_passed_a_digest --- PASS: TestTagMethods (0.00s) --- PASS: TestTagMethods/signature_passed_a_tag (0.00s) --- PASS: TestTagMethods/signature_passed_a_tag_(w/_custom_suffix) (0.00s) --- PASS: TestTagMethods/signature_passed_a_digest (0.00s) --- PASS: TestTagMethods/attestation_passed_a_tag (0.00s) --- PASS: TestTagMethods/attestation_passed_a_tag_(w/_custom_suffix) (0.00s) --- PASS: TestTagMethods/attestation_passed_a_digest (0.00s) --- PASS: TestTagMethods/sbom_passed_a_tag (0.00s) --- PASS: TestTagMethods/sbom_passed_a_tag_(w/_custom_suffix) (0.00s) --- PASS: TestTagMethods/sbom_passed_a_digest (0.00s) === RUN TestTagMethodErrors === RUN TestTagMethodErrors/signature_passed_a_tag --- PASS: TestTagMethodErrors (0.00s) --- PASS: TestTagMethodErrors/signature_passed_a_tag (0.00s) === RUN TestDockercontentDigest === RUN TestDockercontentDigest/docker_content_digest_for_tag === RUN TestDockercontentDigest/docker_content_digest_for_attestation === RUN TestDockercontentDigest/docker_content_digest_for_SBOM --- PASS: TestDockercontentDigest (0.00s) --- PASS: TestDockercontentDigest/docker_content_digest_for_tag (0.00s) --- PASS: TestDockercontentDigest/docker_content_digest_for_attestation (0.00s) --- PASS: TestDockercontentDigest/docker_content_digest_for_SBOM (0.00s) === RUN TestPayload === RUN TestPayload/within_default_limit === RUN TestPayload/excceds_default_limit === RUN TestPayload/exceeds_overridden_limit === RUN TestPayload/within_overridden_limit --- PASS: TestPayload (0.00s) --- PASS: TestPayload/within_default_limit (0.00s) --- PASS: TestPayload/excceds_default_limit (0.00s) --- PASS: TestPayload/exceeds_overridden_limit (0.00s) --- PASS: TestPayload/within_overridden_limit (0.00s) === RUN TestReadCappedWithinLimit --- PASS: TestReadCappedWithinLimit (0.00s) === RUN TestReadCappedRejectsOversizedPayload --- PASS: TestReadCappedRejectsOversizedPayload (0.00s) === RUN TestReadCappedRejectsDecompressionBomb --- PASS: TestReadCappedRejectsDecompressionBomb (0.20s) === RUN TestSignaturesErrors === RUN TestSignaturesErrors/404_returns_empty === RUN TestSignaturesErrors/other_transport_errors_propagate === RUN TestSignaturesErrors/other_errors_propagate === RUN TestSignaturesErrors/too_many_layers --- PASS: TestSignaturesErrors (0.00s) --- PASS: TestSignaturesErrors/404_returns_empty (0.00s) --- PASS: TestSignaturesErrors/other_transport_errors_propagate (0.00s) --- PASS: TestSignaturesErrors/other_errors_propagate (0.00s) --- PASS: TestSignaturesErrors/too_many_layers (0.00s) === RUN TestSignedUnknown --- PASS: TestSignedUnknown (0.01s) === RUN TestSignedUnknownWithAttachment --- PASS: TestSignedUnknownWithAttachment (0.82s) === RUN TestWriteSignatures --- PASS: TestWriteSignatures (0.01s) === RUN TestWriteAttestations --- PASS: TestWriteAttestations (0.01s) === RUN TestReferrerManifest --- PASS: TestReferrerManifest (0.00s) === RUN TestTaggableManifest --- PASS: TestTaggableManifest (0.00s) === RUN TestWriteAttestationNewBundleFormat --- PASS: TestWriteAttestationNewBundleFormat (0.00s) === RUN TestWriteAttestationsReferrer --- PASS: TestWriteAttestationsReferrer (0.00s) === RUN TestWriteAttestationsReferrerPreservesAnnotations --- PASS: TestWriteAttestationsReferrerPreservesAnnotations (0.00s) === RUN TestWriteReferrer --- PASS: TestWriteReferrer (0.00s) === RUN TestWriteReferrerErrorHandling --- PASS: TestWriteReferrerErrorHandling (0.00s) === RUN TestWriteSignaturesExperimentalOCI Uploading signature for [gcr.io/test/image@sha256:1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef] to [gcr.io/test/image@sha256:29a896c0dabf10be6d6331372505f2b275c32511dc9e972d4a90bddaecf2a123] with config.mediaType [application/vnd.dev.cosign.artifact.sig.v1+json] layers[0].mediaType [application/vnd.dev.cosign.simplesigning.v1+json]. --- PASS: TestWriteSignaturesExperimentalOCI (0.00s) === RUN TestWriteSignedImageIndexImages_BundleUploadOrder --- PASS: TestWriteSignedImageIndexImages_BundleUploadOrder (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/remote 2.664s === RUN TestImage --- PASS: TestImage (0.00s) === RUN TestImageIndex --- PASS: TestImageIndex (0.03s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/signed 0.050s === RUN TestNewFile === RUN TestNewFile/check_size === RUN TestNewFile/check_media_type === RUN TestNewFile/check_hashes === RUN TestNewFile/check_content === RUN TestNewFile/check_date === RUN TestNewFile/check_annotations === RUN TestNewFile/huge_file_payload --- PASS: TestNewFile (0.00s) --- PASS: TestNewFile/check_size (0.00s) --- PASS: TestNewFile/check_media_type (0.00s) --- PASS: TestNewFile/check_hashes (0.00s) --- PASS: TestNewFile/check_content (0.00s) --- PASS: TestNewFile/check_date (0.00s) --- PASS: TestNewFile/check_annotations (0.00s) --- PASS: TestNewFile/huge_file_payload (0.00s) === RUN TestOptions === RUN TestOptions/no_options === RUN TestOptions/with_layer_media_type === RUN TestOptions/with_config_media_type === RUN TestOptions/with_annotations === RUN TestOptions/with_cert_chain === RUN TestOptions/with_bundle === RUN TestOptions/with_RFC3161_timestamp_bundle === RUN TestOptions/with_RFC3161Timestamp_and_Rekor_bundle === RUN TestOptions/with_RFC3161Timestamp_and_Rekor_bundle#01 --- PASS: TestOptions (0.00s) --- PASS: TestOptions/no_options (0.00s) --- PASS: TestOptions/with_layer_media_type (0.00s) --- PASS: TestOptions/with_config_media_type (0.00s) --- PASS: TestOptions/with_annotations (0.00s) --- PASS: TestOptions/with_cert_chain (0.00s) --- PASS: TestOptions/with_bundle (0.00s) --- PASS: TestOptions/with_RFC3161_timestamp_bundle (0.00s) --- PASS: TestOptions/with_RFC3161Timestamp_and_Rekor_bundle (0.00s) --- PASS: TestOptions/with_RFC3161Timestamp_and_Rekor_bundle#01 (0.00s) === RUN TestNewSignatureBasic === RUN TestNewSignatureBasic/check_size === RUN TestNewSignatureBasic/check_media_type === RUN TestNewSignatureBasic/check_hashes === RUN TestNewSignatureBasic/check_content === RUN TestNewSignatureBasic/check_annotations === RUN TestNewSignatureBasic/check_signature_accessors --- PASS: TestNewSignatureBasic (0.00s) --- PASS: TestNewSignatureBasic/check_size (0.00s) --- PASS: TestNewSignatureBasic/check_media_type (0.00s) --- PASS: TestNewSignatureBasic/check_hashes (0.00s) --- PASS: TestNewSignatureBasic/check_content (0.00s) --- PASS: TestNewSignatureBasic/check_annotations (0.00s) --- PASS: TestNewSignatureBasic/check_signature_accessors (0.00s) === RUN TestNewAttestationBasic === RUN TestNewAttestationBasic/check_size === RUN TestNewAttestationBasic/check_media_type === RUN TestNewAttestationBasic/check_hashes === RUN TestNewAttestationBasic/check_content === RUN TestNewAttestationBasic/check_annotations === RUN TestNewAttestationBasic/check_signature_accessors --- PASS: TestNewAttestationBasic (0.00s) --- PASS: TestNewAttestationBasic/check_size (0.00s) --- PASS: TestNewAttestationBasic/check_media_type (0.00s) --- PASS: TestNewAttestationBasic/check_hashes (0.00s) --- PASS: TestNewAttestationBasic/check_content (0.00s) --- PASS: TestNewAttestationBasic/check_annotations (0.00s) --- PASS: TestNewAttestationBasic/check_signature_accessors (0.00s) === RUN TestNewSignatureCertChainAndBundle === RUN TestNewSignatureCertChainAndBundle/check_signature_accessors === RUN TestNewSignatureCertChainAndBundle/check_annotations --- PASS: TestNewSignatureCertChainAndBundle (0.00s) --- PASS: TestNewSignatureCertChainAndBundle/check_signature_accessors (0.00s) --- PASS: TestNewSignatureCertChainAndBundle/check_annotations (0.00s) === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_signature_accessors === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_annotations === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_signature_accessors === RUN TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_rekor_and_tsa_annotations --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_signature_accessors (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_tsa_annotations (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_signature_accessors (0.00s) --- PASS: TestNewSignatureCertChainAndRekorRFC3161Timestamp/check_rekor_and_tsa_annotations (0.00s) === RUN TestNewSignatureBadCertChain === RUN TestNewSignatureBadCertChain/check_signature_accessors --- PASS: TestNewSignatureBadCertChain (0.00s) --- PASS: TestNewSignatureBadCertChain/check_signature_accessors (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/static 0.032s === RUN TestMapImage === RUN TestMapImage/walk_image,_no_errors === RUN TestMapImage/error_propagates --- PASS: TestMapImage (0.00s) --- PASS: TestMapImage/walk_image,_no_errors (0.00s) --- PASS: TestMapImage/error_propagates (0.00s) === RUN TestMapImageIndex === RUN TestMapImageIndex/six_calls_to_identity_mutator --- PASS: TestMapImageIndex (0.01s) --- PASS: TestMapImageIndex/six_calls_to_identity_mutator (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/oci/walk 0.038s === RUN TestFailures --- PASS: TestFailures (0.00s) === RUN TestErroringPayload --- PASS: TestErroringPayload (0.00s) === RUN TestAttestationToPayloadJson --- PASS: TestAttestationToPayloadJson (0.00s) === RUN TestPayloadProvider --- PASS: TestPayloadProvider (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/policy 0.053s ? github.com/sigstore/cosign/v3/pkg/providers [no test files] ? github.com/sigstore/cosign/v3/pkg/providers/all [no test files] ? github.com/sigstore/cosign/v3/pkg/providers/buildkite [no test files] === RUN TestEnvVar === RUN TestEnvVar/true === RUN TestEnvVar/false --- PASS: TestEnvVar (0.00s) --- PASS: TestEnvVar/true (0.00s) --- PASS: TestEnvVar/false (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/providers/envvar 0.005s ? github.com/sigstore/cosign/v3/pkg/providers/filesystem [no test files] === RUN TestProvide_NoDuplicateAuthHeaders error fetching GitHub OIDC token (will retry): Get "http://127.0.0.1:34517?test=1&audience=sigstore": EOF error fetching GitHub OIDC token (will retry): Get "http://127.0.0.1:34517?test=1&audience=sigstore": EOF --- PASS: TestProvide_NoDuplicateAuthHeaders (2.01s) === RUN TestProvide_ErrorResponse === RUN TestProvide_ErrorResponse/non-JSON_body_on_a_failing_status === RUN TestProvide_ErrorResponse/long_error_body_is_truncated === RUN TestProvide_ErrorResponse/empty_error_body === RUN TestProvide_ErrorResponse/malformed_JSON_body_on_success --- PASS: TestProvide_ErrorResponse (0.00s) --- PASS: TestProvide_ErrorResponse/non-JSON_body_on_a_failing_status (0.00s) --- PASS: TestProvide_ErrorResponse/long_error_body_is_truncated (0.00s) --- PASS: TestProvide_ErrorResponse/empty_error_body (0.00s) --- PASS: TestProvide_ErrorResponse/malformed_JSON_body_on_success (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/providers/github 2.017s ? github.com/sigstore/cosign/v3/pkg/providers/google [no test files] === RUN TestGetSocketPath --- PASS: TestGetSocketPath (0.00s) PASS ok github.com/sigstore/cosign/v3/pkg/providers/spiffe 0.010s === RUN TestSignerFromPrivateKeyFileRef === PAUSE TestSignerFromPrivateKeyFileRef === RUN TestPublicKeyFromFileRef === PAUSE TestPublicKeyFromFileRef === RUN TestPublicKeyFromEnvVar --- PASS: TestPublicKeyFromEnvVar (0.22s) === RUN TestSignerVerifierFromEnvVar --- PASS: TestSignerVerifierFromEnvVar (0.49s) === RUN TestVerifierForKeyRefError --- PASS: TestVerifierForKeyRefError (0.00s) === RUN TestPublicKeyFromKeyRefAutoDetectAlgorithm === PAUSE TestPublicKeyFromKeyRefAutoDetectAlgorithm === CONT TestSignerFromPrivateKeyFileRef === CONT TestPublicKeyFromKeyRefAutoDetectAlgorithm === CONT TestPublicKeyFromFileRef === RUN TestSignerFromPrivateKeyFileRef/good_password === PAUSE TestSignerFromPrivateKeyFileRef/good_password === RUN TestSignerFromPrivateKeyFileRef/bad_password === PAUSE TestSignerFromPrivateKeyFileRef/bad_password === CONT TestSignerFromPrivateKeyFileRef/good_password === CONT TestSignerFromPrivateKeyFileRef/bad_password --- PASS: TestPublicKeyFromKeyRefAutoDetectAlgorithm (0.03s) --- PASS: TestPublicKeyFromFileRef (0.24s) --- PASS: TestSignerFromPrivateKeyFileRef (0.00s) --- PASS: TestSignerFromPrivateKeyFileRef/bad_password (0.45s) --- PASS: TestSignerFromPrivateKeyFileRef/good_password (0.45s) PASS ok github.com/sigstore/cosign/v3/pkg/signature 1.213s ? github.com/sigstore/cosign/v3/pkg/types [no test files] ? github.com/sigstore/cosign/v3/test/cmd/getoidctoken [no test files] >>> cosign: Entering fakeroot... >>> cosign-bash-completion*: Running split function bashcomp... 'usr/share/bash-completion/completions' -> '/home/buildozer/aports/community/cosign/pkg/cosign-bash-completion/usr/share/bash-completion/completions' >>> cosign-bash-completion*: Preparing subpackage cosign-bash-completion... >>> cosign-bash-completion*: Running postcheck for cosign-bash-completion >>> cosign-fish-completion*: Running split function fishcomp... 'usr/share/fish/vendor_completions.d' -> '/home/buildozer/aports/community/cosign/pkg/cosign-fish-completion/usr/share/fish/vendor_completions.d' >>> cosign-fish-completion*: Preparing subpackage cosign-fish-completion... >>> cosign-fish-completion*: Running postcheck for cosign-fish-completion >>> cosign-zsh-completion*: Running split function zshcomp... 'usr/share/zsh/site-functions' -> '/home/buildozer/aports/community/cosign/pkg/cosign-zsh-completion/usr/share/zsh/site-functions' >>> cosign-zsh-completion*: Preparing subpackage cosign-zsh-completion... >>> cosign-zsh-completion*: Running postcheck for cosign-zsh-completion >>> cosign*: Running postcheck for cosign >>> cosign*: Preparing package cosign... >>> cosign*: Stripping binaries >>> cosign*: Scanning shared objects >>> cosign*: Tracing dependencies... pcsc-lite-libs so:libc.musl-ppc64le.so.1 >>> cosign*: Package size: 109.9 MB >>> cosign*: Compressing data... >>> cosign*: Create checksum... >>> cosign*: Create cosign-3.1.4-r0.apk >>> cosign-bash-completion*: Tracing dependencies... >>> cosign-bash-completion*: Package size: 122.1 KB >>> cosign-bash-completion*: Compressing data... >>> cosign-bash-completion*: Create checksum... >>> cosign-bash-completion*: Create cosign-bash-completion-3.1.4-r0.apk >>> cosign-fish-completion*: Tracing dependencies... >>> cosign-fish-completion*: Package size: 9.5 KB >>> cosign-fish-completion*: Compressing data... >>> cosign-fish-completion*: Create checksum... >>> cosign-fish-completion*: Create cosign-fish-completion-3.1.4-r0.apk >>> cosign-zsh-completion*: Tracing dependencies... >>> cosign-zsh-completion*: Package size: 7.6 KB >>> cosign-zsh-completion*: Compressing data... >>> cosign-zsh-completion*: Create checksum... >>> cosign-zsh-completion*: Create cosign-zsh-completion-3.1.4-r0.apk >>> cosign: Build complete at Tue, 03 Nov 2026 16:55:59 +0000 elapsed time 0h 2m 26s >>> cosign: Cleaning up srcdir >>> cosign: Cleaning up pkgdir >>> cosign: Uninstalling dependencies... (1/7) Purging .makedepends-cosign (20261103.165334) (2/7) Purging go (1.27.3-r0) (3/7) Purging pcsc-lite-dev (2.5.2-r0) (4/7) Purging eudev-dev (3.2.14-r8) (5/7) Purging eudev-libs (3.2.14-r8) (6/7) Purging pcsc-lite-libs (2.5.2-r0) (7/7) Purging pcsc-lite-spy-libs (2.5.2-r0) Executing busybox-1.38.0-r8.trigger OK: 289.9 MiB in 106 packages >>> cosign: Updating the community/ppc64le repository index... >>> cosign: Signing the index...