Diff of the two buildlogs:
--
--- b1/build.log 2025-01-23 14:13:44.851114686 +0000
+++ b2/build.log 2025-01-23 14:16:47.138856595 +0000
@@ -1,6 +1,6 @@
I: pbuilder: network access will be disabled during build
-I: Current time: Thu Jan 23 02:11:15 -12 2025
-I: pbuilder-time-stamp: 1737641475
+I: Current time: Thu Feb 26 10:36:49 +14 2026
+I: pbuilder-time-stamp: 1772051809
I: Building the build Environment
I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
I: copying local configuration
@@ -22,52 +22,84 @@
dpkg-source: info: unpacking sigstore-go_0.6.2-3.debian.tar.xz
I: Not using root during the build.
I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/2352738/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/D01_modify_environment starting
+debug: Running on codethink03-arm64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Feb 25 20:36 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/D02_print_environment starting
I: set
- BUILDDIR='/build/reproducible-path'
- BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
- BUILDUSERNAME='pbuilder1'
- BUILD_ARCH='arm64'
- DEBIAN_FRONTEND='noninteractive'
+ BASH=/bin/sh
+ BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+ BASH_ALIASES=()
+ BASH_ARGC=()
+ BASH_ARGV=()
+ BASH_CMDS=()
+ BASH_LINENO=([0]="12" [1]="0")
+ BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+ BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+ BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu")
+ BASH_VERSION='5.2.37(1)-release'
+ BUILDDIR=/build/reproducible-path
+ BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+ BUILDUSERNAME=pbuilder2
+ BUILD_ARCH=arm64
+ DEBIAN_FRONTEND=noninteractive
DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 '
- DISTRIBUTION='unstable'
- HOME='/root'
- HOST_ARCH='arm64'
+ DIRSTACK=()
+ DISTRIBUTION=unstable
+ EUID=0
+ FUNCNAME=([0]="Echo" [1]="main")
+ GROUPS=()
+ HOME=/root
+ HOSTNAME=i-capture-the-hostname
+ HOSTTYPE=aarch64
+ HOST_ARCH=arm64
IFS='
'
- INVOCATION_ID='d5805c6faf634000b8620d2c8253175e'
- LANG='C'
- LANGUAGE='en_US:en'
- LC_ALL='C'
- MAIL='/var/mail/root'
- OPTIND='1'
- PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
- PBCURRENTCOMMANDLINEOPERATION='build'
- PBUILDER_OPERATION='build'
- PBUILDER_PKGDATADIR='/usr/share/pbuilder'
- PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
- PBUILDER_SYSCONFDIR='/etc'
- PPID='2352738'
- PS1='# '
- PS2='> '
+ INVOCATION_ID=e39bbd8865294d9cb59b59c39978f4dd
+ LANG=C
+ LANGUAGE=nl_BE:nl
+ LC_ALL=C
+ MACHTYPE=aarch64-unknown-linux-gnu
+ MAIL=/var/mail/root
+ OPTERR=1
+ OPTIND=1
+ OSTYPE=linux-gnu
+ PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+ PBCURRENTCOMMANDLINEOPERATION=build
+ PBUILDER_OPERATION=build
+ PBUILDER_PKGDATADIR=/usr/share/pbuilder
+ PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+ PBUILDER_SYSCONFDIR=/etc
+ PIPESTATUS=([0]="0")
+ POSIXLY_CORRECT=y
+ PPID=928553
PS4='+ '
- PWD='/'
- SHELL='/bin/bash'
- SHLVL='2'
- SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.hzMpklha/pbuilderrc_iGX8 --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.hzMpklha/b1 --logfile b1/build.log sigstore-go_0.6.2-3.dsc'
- SUDO_GID='109'
- SUDO_UID='104'
- SUDO_USER='jenkins'
- TERM='unknown'
- TZ='/usr/share/zoneinfo/Etc/GMT+12'
- USER='root'
- _='/usr/bin/systemd-run'
- http_proxy='http://192.168.101.4:3128'
+ PWD=/
+ SHELL=/bin/bash
+ SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+ SHLVL=3
+ SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.hzMpklha/pbuilderrc_1aQ9 --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.hzMpklha/b2 --logfile b2/build.log sigstore-go_0.6.2-3.dsc'
+ SUDO_GID=109
+ SUDO_UID=104
+ SUDO_USER=jenkins
+ TERM=unknown
+ TZ=/usr/share/zoneinfo/Etc/GMT-14
+ UID=0
+ USER=root
+ _='I: set'
+ http_proxy=http://192.168.101.4:3128
I: uname -a
- Linux codethink04-arm64 6.1.0-30-cloud-arm64 #1 SMP Debian 6.1.124-1 (2025-01-12) aarch64 GNU/Linux
+ Linux i-capture-the-hostname 6.1.0-30-cloud-arm64 #1 SMP Debian 6.1.124-1 (2025-01-12) aarch64 GNU/Linux
I: ls -l /bin
- lrwxrwxrwx 1 root root 7 Nov 22 14:40 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/2352738/tmp/hooks/D02_print_environment finished
+ lrwxrwxrwx 1 root root 7 Nov 22 2024 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/D02_print_environment finished
-> Attempting to satisfy build-dependencies
-> Creating pbuilder-satisfydepends-dummy package
Package: pbuilder-satisfydepends-dummy
@@ -638,7 +670,7 @@
Get: 493 http://deb.debian.org/debian unstable/main arm64 golang-github-urfave-negroni-dev all 0.2.0-3 [8752 B]
Get: 494 http://deb.debian.org/debian unstable/main arm64 golang-github-sigstore-timestamp-authority-dev all 1.2.3-2 [75.8 kB]
Get: 495 http://deb.debian.org/debian unstable/main arm64 help2man arm64 1.49.3+b1 [198 kB]
-Fetched 226 MB in 1s (224 MB/s)
+Fetched 226 MB in 1s (179 MB/s)
Preconfiguring packages ...
Selecting previously unselected package golang-golang-x-sys-dev.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19946 files and directories currently installed.)
@@ -2224,8 +2256,8 @@
Setting up tzdata (2025a-1) ...
Current default time zone: 'Etc/UTC'
-Local time is now: Thu Jan 23 14:12:18 UTC 2025.
-Universal Time is now: Thu Jan 23 14:12:18 UTC 2025.
+Local time is now: Wed Feb 25 20:38:02 UTC 2026.
+Universal Time is now: Wed Feb 25 20:38:02 UTC 2026.
