-
Notifications
You must be signed in to change notification settings - Fork 16
Description
from #227
test assets: https://github.com/sigstore/sigstore-conformance/tree/main/test/assets/bundle-verify/intoto-log-entry-mismatch_fail
test_verify[PATH-intoto-log-entry-mismatch_fail]: I can't tell if this error message is right or the test data is wrong
2025/07/10 16:15:23 validation error: entry body is not a recognizable Rekor v1 or Rekor v2 type: could not verify envelope: unable to base64 decode payload (is payload in the right format?)
it does look like the payload is double base64 encoded (was this a manually created object?)
okay, so looking a little deeper into it, it's the double base64 encoded value of the original payload. I'm not sure exactly why that was done, but the client appears to be inspecting the canonicalizedBody and failing (perhaps this was missing when the test was written).
test the log entry, it does appear to be valid entry though. So this test is kind of okay, but maybe has lost its value over time and needs to be redone