znewman01

cosign sign --key cosign.key ttl.sh/zjn-test@sha256:02bb6f428431fbc2809c5d1b41eab5a68350194fb508869a33cb1af4444c9b11                                              ~/Downloads
Enter password for private key:

	Note that there may be personally identifiable information associated with this signed artifact.
	This may include the email address associated with the account with which you authenticate.
	This information will be used for signing this artifact and will be stored in public transparency logs and cannot be removed later.

By typing 'y', you attest that you grant (or have permission to grant) and agree to have this information stored permanently in transparency logs.
Are you sure you would like to continue? [y/N] y
tlog entry created with index: 22423838

znewman01

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89256029140370801081096059293657085192861219037 (0xfa260f7140dfbe5213143605f656bc14ffd78dd)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Feb 27 19:55:58 2023 UTC
            Not After : Feb 27 20:05:58 2023 UTC
        Subject:

znewman01

#!/usr/bin/env bash

tmpdir=$(mktemp -d)

for f in $(find doc/ -name '*verify*'); do
    grep -o -- '--[a-z0-9-]*' $f | sort -u | tr -d ' \t ' > $tmpdir/$(basename $f).flags
done

total=$(ls $tmpdir | wc -l)

znewman01

#!/usr/bin/env nix-shell
#!nix-shell -i bash -p step-cli cosign crane

set -eu


REPO=ttl.sh/$(whoami)-test
IMAGE=$REPO:15m
COSIGN=cosign

znewman01

{"body":"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

znewman01

{"apiVersion":"0.0.1","spec":{"data":{"hash":{"algorithm":"sha256","value":"2e07a09219d831fd0193e6176d3a09a489f1f601657e13b5b89e8d36536f91cf"}},"signature":{"content":"MEQCIBegNVAfmVLratPX81Eb8216In2uZ+5sWNe76tqHkQsuAiBe1EbnTBSsMex8rZkN+bbVdte1OKyW2oyMw4BlsJTW1w==","publicKey":{"content":"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

znewman01

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319504054616999573366109868063946115769004630327 (0x37f70eac2af16f7c708881885b1c0f7cfd06a137)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Oct 20 23:50:00 2022 UTC
            Not After : Oct 21 00:00:00 2022 UTC
        Subject:

znewman01

{"publicKey":{"content":"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEf2+fYNcgFixnEu/szw1e6NpaR85qhZxWZN4nNhAR/kEmJp/hHMkXDIIaNX7UaEsaziXx8crDFQ1bhmV3LvMquQ==","algorithm":"ecdsa"},"signedEmailAddress":"MEUCIQDBo6190831GsVZNDKG8gmPyTKPozoxPIRXQ0YqFpHfmQIgSYk0vGRJHQMd52IEJPgEn7338Ogm6a0fWnlaevInIOY=","certificateSigningRequest":null}

znewman01

HEADER
{
  "alg": "RS256",
  "kid": "0670f2c4d2c19fdf7486d96eccf02a9d4d26bd9b"
}

PAYLOAD
{
  "iss": "https://oauth2.sigstore.dev/auth",
  "sub": "ChUxMTgyNzEzMjI1MTUzNjExMDk2MzESH2h0dHBzOiUyRiUyRmFjY291bnRzLmdvb2dsZS5jb20",

znewman01

{"body":"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