Run 'dpkg-reconfigure tzdata' if you wish to change it.
Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ...
@@ -2639,7 +2671,11 @@
Building tag database...
-> Finished parsing the build-deps
I: Building the package
-I: Running cd /build/reproducible-path/sigstore-go-0.6.2/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../sigstore-go_0.6.2-3_source.changes
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/sigstore-go-0.6.2/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../sigstore-go_0.6.2-3_source.changes
dpkg-buildpackage: info: source package sigstore-go
dpkg-buildpackage: info: source version 0.6.2-3
dpkg-buildpackage: info: source distribution unstable
@@ -2658,31 +2694,31 @@
dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
cd _build && go install -trimpath -v -p 12 github.com/sigstore/sigstore-go/cmd/conformance github.com/sigstore/sigstore-go/cmd/sigstore-go github.com/sigstore/sigstore-go/examples/oci-image-verification github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/sigstore-go/pkg/root github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/ca github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/tuf github.com/sigstore/sigstore-go/pkg/util github.com/sigstore/sigstore-go/pkg/verify
-internal/goexperiment
-internal/coverage/rtcov
-internal/goarch
+internal/race
internal/godebugs
internal/goos
-sync/atomic
+internal/goexperiment
internal/profilerecord
-internal/cpu
-internal/abi
+internal/coverage/rtcov
+internal/goarch
internal/byteorder
-internal/race
internal/unsafeheader
internal/runtime/syscall
-runtime/internal/math
-math/bits
unicode/utf8
-internal/chacha8rand
unicode
+internal/cpu
+math/bits
crypto/internal/alias
-runtime/internal/sys
crypto/subtle
+internal/abi
+runtime/internal/math
+sync/atomic
crypto/internal/boring/sig
+runtime/internal/sys
+internal/chacha8rand
internal/itoa
-cmp
math
+cmp
internal/asan
internal/msan
google.golang.org/protobuf/internal/flags
@@ -2694,11 +2730,11 @@
golang.org/x/crypto/internal/alias
log/internal
golang.org/x/crypto/salsa20/salsa
+internal/runtime/atomic
container/list
+internal/bytealg
vendor/golang.org/x/crypto/internal/alias
-internal/runtime/atomic
go.mongodb.org/mongo-driver/bson/bsonoptions
-internal/bytealg
go.mongodb.org/mongo-driver/bson/bsontype
github.com/sigstore/rekor/pkg/pki/identity
image/color
@@ -2720,10 +2756,10 @@
github.com/klauspost/compress
runtime
internal/reflectlite
+sync
iter
-k8s.io/klog/internal/dbg
internal/weak
-sync
+k8s.io/klog/internal/dbg
slices
maps
internal/bisect
@@ -2733,74 +2769,74 @@
github.com/josharian/intern
go.uber.org/zap/internal/pool
github.com/spf13/viper/internal/encoding
-errors
-sort
log/slog/internal/buffer
runtime/cgo
+errors
+sort
+internal/godebug
io
strconv
-vendor/golang.org/x/net/dns/dnsmessage
-math/rand/v2
-golang.org/x/crypto/cast5
internal/oserror
-crypto/internal/edwards25519/field
path
+math/rand
+vendor/golang.org/x/net/dns/dnsmessage
crypto/internal/nistec/fiat
-internal/godebug
-syscall
-github.com/sassoftware/relic/signers/sigerrors
-github.com/hashicorp/hcl/hcl/strconv
+crypto/internal/edwards25519/field
hash
bytes
-reflect
+math/rand/v2
+golang.org/x/crypto/cast5
crypto
-math/rand
-internal/concurrent
-crypto/internal/edwards25519
-strings
crypto/internal/randutil
-crypto/rc4
+strings
+syscall
hash/fnv
hash/crc32
+crypto/internal/edwards25519
+reflect
crypto/md5
+internal/concurrent
+crypto/rc4
+golang.org/x/crypto/blowfish
unique
crypto/cipher
-golang.org/x/crypto/blowfish
-bufio
-regexp/syntax
vendor/golang.org/x/text/transform
-net/http/internal/ascii
-html
internal/saferio
golang.org/x/crypto/openpgp/errors
-crypto/internal/boring
-crypto/des
-net/netip
hash/adler32
golang.org/x/crypto/openpgp/s2k
-compress/bzip2
-image
-time
+github.com/sassoftware/relic/signers/sigerrors
+golang.org/x/text/transform
+github.com/hashicorp/hcl/hcl/strconv
+net/netip
+crypto/internal/boring
+crypto/des
+golang.org/x/mod/semver
+github.com/google/go-containerregistry/internal/and
+bufio
+regexp/syntax
+net/http/internal/ascii
+html
+golang.org/x/text/runes
crypto/sha256
-internal/syscall/unix
-internal/syscall/execenv
crypto/aes
crypto/sha512
crypto/sha1
crypto/hmac
+k8s.io/klog/internal/severity
+github.com/transparency-dev/merkle/rfc6962
golang.org/x/crypto/pbkdf2
vendor/golang.org/x/crypto/hkdf
-golang.org/x/text/transform
-github.com/transparency-dev/merkle/rfc6962
golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
-k8s.io/klog/internal/severity
-golang.org/x/mod/semver
-github.com/google/go-containerregistry/internal/and
+compress/bzip2
+image
net/http/internal/testcert
-golang.org/x/text/runes
regexp
image/internal/imageutil
image/jpeg
+time
+internal/syscall/unix
+internal/syscall/execenv
io/fs
internal/poll
context
@@ -2810,37 +2846,38 @@
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1
k8s.io/klog/internal/clock
github.com/google/go-containerregistry/internal/retry/wait
+encoding/binary
+internal/fmtsort
+go.opentelemetry.io/otel/internal/attribute
go.uber.org/zap/internal/bufferpool
-go.opentelemetry.io/otel/internal/baggage
go.uber.org/zap/internal/stacktrace
-internal/filepathlite
+go.opentelemetry.io/otel/internal/baggage
embed
github.com/spf13/afero/internal/common
+internal/filepathlite
google.golang.org/protobuf/internal/editiondefaults
crypto/internal/nistec
-encoding/binary
-internal/fmtsort
-go.opentelemetry.io/otel/internal/attribute
-os
encoding/base64
golang.org/x/crypto/chacha20
golang.org/x/crypto/internal/poly1305
-golang.org/x/crypto/scrypt
golang.org/x/sys/unix
+golang.org/x/crypto/scrypt
vendor/golang.org/x/crypto/chacha20
vendor/golang.org/x/crypto/internal/poly1305
golang.org/x/crypto/blake2b
github.com/cespare/xxhash
+os
github.com/klauspost/compress/internal/snapref
golang.org/x/crypto/nacl/secretbox
encoding/pem
golang.org/x/crypto/openpgp/armor
-crypto/ecdh
vendor/golang.org/x/crypto/chacha20poly1305
+crypto/ecdh
golang.org/x/crypto/curve25519
-google.golang.org/protobuf/internal/detrand
fmt
+google.golang.org/protobuf/internal/detrand
io/ioutil
+net
path/filepath
golang.org/x/sys/cpu
vendor/golang.org/x/sys/cpu
@@ -2852,320 +2889,319 @@
github.com/spf13/afero/mem
golang.org/x/crypto/sha3
vendor/golang.org/x/crypto/sha3
-net
github.com/skratchdot/open-golang/open
github.com/mitchellh/go-homedir
google.golang.org/protobuf/internal/errors
go/token
compress/flate
+encoding/json
google.golang.org/protobuf/internal/version
-encoding/hex
-runtime/debug
math/big
-encoding/json
+encoding/hex
+google.golang.org/protobuf/encoding/protowire
net/url
log
+runtime/debug
github.com/opencontainers/go-digest
-google.golang.org/protobuf/encoding/protowire
vendor/golang.org/x/text/unicode/norm
-vendor/golang.org/x/net/http2/hpack
google.golang.org/protobuf/reflect/protoreflect
+vendor/golang.org/x/net/http2/hpack
mime
+golang.org/x/term
vendor/golang.org/x/text/unicode/bidi
+compress/gzip
+github.com/sigstore/sigstore-go/pkg/util
mime/quotedprintable
net/http/internal
-github.com/sigstore/sigstore-go/pkg/util
github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer
encoding/csv
-compress/gzip
encoding/xml
+database/sql/driver
+gopkg.in/yaml.v3
google.golang.org/protobuf/internal/descfmt
google.golang.org/protobuf/internal/descopts
google.golang.org/protobuf/internal/strs
google.golang.org/protobuf/internal/encoding/messageset
google.golang.org/protobuf/internal/genid
-google.golang.org/protobuf/internal/order
-google.golang.org/protobuf/runtime/protoiface
google.golang.org/protobuf/internal/encoding/text
+google.golang.org/protobuf/internal/order
google.golang.org/protobuf/reflect/protoregistry
+google.golang.org/protobuf/runtime/protoiface
google.golang.org/protobuf/internal/encoding/json
vendor/golang.org/x/text/secure/bidirule
-database/sql/driver
-gopkg.in/yaml.v3
+github.com/oklog/ulid
golang.org/x/sync/errgroup
encoding/gob
+vendor/golang.org/x/net/idna
github.com/go-openapi/analysis/internal/debug
github.com/secure-systems-lab/go-securesystemslib/cjson
-golang.org/x/term
google.golang.org/protobuf/proto
-github.com/oklog/ulid
github.com/mailru/easyjson/jlexer
-google.golang.org/protobuf/internal/encoding/defval
github.com/go-openapi/jsonreference/internal
-vendor/golang.org/x/net/idna
+google.golang.org/protobuf/internal/encoding/defval
github.com/blang/semver
internal/profile
text/tabwriter
runtime/trace
-flag
runtime/pprof
+flag
go.uber.org/atomic
+go.uber.org/zap/internal/color
+compress/zlib
+google.golang.org/protobuf/internal/filedesc
+google.golang.org/protobuf/encoding/prototext
+text/template/parse
+github.com/fsnotify/fsnotify/internal
+go.uber.org/multierr
+testing
+github.com/fsnotify/fsnotify
+golang.org/x/text/unicode/norm
+go.uber.org/zap/zapcore
crypto/dsa
crypto/elliptic
crypto/internal/bigmod
crypto/internal/boring/bbig
encoding/asn1
crypto/rand
-google.golang.org/protobuf/internal/filedesc
-google.golang.org/protobuf/encoding/prototext
-go.uber.org/multierr
crypto/ed25519
crypto/rsa
github.com/secure-systems-lab/go-securesystemslib/encrypted
crypto/internal/hpke
crypto/internal/mlkem768
go.mongodb.org/mongo-driver/bson/primitive
-go.uber.org/zap/internal/color
golang.org/x/crypto/ed25519
github.com/jedisct1/go-minisign
-go.uber.org/zap/zapcore
-compress/zlib
-vendor/golang.org/x/crypto/cryptobyte
-crypto/x509/pkix
-github.com/sigstore/sigstore/pkg/signature/options
golang.org/x/crypto/openpgp/elgamal
-text/template/parse
+text/template
golang.org/x/mod/sumdb/note
-testing
-go.mongodb.org/mongo-driver/x/bsonx/bsoncore
-github.com/fsnotify/fsnotify/internal
-golang.org/x/text/unicode/norm
+github.com/sigstore/sigstore/pkg/signature/options
github.com/spf13/jwalterweatherman
-crypto/ecdsa
-github.com/fsnotify/fsnotify
github.com/subosito/gotenv
+go.mongodb.org/mongo-driver/x/bsonx/bsoncore
+google.golang.org/protobuf/internal/encoding/tag
+google.golang.org/protobuf/encoding/protojson
github.com/hashicorp/hcl/hcl/token
gopkg.in/ini.v1
github.com/spf13/viper/internal/encoding/json
-github.com/hashicorp/hcl/hcl/ast
-github.com/hashicorp/hcl/hcl/scanner
-github.com/hashicorp/hcl/json/token
-google.golang.org/protobuf/internal/encoding/tag
-google.golang.org/protobuf/encoding/protojson
-text/template
-github.com/hashicorp/hcl/hcl/parser
-golang.org/x/crypto/openpgp/packet
-github.com/hashicorp/hcl/json/scanner
-github.com/hashicorp/hcl/json/parser
-github.com/hashicorp/hcl/hcl/printer
-google.golang.org/protobuf/internal/impl
-go.mongodb.org/mongo-driver/bson/bsonrw
-go.uber.org/zap/internal
github.com/pelletier/go-toml/v2/internal/danger
-github.com/hashicorp/hcl
github.com/spf13/viper/internal/encoding/yaml
github.com/go-openapi/runtime/logger
+github.com/hashicorp/hcl/hcl/ast
+google.golang.org/protobuf/internal/impl
+vendor/golang.org/x/crypto/cryptobyte
+crypto/x509/pkix
+github.com/hashicorp/hcl/hcl/scanner
+github.com/hashicorp/hcl/json/token
github.com/pelletier/go-toml/v2/unstable
+go.uber.org/zap/internal
+github.com/hashicorp/hcl/json/scanner
github.com/opentracing/opentracing-go/log
log/slog
+github.com/hashicorp/hcl/json/parser
+github.com/hashicorp/hcl/hcl/parser
go.opentelemetry.io/otel/attribute
+github.com/pelletier/go-toml/v2/internal/tracker
+crypto/ecdsa
+html/template
go.opentelemetry.io/otel/codes
-github.com/spf13/viper/internal/encoding/hcl
go.opentelemetry.io/otel/baggage
+github.com/hashicorp/hcl
+github.com/hashicorp/hcl/hcl/printer
+github.com/pelletier/go-toml/v2
github.com/transparency-dev/merkle/compact
-github.com/google/certificate-transparency-go/asn1
-golang.org/x/crypto/cryptobyte
-html/template
github.com/transparency-dev/merkle/proof
-github.com/pelletier/go-toml/v2/internal/tracker
-golang.org/x/crypto/openpgp
-os/user
-github.com/pelletier/go-toml/v2
go.opentelemetry.io/otel/metric
go.opentelemetry.io/otel/trace
+github.com/spf13/viper/internal/encoding/hcl
+golang.org/x/crypto/openpgp/packet
go.opentelemetry.io/otel/semconv/v1.17.0
-github.com/google/certificate-transparency-go/tls
-github.com/google/certificate-transparency-go/x509/pkix
github.com/go-logr/logr
+go.mongodb.org/mongo-driver/bson/bsonrw
+github.com/google/certificate-transparency-go/asn1
+golang.org/x/crypto/cryptobyte
+github.com/go-logr/logr/funcr
+k8s.io/klog/internal/serialize
k8s.io/klog/internal/sloghandler
+os/user
+github.com/spf13/cast
github.com/pkg/errors
gopkg.in/square/go-jose.v2/cipher
gopkg.in/square/go-jose.v2/json
+github.com/spf13/viper/internal/encoding/toml
+github.com/google/certificate-transparency-go/tls
+github.com/google/certificate-transparency-go/x509/pkix
github.com/go-jose/go-jose/v3/cipher
github.com/go-jose/go-jose/v3/json
+github.com/go-logr/stdr
+github.com/spf13/viper/internal/encoding/dotenv
+github.com/spf13/viper/internal/encoding/ini
github.com/segmentio/ksuid
-github.com/go-logr/logr/funcr
-k8s.io/klog/internal/serialize
github.com/sigstore/sigstore/pkg/oauth
-github.com/spf13/cast
github.com/google/go-containerregistry/internal/gzip
-go.mongodb.org/mongo-driver/bson/bsoncodec
github.com/google/go-containerregistry/pkg/v1
github.com/containerd/stargz-snapshotter/estargz/errorutil
github.com/klauspost/compress/fse
-github.com/spf13/viper/internal/encoding/toml
github.com/google/go-containerregistry/pkg/logs
github.com/opencontainers/image-spec/specs-go
-github.com/go-logr/stdr
-github.com/opencontainers/image-spec/specs-go/v1
github.com/docker/docker-credential-helpers/credentials
-github.com/spf13/viper/internal/encoding/dotenv
-github.com/spf13/viper/internal/encoding/ini
-github.com/klauspost/compress/huff0
+github.com/opencontainers/image-spec/specs-go/v1
+golang.org/x/crypto/openpgp
golang.org/x/sys/execabs
github.com/sirupsen/logrus
+github.com/klauspost/compress/huff0
github.com/google/go-containerregistry/internal/redact
-github.com/google/go-containerregistry/pkg/v1/match
github.com/google/go-containerregistry/pkg/legacy
+github.com/google/go-containerregistry/pkg/v1/match
github.com/google/go-containerregistry/pkg/v1/stream
+github.com/docker/docker-credential-helpers/client
github.com/google/go-containerregistry/internal/retry
github.com/google/go-containerregistry/internal/verify
-github.com/docker/docker-credential-helpers/client
github.com/davecgh/go-spew/spew
github.com/pmezard/go-difflib/difflib
github.com/docker/cli/cli/config/credentials
github.com/klauspost/compress/zstd
github.com/docker/cli/cli/config/configfile
-google.golang.org/protobuf/internal/filetype
-go.mongodb.org/mongo-driver/bson
-k8s.io/klog
-archive/tar
-github.com/docker/docker/pkg/homedir
-github.com/vbatts/tar-split/archive/tar
-github.com/docker/cli/cli/config
-google.golang.org/protobuf/runtime/protoimpl
-google.golang.org/protobuf/types/descriptorpb
-google.golang.org/protobuf/types/known/timestamppb
-github.com/sigstore/protobuf-specs/gen/pb-go/dsse
-google.golang.org/protobuf/types/known/structpb
-github.com/google/certificate-transparency-go/client/configpb
-github.com/in-toto/attestation/go/v1
+go.mongodb.org/mongo-driver/bson/bsoncodec
crypto/x509
-net/textproto
+github.com/mailru/easyjson/buffer
+github.com/spf13/pflag
github.com/google/go-containerregistry/pkg/name
-vendor/golang.org/x/net/http/httpproxy
github.com/mitchellh/mapstructure
+net/textproto
+vendor/golang.org/x/net/http/httpproxy
github.com/google/uuid
-github.com/mailru/easyjson/buffer
-github.com/spf13/pflag
github.com/google/certificate-transparency-go/x509
github.com/mailru/easyjson/jwriter
+k8s.io/klog
+github.com/sigstore/sigstore/pkg/signature/payload
+google.golang.org/protobuf/internal/filetype
vendor/golang.org/x/net/http/httpguts
mime/multipart
net/mail
-github.com/sigstore/sigstore/pkg/signature/payload
+archive/tar
+github.com/vbatts/tar-split/archive/tar
+github.com/docker/docker/pkg/homedir
+google.golang.org/protobuf/runtime/protoimpl
+github.com/docker/cli/cli/config
github.com/google/go-containerregistry/pkg/authn
+google.golang.org/protobuf/types/descriptorpb
+google.golang.org/protobuf/types/known/timestamppb
+github.com/sigstore/protobuf-specs/gen/pb-go/dsse
+google.golang.org/protobuf/types/known/structpb
+github.com/google/certificate-transparency-go/client/configpb
+go.mongodb.org/mongo-driver/bson
+github.com/in-toto/attestation/go/v1
google.golang.org/genproto/googleapis/api/annotations
-github.com/google/go-containerregistry/internal/zstd
-github.com/containerd/stargz-snapshotter/estargz
-github.com/sigstore/protobuf-specs/gen/pb-go/common/v1
-github.com/google/go-containerregistry/internal/compression
-github.com/google/go-containerregistry/pkg/v1/partial
github.com/google/certificate-transparency-go
-github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1
-github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1
golang.org/x/crypto/ssh
-github.com/secure-systems-lab/go-securesystemslib/signerverifier
-github.com/asaskevich/govalidator
github.com/sigstore/sigstore/pkg/cryptoutils
crypto/tls
+github.com/asaskevich/govalidator
+github.com/secure-systems-lab/go-securesystemslib/signerverifier
github.com/digitorus/pkcs7
gopkg.in/square/go-jose.v2
-github.com/google/certificate-transparency-go/gossip/minimal/x509ext
-github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1
-github.com/go-jose/go-jose/v3
-github.com/google/go-containerregistry/pkg/v1/empty
+github.com/sigstore/protobuf-specs/gen/pb-go/common/v1
github.com/spf13/cobra
github.com/sigstore/sigstore/pkg/signature
github.com/sigstore/sigstore-go/pkg/fulcio/certificate
+github.com/google/certificate-transparency-go/gossip/minimal/x509ext
+github.com/go-jose/go-jose/v3
github.com/sigstore/timestamp-authority/pkg/x509
+github.com/containerd/stargz-snapshotter/estargz
+github.com/google/go-containerregistry/internal/zstd
+github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1
+github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1
+github.com/google/go-containerregistry/internal/compression
github.com/digitorus/timestamp
+github.com/google/go-containerregistry/pkg/v1/partial
+github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1
github.com/theupdateframework/go-tuf/metadata
github.com/sigstore/rekor/pkg/pki/minisign
-github.com/sigstore/timestamp-authority/pkg/verification
github.com/sigstore/rekor/pkg/pki/x509
+github.com/sigstore/timestamp-authority/pkg/verification
+github.com/google/go-containerregistry/pkg/v1/empty
github.com/theupdateframework/go-tuf/metadata/trustedmetadata
-github.com/google/go-containerregistry/internal/estargz
-github.com/google/go-containerregistry/pkg/v1/tarball
github.com/secure-systems-lab/go-securesystemslib/dsse
-github.com/sigstore/sigstore/pkg/signature/dsse
github.com/in-toto/in-toto-golang/in_toto
+github.com/sigstore/sigstore/pkg/signature/dsse
+github.com/google/go-containerregistry/internal/estargz
+github.com/google/go-containerregistry/pkg/v1/tarball
github.com/google/go-containerregistry/internal/windows
github.com/google/go-containerregistry/pkg/legacy/tarball
github.com/google/go-containerregistry/pkg/v1/mutate
-github.com/google/go-containerregistry/pkg/v1/layout
net/http/httptrace
github.com/sassoftware/relic/lib/x509tools
+github.com/google/go-containerregistry/pkg/v1/layout
net/http
github.com/sassoftware/relic/lib/pkcs7
github.com/sigstore/rekor/pkg/pki/pkcs7
github.com/theupdateframework/go-tuf/metadata/fetcher
github.com/go-openapi/errors
github.com/go-openapi/swag
-github.com/spf13/afero
expvar
-github.com/magiconair/properties
github.com/go-chi/chi
net/http/pprof
+go.uber.org/zap
github.com/sigstore/rekor/pkg/pki/pgp
github.com/sigstore/rekor/pkg/pki/ssh
github.com/sigstore/rekor/pkg/util
-go.uber.org/zap
+github.com/magiconair/properties
+github.com/spf13/afero
github.com/theupdateframework/go-tuf/metadata/config
github.com/theupdateframework/go-tuf/metadata/updater
github.com/go-openapi/runtime/middleware/denco
-github.com/go-openapi/runtime/middleware/header
github.com/go-openapi/strfmt
+github.com/go-openapi/runtime/middleware/header
github.com/sigstore/rekor/pkg/pki
github.com/opentracing/opentracing-go
go.opentelemetry.io/otel/propagation
go.opentelemetry.io/otel/semconv/internal/v2
net/http/httputil
golang.org/x/net/context/ctxhttp
-github.com/go-chi/chi/middleware
-github.com/sigstore/sigstore-go/pkg/tuf
go.opentelemetry.io/otel/internal/global
+github.com/go-chi/chi/middleware
github.com/opentracing/opentracing-go/ext
-github.com/google/certificate-transparency-go/x509util
github.com/google/certificate-transparency-go/jsonclient
-go.opentelemetry.io/otel/semconv/v1.17.0/httpconv
+github.com/google/certificate-transparency-go/x509util
github.com/spf13/viper/internal/encoding/javaproperties
-github.com/go-openapi/jsonpointer
+github.com/sigstore/sigstore-go/pkg/tuf
+go.opentelemetry.io/otel/semconv/v1.17.0/httpconv
github.com/hashicorp/go-cleanhttp
golang.org/x/oauth2/internal
-github.com/google/certificate-transparency-go/client
github.com/hashicorp/go-retryablehttp
-github.com/sigstore/sigstore-go/pkg/root
-golang.org/x/oauth2
+github.com/google/certificate-transparency-go/client
github.com/docker/distribution/registry/client/auth/challenge
-github.com/spf13/viper
+golang.org/x/oauth2
github.com/google/certificate-transparency-go/loglist3
+github.com/go-openapi/jsonpointer
github.com/google/go-containerregistry/pkg/v1/remote/transport
-github.com/go-openapi/jsonreference
-net/http/httptest
go.opentelemetry.io/otel
-github.com/go-openapi/spec
-github.com/coreos/go-oidc/v3/oidc
+github.com/sigstore/sigstore-go/pkg/root
+net/http/httptest
github.com/google/certificate-transparency-go/ctutil
-github.com/go-openapi/runtime
-github.com/sigstore/rekor/pkg/log
+github.com/go-openapi/jsonreference
+github.com/coreos/go-oidc/v3/oidc
+github.com/go-openapi/spec
+github.com/spf13/viper
github.com/stretchr/testify/assert
+github.com/go-openapi/runtime
github.com/google/go-containerregistry/pkg/v1/remote
github.com/sigstore/sigstore/pkg/oauthflow
+github.com/sigstore/rekor/pkg/log
github.com/go-openapi/runtime/security
github.com/go-openapi/runtime/yamlpc
+github.com/google/go-containerregistry/pkg/crane
github.com/go-openapi/analysis/internal/flatten/normalize
github.com/go-openapi/analysis/internal/flatten/operations
github.com/go-openapi/analysis/internal/flatten/replace
github.com/go-openapi/analysis/internal/flatten/schutils
github.com/go-openapi/analysis/internal/flatten/sortref
-github.com/google/go-containerregistry/pkg/crane
github.com/go-openapi/analysis
github.com/go-openapi/loads
-github.com/go-openapi/validate
github.com/go-openapi/runtime/middleware/untyped
-github.com/sigstore/rekor/pkg/generated/models
+github.com/go-openapi/validate
github.com/go-openapi/runtime/middleware
+github.com/sigstore/rekor/pkg/generated/models
github.com/go-openapi/runtime/client
github.com/sigstore/rekor/pkg/types
github.com/sigstore/rekor/pkg/generated/client/entries
@@ -3177,10 +3213,10 @@
github.com/sigstore/rekor/pkg/types/intoto
github.com/sigstore/rekor/pkg/tle
github.com/sigstore/rekor/pkg/types/rekord
-github.com/sigstore/rekor/pkg/generated/client
-github.com/sigstore/rekor/pkg/types/dsse/v0.0.1
github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1
+github.com/sigstore/rekor/pkg/types/dsse/v0.0.1
github.com/sigstore/rekor/pkg/types/intoto/v0.0.2
+github.com/sigstore/rekor/pkg/generated/client
github.com/sigstore/rekor/pkg/verify
github.com/sigstore/rekor/pkg/client
github.com/sigstore/sigstore-go/pkg/tlog
@@ -3308,12 +3344,14 @@
=== RUN Test_validate/version_too_high
=== RUN Test_validate/no_verification_material
=== RUN Test_validate/v0.1_with_no_inclusion_promise
+=== RUN Test_validate/v0.1_with_inclusion_promise
+=== RUN Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint
+=== RUN Test_validate/v0.1_with_inclusion_proof_&_promise
+=== RUN Test_validate/v0.2_with_no_inclusion_proof
+=== CONT TestMinVersion/new-format
=== CONT TestMinVersion/new-format-unexpected
=== CONT TestMinVersion/new-format-exact
-=== CONT TestMinVersion/new-format
-=== CONT TestMinVersion/old-format-without-v
-=== CONT TestMinVersion/old-format-unexpected
-=== CONT TestMinVersion/blank
+=== CONT TestMinVersion/invalid
=== CONT TestMediaTypeString
=== RUN TestMediaTypeString/normal-semver
=== PAUSE TestMediaTypeString/normal-semver
@@ -3326,7 +3364,6 @@
=== RUN TestMediaTypeString/invalid
=== PAUSE TestMediaTypeString/invalid
=== CONT TestMediaTypeString/normal-semver
-=== CONT TestMinVersion/invalid
=== CONT TestMediaTypeString/invalid
=== CONT TestMediaTypeString/blank
=== CONT TestMediaTypeString/old-semver2
@@ -3337,42 +3374,41 @@
--- PASS: TestMediaTypeString/blank (0.00s)
--- PASS: TestMediaTypeString/old-semver2 (0.00s)
--- PASS: TestMediaTypeString/old-semver1 (0.00s)
-=== CONT TestMinVersion/new-format-without-v-unexpected
---- PASS: TestMinVersion (0.00s)
- --- PASS: TestMinVersion/old-format (0.00s)
- --- PASS: TestMinVersion/new-format-without-v (0.00s)
- --- PASS: TestMinVersion/new-format-unexpected (0.00s)
- --- PASS: TestMinVersion/new-format-exact (0.00s)
- --- PASS: TestMinVersion/new-format (0.00s)
- --- PASS: TestMinVersion/old-format-without-v (0.00s)
- --- PASS: TestMinVersion/old-format-unexpected (0.00s)
- --- PASS: TestMinVersion/blank (0.00s)
- --- PASS: TestMinVersion/invalid (0.00s)
- --- PASS: TestMinVersion/new-format-without-v-unexpected (0.00s)
-=== RUN Test_validate/v0.1_with_inclusion_promise
-=== RUN Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint
-=== RUN Test_validate/v0.1_with_inclusion_proof_&_promise
-=== RUN Test_validate/v0.2_with_no_inclusion_proof
+=== CONT TestMinVersion/old-format-without-v
+=== CONT TestMinVersion/old-format-unexpected
=== RUN Test_validate/v0.2_with_inclusion_proof_without_checkpoint
=== RUN Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint
=== RUN Test_validate/v0.2_with_inclusion_proof
=== RUN Test_validate/v0.3_with_x.509_certificate_chain
=== RUN Test_validate/v0.3_without_x.509_certificate_chain
---- PASS: Test_validate (0.03s)
+--- PASS: Test_validate (0.02s)
--- PASS: Test_validate/invalid_media_type (0.00s)
--- PASS: Test_validate/version_too_low (0.00s)
--- PASS: Test_validate/version_too_high (0.00s)
--- PASS: Test_validate/no_verification_material (0.00s)
- --- PASS: Test_validate/v0.1_with_no_inclusion_promise (0.02s)
+ --- PASS: Test_validate/v0.1_with_no_inclusion_promise (0.00s)
--- PASS: Test_validate/v0.1_with_inclusion_promise (0.00s)
--- PASS: Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint (0.00s)
--- PASS: Test_validate/v0.1_with_inclusion_proof_&_promise (0.00s)
- --- PASS: Test_validate/v0.2_with_no_inclusion_proof (0.00s)
+ --- PASS: Test_validate/v0.2_with_no_inclusion_proof (0.01s)
--- PASS: Test_validate/v0.2_with_inclusion_proof_without_checkpoint (0.00s)
--- PASS: Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint (0.00s)
- --- PASS: Test_validate/v0.2_with_inclusion_proof (0.01s)
+ --- PASS: Test_validate/v0.2_with_inclusion_proof (0.00s)
--- PASS: Test_validate/v0.3_with_x.509_certificate_chain (0.00s)
--- PASS: Test_validate/v0.3_without_x.509_certificate_chain (0.00s)
+=== CONT TestMinVersion/blank
+=== CONT TestMinVersion/new-format-without-v-unexpected
