Skip to content

Require new bundle format for image signing and verification - #5093

Draft
aaronlew02 wants to merge 18 commits into
sigstore:mainfrom
aaronlew02:nbf-image
Draft

Require new bundle format for image signing and verification#5093
aaronlew02 wants to merge 18 commits into
sigstore:mainfrom
aaronlew02:nbf-image

Conversation

@aaronlew02

Copy link
Copy Markdown
Contributor

Summary

Release Note

Documentation

@codecov

codecov Bot commented Sep 2, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 53.70920% with 156 lines in your changes missing coverage. Please review.
✅ Project coverage is 41.24%. Comparing base (2ef6022) to head (64ca751).
⚠️ Report is 830 commits behind head on main.

Files with missing lines Patch % Lines
cmd/cosign/cli/attest_blob.go 34.61% 17 Missing ⚠️
cmd/cosign/cli/verify/verify_blob_attestation.go 63.15% 7 Missing and 7 partials ⚠️
cmd/cosign/cli/sign.go 27.77% 12 Missing and 1 partial ⚠️
cmd/cosign/cli/signblob.go 47.82% 12 Missing ⚠️
cmd/cosign/cli/signcommon/common.go 87.09% 11 Missing and 1 partial ⚠️
cmd/cosign/cli/verify/verify.go 42.10% 10 Missing and 1 partial ⚠️
cmd/cosign/cli/attest.go 0.00% 9 Missing and 1 partial ⚠️
cmd/cosign/cli/verify/common.go 56.52% 8 Missing and 2 partials ⚠️
cmd/cosign/cli/sign/sign_blob.go 35.71% 7 Missing and 2 partials ⚠️
cmd/cosign/cli/sign/sign.go 0.00% 8 Missing ⚠️
... and 11 more
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #5093      +/-   ##
==========================================
+ Coverage   40.10%   41.24%   +1.14%     
==========================================
  Files         155      207      +52     
  Lines       10044    12389    +2345     
==========================================
+ Hits         4028     5110    +1082     
- Misses       5530     6612    +1082     
- Partials      486      667     +181     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@aaronlew02
aaronlew02 force-pushed the nbf-image branch 5 times, most recently from 088bd4d to 64ca751 Compare September 2, 2026 18:25
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
…ditable

Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
…ning

Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant