Update the embedded TUF metadata. (#1251)

dlorenc · web-flow · commit 894a3bcb8162 · 2021-12-25T05:29:53.000-06:00
The rekor.json and staging.json files weren't in here before.

Signed-off-by: Dan Lorenc &lt;lorenc.d@gmail.com&gt;
diff --git a/pkg/cosign/tuf/repository/rekor.json b/pkg/cosign/tuf/repository/rekor.json
@@ -0,0 +1,23 @@
+{
+	"signatures": [
+		{
+			"keyid": "ae0c689c6347ada7359df48934991f4e013193d6ddf3482a5ffb293f74f3b217",
+			"sig": "3045022076eadd73f6664bac5cc91f12d3a7ddcdd53f9bde661f147651196ff66e7235d1022100f7b3143792405f9e8a75331a05d4128bdf083de302801e99c3d027919a4b03da"
+		}
+	],
+	"signed": {
+		"_type": "targets",
+		"expires": "2022-05-11T19:10:11Z",
+		"spec_version": "1.0",
+		"targets": {
+			"rekor.0.pub": {
+				"hashes": {
+					"sha256": "dce5ef715502ec9f3cdfd11f8cc384b31a6141023d3e7595e9908a81cb6241bd",
+					"sha512": "0ae7705e02db33e814329746a4a0e5603c5bdcd91c96d072158d71011a2695788866565a2fec0fe363eb72cbcaeda39e54c5fe8d416daf9f3101fdba4217ef35"
+				},
+				"length": 178
+			}
+		},
+		"version": 1
+	}
+}
diff --git a/pkg/cosign/tuf/repository/snapshot.json b/pkg/cosign/tuf/repository/snapshot.json
@@ -2,12 +2,12 @@
 	"signatures": [
 		{
 			"keyid": "fc61191ba8a516fe386c7d6c97d918e1d241e1589729add09b122725b8c32451",
-			"sig": "30460221008e1bb65e41e77edc8b6ef71697dfcf363ce34bcc3400f5f5fa38fbd2de13c689022100bf6c20f73999851a63e51a3e6b9befa0fd49052bbc960636c04fac8adcc5f116"
+			"sig": "3046022100f59f6f92d8c61519afd0de0642ff45419ac960954cf412549874c247c6ae509902210085da85c9df818c3072c0b7744b75e92d2ee521402d4bac77c985b8fc6d138e41"
 		}
 	],
 	"signed": {
 		"_type": "snapshot",
-		"expires": "2021-12-28T20:16:09Z",
+		"expires": "2022-01-05T00:40:06Z",
 		"meta": {
 			"rekor.json": {
 				"hashes": {
@@ -43,6 +43,6 @@
 			}
 		},
 		"spec_version": "1.0",
-		"version": 4
+		"version": 6
 	}
 }
diff --git a/pkg/cosign/tuf/repository/staging.json b/pkg/cosign/tuf/repository/staging.json
@@ -0,0 +1,15 @@
+{
+	"signatures": [
+		{
+			"keyid": "b811bd53f2d7adcf5d93e6bb4a8ed2e0ca0f83d454a3e51f105c8e8376bc80d4",
+			"sig": "304502204486f7b23eadb69df87776ac7a4938ac75a8a2b2e93c84c05d962373837ea91c022100aaeb0fa587430f49618711bb4bd0c1092637c22c223d03c0f1b5a09baea0ed9f"
+		}
+	],
+	"signed": {
+		"_type": "targets",
+		"expires": "2022-02-11T20:10:16Z",
+		"spec_version": "1.0",
+		"targets": {},
+		"version": 1
+	}
+}
diff --git a/pkg/cosign/tuf/repository/targets/artifact.pub b/pkg/cosign/tuf/repository/targets/artifact.pub
@@ -1,4 +1,4 @@
 -----BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEZxAfzrQG1EbWyCI8LiSB7YgSFXoI
-FNGTyQGKHFc6/H8TQumT9VLS78pUwtv3w7EfKoyFZoP32KrO7nzUy2q6Cw==
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEhyQCx0E9wQWSFI9ULGwy3BuRklnt
+IqozONbbdbqz11hlRJy9c7SG+hdcFl9jE9uE/dwtuwU2MqU9T/cN0YkWww==
 -----END PUBLIC KEY-----
diff --git a/pkg/cosign/tuf/repository/targets/rekor.0.pub b/pkg/cosign/tuf/repository/targets/rekor.0.pub
@@ -1,5 +1,4 @@
-
 -----BEGIN PUBLIC KEY-----
 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2G2Y+2tabdTV5BcGiBIx0a9fAFwr
 kBbmLSGtks4L3qX6yYY0zufBnhC8Ur/iy55GhWP/9A/bY2LhC30M9+RYtw==
------END PUBLIC KEY-----
+-----END PUBLIC KEY-----
diff --git a/pkg/cosign/tuf/repository/timestamp.json b/pkg/cosign/tuf/repository/timestamp.json
@@ -2,23 +2,23 @@
 	"signatures": [
 		{
 			"keyid": "b6710623a30c010738e64c5209d367df1c0a18cf90e6ab5292fb01680f83453d",
-			"sig": "3046022100f338d7fd499b09c19263e8bbb9ab75e2b0ea88cf37dda5845999110d122e96d9022100b4deaf107f9df1da52dba9fb302aa8196e697d09bb97d07f0ac8d5dce5cb32df"
+			"sig": "30440220590dc4d9eb4e3b2745315348c1ea5481f29f981dfd6c2d72bde13256a25e0caf02205704352c828451bf1e41bba154db9ecb4e901b4bc47d721a91fabfb84a48c61f"
 		}
 	],
 	"signed": {
 		"_type": "timestamp",
-		"expires": "2021-12-28T20:16:10Z",
+		"expires": "2022-01-05T00:40:07Z",
 		"meta": {
 			"snapshot.json": {
 				"hashes": {
-					"sha256": "cbd07f1284315c3cddf2c478dcf97c33e45b7ec2d840d145f3a50c1754091242",
-					"sha512": "b6cfac25a0da3b7263f3bdb201453d6202849b649f4e89a4542699d437804217f7022e206e2fc49b7e42157093428a06889ff8375a35b8827e40bd81ccfa2b89"
+					"sha256": "e202c20580ac4edc7a52ad2bcbe97c5af557c04463f10f2d9a28e2624e0c8edf",
+					"sha512": "f0b9f17797fe6d89a745f8fc9a39a073823bc04400307711eebe3b00dfe418e4d1d4419697eee29445c9cd5e03c3e24532d4fb03824d7555ecc0de54bd73ffd1"
 				},
 				"length": 1658,
-				"version": 4
+				"version": 6
 			}
 		},
 		"spec_version": "1.0",
-		"version": 4
+		"version": 6
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -2,12 +2,12 @@`
`2`	`2`	`"signatures": [`
`3`	`3`	`{`
`4`	`4`	`"keyid": "fc61191ba8a516fe386c7d6c97d918e1d241e1589729add09b122725b8c32451",`
`5`		`- "sig": "30460221008e1bb65e41e77edc8b6ef71697dfcf363ce34bcc3400f5f5fa38fbd2de13c689022100bf6c20f73999851a63e51a3e6b9befa0fd49052bbc960636c04fac8adcc5f116"`
	`5`	`+ "sig": "3046022100f59f6f92d8c61519afd0de0642ff45419ac960954cf412549874c247c6ae509902210085da85c9df818c3072c0b7744b75e92d2ee521402d4bac77c985b8fc6d138e41"`
`6`	`6`	`}`
`7`	`7`	`],`
`8`	`8`	`"signed": {`
`9`	`9`	`"_type": "snapshot",`
`10`		`- "expires": "2021-12-28T20:16:09Z",`
	`10`	`+ "expires": "2022-01-05T00:40:06Z",`
`11`	`11`	`"meta": {`
`12`	`12`	`"rekor.json": {`
`13`	`13`	`"hashes": {`
`@@ -43,6 +43,6 @@`
`43`	`43`	`}`
`44`	`44`	`},`
`45`	`45`	`"spec_version": "1.0",`
`46`		`- "version": 4`
	`46`	`+ "version": 6`
`47`	`47`	`}`
`48`	`48`	`}`