+--- PASS: TestMinVersion (0.00s)
+ --- PASS: TestMinVersion/old-format (0.00s)
+ --- PASS: TestMinVersion/new-format-without-v (0.00s)
+ --- PASS: TestMinVersion/new-format (0.00s)
+ --- PASS: TestMinVersion/new-format-unexpected (0.00s)
+ --- PASS: TestMinVersion/new-format-exact (0.00s)
+ --- PASS: TestMinVersion/invalid (0.00s)
+ --- PASS: TestMinVersion/old-format-without-v (0.00s)
+ --- PASS: TestMinVersion/old-format-unexpected (0.00s)
+ --- PASS: TestMinVersion/blank (0.00s)
+ --- PASS: TestMinVersion/new-format-without-v-unexpected (0.00s)
=== RUN TestVerificationContent/no_verification_material
=== RUN TestVerificationContent/certificate_chain_with_zero_certs
=== RUN TestVerificationContent/certificate_chain_with_self-signed_cert
@@ -3387,7 +3423,7 @@
=== RUN TestVerificationContent/empty_certificate
=== RUN TestVerificationContent/public_key
=== RUN TestVerificationContent/nil_public_key
---- PASS: TestVerificationContent (0.05s)
+--- PASS: TestVerificationContent (0.02s)
--- PASS: TestVerificationContent/no_verification_material (0.00s)
--- PASS: TestVerificationContent/certificate_chain_with_zero_certs (0.00s)
--- PASS: TestVerificationContent/certificate_chain_with_self-signed_cert (0.00s)
@@ -3405,9 +3441,9 @@
=== RUN FuzzBundle
--- PASS: FuzzBundle (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/bundle 0.081s
+ok github.com/sigstore/sigstore-go/pkg/bundle 0.056s
=== RUN TestSummarizeCertificateWithActionsBundle
---- PASS: TestSummarizeCertificateWithActionsBundle (0.00s)
+--- PASS: TestSummarizeCertificateWithActionsBundle (0.01s)
=== RUN TestSummarizeCertificateWithOauthBundle
--- PASS: TestSummarizeCertificateWithOauthBundle (0.00s)
=== RUN TestSummarizeCertificateWithOtherNameSAN
@@ -3415,7 +3451,10 @@
=== RUN TestCompareExtensions
--- PASS: TestCompareExtensions (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.077s
+ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.079s
+? github.com/sigstore/sigstore-go/pkg/testing/ca [no test files]
+? github.com/sigstore/sigstore-go/pkg/testing/data [no test files]
+? github.com/sigstore/sigstore-go/pkg/util [no test files]
=== RUN TestGetSigstoreTrustedRoot
--- PASS: TestGetSigstoreTrustedRoot (0.00s)
=== RUN TestTrustedMaterialCollectionECDSA
@@ -3423,14 +3462,11 @@
=== RUN TestTrustedMaterialCollectionED25519
--- PASS: TestTrustedMaterialCollectionED25519 (0.00s)
=== RUN TestTrustedMaterialCollectionRSA
---- PASS: TestTrustedMaterialCollectionRSA (0.24s)
+--- PASS: TestTrustedMaterialCollectionRSA (0.33s)
=== RUN TestFromJSONToJSON
--- PASS: TestFromJSONToJSON (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/root 0.308s
-? github.com/sigstore/sigstore-go/pkg/testing/ca [no test files]
-? github.com/sigstore/sigstore-go/pkg/testing/data [no test files]
-? github.com/sigstore/sigstore-go/pkg/util [no test files]
+ok github.com/sigstore/sigstore-go/pkg/root 0.364s
=== RUN Test_GetCertificate
--- PASS: Test_GetCertificate (4.02s)
=== RUN Test_PlainData
@@ -3446,15 +3482,15 @@
=== RUN Test_GetTransparencyLogEntry
--- PASS: Test_GetTransparencyLogEntry (0.01s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/sign 8.106s
+ok github.com/sigstore/sigstore-go/pkg/sign 8.138s
=== RUN FuzzParseEntry
--- PASS: FuzzParseEntry (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/tlog 0.037s
+ok github.com/sigstore/sigstore-go/pkg/tlog 0.040s
=== RUN TestNewOfflineClientFail
--- PASS: TestNewOfflineClientFail (0.01s)
=== RUN TestRefresh
---- PASS: TestRefresh (0.02s)
+--- PASS: TestRefresh (0.01s)
=== RUN TestInvalidRoot
--- PASS: TestInvalidRoot (0.00s)
=== RUN TestInvalidRepositoryURL
@@ -3466,7 +3502,7 @@
=== RUN TestConfig
--- PASS: TestConfig (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/tuf 0.098s
+ok github.com/sigstore/sigstore-go/pkg/tuf 0.101s
=== RUN TestCertificateIdentityVerify
--- PASS: TestCertificateIdentityVerify (0.00s)
=== RUN TestThatCertIDsAreFullySpecified
@@ -3490,45 +3526,45 @@
=== RUN TestSignatureVerifier
--- PASS: TestSignatureVerifier (0.01s)
=== RUN TestEnvelopeSubject
---- PASS: TestEnvelopeSubject (0.02s)
+--- PASS: TestEnvelopeSubject (0.01s)
=== RUN TestSignatureVerifierMessageSignature
--- PASS: TestSignatureVerifierMessageSignature (0.01s)
=== RUN TestTooManySubjects
--- PASS: TestTooManySubjects (0.02s)
=== RUN TestTooManyDigests
---- PASS: TestTooManyDigests (0.02s)
+--- PASS: TestTooManyDigests (0.01s)
=== RUN TestSignedEntityVerifierInitialization
--- PASS: TestSignedEntityVerifierInitialization (0.00s)
=== RUN TestSignedEntityVerifierInitRequiresTimestamp
--- PASS: TestSignedEntityVerifierInitRequiresTimestamp (0.00s)
=== RUN TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully
---- PASS: TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully (0.05s)
+--- PASS: TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully (0.02s)
=== RUN TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully
---- PASS: TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully (0.02s)
+--- PASS: TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully (0.01s)
=== RUN TestEntitySignedByPublicGoodWithHighTlogThresholdFails
--- PASS: TestEntitySignedByPublicGoodWithHighTlogThresholdFails (0.01s)
=== RUN TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails
---- PASS: TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails (0.01s)
+--- PASS: TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails (0.00s)
=== RUN TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails
--- PASS: TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails (0.01s)
=== RUN TestEntitySignedByPublicGoodExpectingTSAFails
---- PASS: TestEntitySignedByPublicGoodExpectingTSAFails (0.02s)
+--- PASS: TestEntitySignedByPublicGoodExpectingTSAFails (0.01s)
=== RUN TestEntitySignedByPublicGoodWithHighObserverTimestampThresholdFails
--- PASS: TestEntitySignedByPublicGoodWithHighObserverTimestampThresholdFails (0.01s)
=== RUN TestEntityWithOthernameSan
---- PASS: TestEntityWithOthernameSan (0.01s)
+--- PASS: TestEntityWithOthernameSan (0.00s)
=== RUN TestVerifyPolicyOptionErors
---- PASS: TestVerifyPolicyOptionErors (0.01s)
+--- PASS: TestVerifyPolicyOptionErors (0.00s)
=== RUN TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully
---- PASS: TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully (0.06s)
+--- PASS: TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully (0.03s)
=== RUN TestThatAllTheJSONKeysStartWithALowerCase
---- PASS: TestThatAllTheJSONKeysStartWithALowerCase (0.02s)
+--- PASS: TestThatAllTheJSONKeysStartWithALowerCase (0.01s)
=== RUN TestSigstoreBundle2Sig
--- PASS: TestSigstoreBundle2Sig (0.01s)
=== RUN TestTlogVerifier
--- PASS: TestTlogVerifier (0.02s)
=== RUN TestIgnoredTLogEntries
---- PASS: TestIgnoredTLogEntries (0.03s)
+--- PASS: TestIgnoredTLogEntries (0.01s)
=== RUN TestInvalidTLogEntries
--- PASS: TestInvalidTLogEntries (0.01s)
=== RUN TestNoTLogEntries
@@ -3536,27 +3572,27 @@
=== RUN TestDuplicateTlogEntries
--- PASS: TestDuplicateTlogEntries (0.01s)
=== RUN TestMaxAllowedTlogEntries
---- PASS: TestMaxAllowedTlogEntries (0.01s)
+--- PASS: TestMaxAllowedTlogEntries (0.00s)
=== RUN TestTimestampAuthorityVerifier
---- PASS: TestTimestampAuthorityVerifier (0.03s)
+--- PASS: TestTimestampAuthorityVerifier (0.01s)
=== RUN TestTimestampAuthorityVerifierWithoutThreshold
---- PASS: TestTimestampAuthorityVerifierWithoutThreshold (0.02s)
+--- PASS: TestTimestampAuthorityVerifierWithoutThreshold (0.01s)
=== RUN TestDuplicateTimestamps
---- PASS: TestDuplicateTimestamps (0.01s)
+--- PASS: TestDuplicateTimestamps (0.00s)
=== RUN TestBadTSASignature
---- PASS: TestBadTSASignature (0.01s)
+--- PASS: TestBadTSASignature (0.00s)
=== RUN TestBadTSACertificateChain
--- PASS: TestBadTSACertificateChain (0.01s)
=== RUN TestBadTSACertificateChainOutsideValidityPeriod
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/valid
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past
---- PASS: TestBadTSACertificateChainOutsideValidityPeriod (0.03s)
- --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/valid (0.01s)
- --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future (0.01s)
- --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past (0.01s)
+--- PASS: TestBadTSACertificateChainOutsideValidityPeriod (0.01s)
+ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/valid (0.00s)
+ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future (0.00s)
+ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past (0.00s)
=== RUN TestTooManyTimestamps
---- PASS: TestTooManyTimestamps (0.01s)
+--- PASS: TestTooManyTimestamps (0.00s)
=== RUN FuzzVerifyTimestampAuthorityWithoutThreshold
--- PASS: FuzzVerifyTimestampAuthorityWithoutThreshold (0.00s)
=== RUN FuzzVerifyTimestampAuthorityWithThreshold
@@ -3572,7 +3608,7 @@
=== RUN FuzzVerifySignatureWithArtifactDigest
--- PASS: FuzzVerifySignatureWithArtifactDigest (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/verify 0.597s
+ok github.com/sigstore/sigstore-go/pkg/verify 0.325s
create-stamp debian/debhelper-build-stamp
dh_testroot -O--builddirectory=_build -O--buildsystem=golang
dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -3626,9 +3662,9 @@
dpkg-gencontrol: warning: package sigstore-go: substitution variable ${misc:Static-Built-Using} unused, but is defined
dh_md5sums -O--builddirectory=_build -O--buildsystem=golang
dh_builddeb -O--builddirectory=_build -O--buildsystem=golang
-dpkg-deb: building package 'sigstore-go-dbgsym' in '../sigstore-go-dbgsym_0.6.2-3_arm64.deb'.
dpkg-deb: building package 'sigstore-go' in '../sigstore-go_0.6.2-3_arm64.deb'.
dpkg-deb: building package 'golang-github-sigstore-sigstore-go-dev' in '../golang-github-sigstore-sigstore-go-dev_0.6.2-3_all.deb'.
+dpkg-deb: building package 'sigstore-go-dbgsym' in '../sigstore-go-dbgsym_0.6.2-3_arm64.deb'.
dpkg-genbuildinfo --build=binary -O../sigstore-go_0.6.2-3_arm64.buildinfo
dpkg-genchanges --build=binary -O../sigstore-go_0.6.2-3_arm64.changes
dpkg-genchanges: info: binary-only upload (no source code included)
@@ -3636,12 +3672,14 @@
dpkg-buildpackage: info: binary-only upload (no source included)
dpkg-genchanges: info: not including original source code in upload
I: copying local configuration
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/928553/tmp/hooks/B01_cleanup finished
I: unmounting dev/ptmx filesystem
I: unmounting dev/pts filesystem
I: unmounting dev/shm filesystem
I: unmounting proc filesystem
I: unmounting sys filesystem
I: cleaning the build env
-I: removing directory /srv/workspace/pbuilder/2352738 and its subdirectories
-I: Current time: Thu Jan 23 02:13:43 -12 2025
-I: pbuilder-time-stamp: 1737641623
+I: removing directory /srv/workspace/pbuilder/928553 and its subdirectories
+I: Current time: Thu Feb 26 10:39:46 +14 2026
+I: pbuilder-time-stamp: 1772051986