Skip to content

Update test_verify[PATH-intoto-log-entry-mismatch_fail #228

@loosebazooka

Description

@loosebazooka

from #227

test assets: https://github.com/sigstore/sigstore-conformance/tree/main/test/assets/bundle-verify/intoto-log-entry-mismatch_fail

test_verify[PATH-intoto-log-entry-mismatch_fail]: I can't tell if this error message is right or the test data is wrong

 2025/07/10 16:15:23 validation error: entry body is not a recognizable Rekor v1 or
 Rekor v2 type: could not verify envelope: unable to base64 decode payload (is 
 payload in the right format?) 

it does look like the payload is double base64 encoded (was this a manually created object?)

okay, so looking a little deeper into it, it's the double base64 encoded value of the original payload. I'm not sure exactly why that was done, but the client appears to be inspecting the canonicalizedBody and failing (perhaps this was missing when the test was written).

test the log entry, it does appear to be valid entry though. So this test is kind of okay, but maybe has lost its value over time and needs to be redone

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions