Description

The @sigstore/sign package is incompatible with Bun runtime. Bun uses BoringSSL, which requires an explicit digest algorithm for EC key signing.

Reproduction:

1. Use @sigstore/sign with Bun runtime
2. Attempt to sign with the ephemeral signer
3. BoringSSL throws an error

Version

@sigstore/[email protected]