Merge pull request #156 from sigstore/sign/update-targets-1

Signing event: sign/update-targets-1
sigstore · Aug 22, 2024 · 78539ea · 78539ea
2 parents 669a9a0 + efae879
commit 78539ea
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 45 deletions.
diff --git a/metadata/targets.json b/metadata/targets.json
@@ -2,15 +2,15 @@
  "signatures": [
   {
    "keyid": "aa61e09f6af7662ac686cf0c6364079f63d3e7a86836684eeced93eace3acd81",
-   "sig": "3045022100dd42894f3adbe36abd77afa88e12a80afcd38ea5a0260846925be7624b6bc71502203d8432cdd4c59bd252aa669fc3c24ca7962542d8abbedca5285c598960194c89"
+   "sig": "304402203f89e05c54973899bf015a08c00d744cc0818a9e3c6980008575f04c2627403f022023fc5180d86aee481ab0e1e69a8d92e3638d9c99ed2bb011e8baabdc82cea4f2"
   },
   {
    "keyid": "61f9609d2655b346fcebccd66b509d5828168d5e447110e261f0bcc8553624bc",
-   "sig": "304402205fb84808751d1d47960a1ad14f4dba03fd72caa37f15c3717bf31b491dde4ed202202da6aa0ba9ac6af481469d0e773fb361d543cd3d20a6f40d3b148f458c0fca3a"
+   "sig": "30450220355067220c692679e82e17f77d6f59ca6bdaf974b89f84b98a7e25a7e12463f00221008c9ca0e41233ea47e4af1248a6ac2cb0ba1cc49ae8f09b2681bab2b8d5df4b8d"
   },
   {
    "keyid": "9471fbda95411d10109e467ad526082d15f14a38de54ea2ada9687ab39d8e237",
-   "sig": "30450220459bc0645d06737a689d8f9b52e9fe4d127c9567b5c4a0d08ffb38fc245620ac022100a2875988c9d01a859d7dd944f12c3b23155e52d5bc866af2ad4ae9381e92589c"
+   "sig": "30440220696c3ec3317074351cedf1b3ff3ba56bdaf67f22a67de6a5566c572084a7aa6102205517c17a89c1e48a343da81ad1f48840313a83f0d258fd7a283ac04d32880bdf"
   },
   {
    "keyid": "0374a9e18a20a2103736cb4277e2fdd7f8453642c7d9eaf4ad8aee9cf2d47bb5",
@@ -44,7 +44,7 @@
     }
    ]
   },
-  "expires": "2034-06-29T11:52:41Z",
+  "expires": "2034-08-19T11:26:58Z",
   "spec_version": "1.0",
   "targets": {
    "ctfe.pub": {
@@ -56,8 +56,7 @@
      }
     },
     "hashes": {
-     "sha256": "bd7a6812a1f239dfddbbb19d36c7423d21510da56d466ba5018401959cd66037",
-     "sha512": "b861189e48df51186a39612230fba6b02af951f7b35ad9375e8ca182d0e085d470e26d69f7cd4d7450a0f223991e8e5a4ddf8f1968caa15255de8e37035af43a"
+     "sha256": "bd7a6812a1f239dfddbbb19d36c7423d21510da56d466ba5018401959cd66037"
     },
     "length": 775
    },
@@ -70,8 +69,7 @@
      }
     },
     "hashes": {
-     "sha256": "910d899c7763563095a0fe684c8477573fedc19a78586de6ecfbfd8f289f5423",
-     "sha512": "ab975a75600fc366a837536d0dcba841b755552d21bb114498ff8ac9d2403f76643f5b91269bce5d124a365514719a3edee9dcc2b046cb173f51af659911fcd3"
+     "sha256": "910d899c7763563095a0fe684c8477573fedc19a78586de6ecfbfd8f289f5423"
     },
     "length": 178
    },
@@ -84,8 +82,7 @@
      }
     },
     "hashes": {
-     "sha256": "7054b4f15f969daca1c242bb9e77527abaf0b9acf9818a2a35144e4b32b20dc6",
-     "sha512": "3d035f94e1b14ac84627a28afdbed9a34861fb84239f76d73aa1a99f52262bfd95c4fa0ee71f1fd7e3bfb998d89cd5e0f0eafcff9fa7fa87c6e23484fc1e0cec"
+     "sha256": "7054b4f15f969daca1c242bb9e77527abaf0b9acf9818a2a35144e4b32b20dc6"
     },
     "length": 178
    },
@@ -98,8 +95,7 @@
      }
     },
     "hashes": {
-     "sha256": "0e6b0442485ad552bea5f62f11c29e2acfda35307d7538430b4cc1dbef49bff1",
-     "sha512": "c69ae618883a0c89c282c0943a1ad0c16b0a7788f74e47a1adefc631dac48a0c4449d8c3de7455ae7d772e43c4a87e341f180b0614a46a86006969f8a7b84532"
+     "sha256": "0e6b0442485ad552bea5f62f11c29e2acfda35307d7538430b4cc1dbef49bff1"
