From 6fae4c8095b92d6a045d29af9d83f18913041877 Mon Sep 17 00:00:00 2001 From: Jussi Kukkonen Date: Fri, 17 May 2024 10:25:13 +0300 Subject: [PATCH] SigstoreKey: Handle import errors like Signer Note that this still raises VerificationError just like before (and not UnsupportedLibraryError like Signers do). --- securesystemslib/signer/_sigstore_signer.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/securesystemslib/signer/_sigstore_signer.py b/securesystemslib/signer/_sigstore_signer.py index 67549a25..d14358ff 100644 --- a/securesystemslib/signer/_sigstore_signer.py +++ b/securesystemslib/signer/_sigstore_signer.py @@ -65,7 +65,10 @@ def verify_signature(self, signature: Signature, data: bytes) -> None: from sigstore.models import Bundle from sigstore.verify import Verifier from sigstore.verify.policy import Identity + except ImportError as e: + raise VerificationError(IMPORT_ERROR) from e + try: verifier = Verifier.production() identity = Identity( identity=self.keyval["identity"], issuer=self.keyval["issuer"]