     },
     "length": 741
    },
@@ -112,8 +108,7 @@
      }
     },
     "hashes": {
-     "sha256": "782868913fe13c385105ddf33e827191386f58da40a931f2075a7e27b1b6ac7b",
-     "sha512": "90659875a02f73d1026055427c6d857c556e410e23748ff88aeb493227610fd2f5fbdd95ef2a21565f91438dfb3e073f50c4c9dd06f9a601b5d9b064d5cb60b4"
+     "sha256": "782868913fe13c385105ddf33e827191386f58da40a931f2075a7e27b1b6ac7b"
     },
     "length": 790
    },
@@ -126,20 +121,24 @@
      }
     },
     "hashes": {
-     "sha256": "1d80b8f72505a43e65e6e125247cd508f61b459dc457c1d1bcb78d96e1760959",
-     "sha512": "09ab08698a67354a95d3b8897d9ce7eaef05f06f5ed5f0202d79c228579858ecc5816b7e1b7cc6786abe7d6aaa758e1fcb05900cb749235186c3bf9522d6d7ce"
+     "sha256": "1d80b8f72505a43e65e6e125247cd508f61b459dc457c1d1bcb78d96e1760959"
     },
     "length": 178
    },
+   "signing_config.json": {
+    "hashes": {
+     "sha256": "e301842326b000d5cc8748332a2be22c8c5c7b017d0804cb838437cf4dc76312"
+    },
+    "length": 149
+   },
    "trusted_root.json": {
     "hashes": {
-     "sha256": "99f4f7728a889fa7db2fec893c387714a64aaf032fbe3035909fc8445effb857",
-     "sha512": "acf0438a71de70bbf1813c908545281e0c4a1e3aafa2ce36b82c1cc24a9cce5169e9dcfe85c31bb4f662e94fdd9a686fa54fbbfccff1888e51ebd73924c12495"
+     "sha256": "dcfe574b24f4e182c5350ffc9486e472170be0aad4146637f678d1d8da910ea2"
     },
-    "length": 7256
+    "length": 4581
    }
   },
-  "version": 9,
+  "version": 10,
   "x-tuf-on-ci-expiry-period": 3650,
   "x-tuf-on-ci-signing-period": 365
  }

diff --git a/targets/signing_config.json b/targets/signing_config.json
@@ -0,0 +1,7 @@
+{
+  "caUrl": "https://fulcio.sigstage.dev",
+  "oidcUrl": "https://oauth2.sigstage.dev/auth/",
+  "tlogUrls": [
+    "https://rekor.sigstage.dev"
+  ]
+}
diff --git a/targets/trusted_root.json b/targets/trusted_root.json
@@ -83,30 +83,5 @@
         "keyId": "KzC83GiIyeLh2CYpXnQfSDkxlgLynDPLXkNA/rKshno="
       }
     }
-  ],
-  "timestampAuthorities": [
-    {
-      "subject": {
-        "organization": "GitHub, Inc.",
-        "commonName": "Internal Services Root - staging"
-      },
-      "uri": "tsa.github.internal",
-      "certChain": {
-        "certificates": [
-          {
-            "rawBytes": "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"
-          },
-          {
-            "rawBytes": "MIICNzCCAb6gAwIBAgIUUXRsBKgGXjrJbdJCQPJMsjfyJcYwCgYIKoZIzj0EAwMwQjEVMBMGA1UEChMMR2l0SHViLCBJbmMuMSkwJwYDVQQDEyBJbnRlcm5hbCBTZXJ2aWNlcyBSb290IC0gc3RhZ2luZzAeFw0yMzA2MTQwMDAwMDBaFw0yODA2MTIwMDAwMDBaMDwxFTATBgNVBAoTDEdpdEh1YiwgSW5jLjEjMCEGA1UEAxMaVFNBIGludGVybWVkaWF0ZSAtIHN0YWdpbmcwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAS/upihrvu/9+w1Ybfog3B1a8KfQa1bn7DLcJz2iumo+oCfg2bcbyRWygu8zRmrzJKp4HgQHC4LZJEEWm/MNIN1o6wVVmiDTZw01tk4aInmRVF13VKMscdzW5Ho4sYaeOejezB5MA4GA1UdDwEB/wQEAwIBBjATBgNVHSUEDDAKBggrBgEFBQcDCDASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBQKalDOsHqECeWLMbHfsuuEoTOxPjAfBgNVHSMEGDAWgBR04GYtT79vaQmAEPPEte8q+W1KRTAKBggqhkjOPQQDAwNnADBkAjBOTWZP1QYnmHpFqL73eSzhmSLiHs9pXsQghK0p8pvlAg0R9bxAyXGIZ8qx+k2iIGcCMDRQIScz0gu2Xef3++p2vFYouBsIKbqxv0raJuIlmGiYEvb22MDpAitevKAgqNVMEg=="
-          },
-          {
-            "rawBytes": "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"
-          }
-        ]
-      },
-      "validFor": {
-        "start": "2023-06-15T00:00:00Z"
-      }
-    }
   ]
 }