Diff of the two buildlogs:
--
--- b1/build.log 2025-03-17 12:49:10.737877395 +0000
+++ b2/build.log 2025-03-17 12:57:27.539458308 +0000
@@ -1,6 +1,6 @@
I: pbuilder: network access will be disabled during build
-I: Current time: Mon Mar 17 00:44:00 -12 2025
-I: pbuilder-time-stamp: 1742215440
+I: Current time: Mon Apr 20 09:12:15 +14 2026
+I: pbuilder-time-stamp: 1776625935
I: Building the build Environment
I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
I: copying local configuration
@@ -22,52 +22,84 @@
dpkg-source: info: unpacking sigstore-go_0.7.0-2.debian.tar.xz
I: Not using root during the build.
I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/2595617/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/D01_modify_environment starting
+debug: Running on codethink03-arm64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Apr 19 19:12 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/D02_print_environment starting
I: set
- BUILDDIR='/build/reproducible-path'
- BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
- BUILDUSERNAME='pbuilder1'
- BUILD_ARCH='arm64'
- DEBIAN_FRONTEND='noninteractive'
+ BASH=/bin/sh
+ BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+ BASH_ALIASES=()
+ BASH_ARGC=()
+ BASH_ARGV=()
+ BASH_CMDS=()
+ BASH_LINENO=([0]="12" [1]="0")
+ BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+ BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+ BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu")
+ BASH_VERSION='5.2.37(1)-release'
+ BUILDDIR=/build/reproducible-path
+ BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+ BUILDUSERNAME=pbuilder2
+ BUILD_ARCH=arm64
+ DEBIAN_FRONTEND=noninteractive
DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 '
- DISTRIBUTION='unstable'
- HOME='/root'
- HOST_ARCH='arm64'
+ DIRSTACK=()
+ DISTRIBUTION=unstable
+ EUID=0
+ FUNCNAME=([0]="Echo" [1]="main")
+ GROUPS=()
+ HOME=/root
+ HOSTNAME=i-capture-the-hostname
+ HOSTTYPE=aarch64
+ HOST_ARCH=arm64
IFS='
'
- INVOCATION_ID='fbddeb237fcd4a969f008b151cba73dc'
- LANG='C'
- LANGUAGE='en_US:en'
- LC_ALL='C'
- MAIL='/var/mail/root'
- OPTIND='1'
- PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
- PBCURRENTCOMMANDLINEOPERATION='build'
- PBUILDER_OPERATION='build'
- PBUILDER_PKGDATADIR='/usr/share/pbuilder'
- PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
- PBUILDER_SYSCONFDIR='/etc'
- PPID='2595617'
- PS1='# '
- PS2='> '
+ INVOCATION_ID=1f3a783fb60b477082469059ad530052
+ LANG=C
+ LANGUAGE=nl_BE:nl
+ LC_ALL=C
+ MACHTYPE=aarch64-unknown-linux-gnu
+ MAIL=/var/mail/root
+ OPTERR=1
+ OPTIND=1
+ OSTYPE=linux-gnu
+ PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+ PBCURRENTCOMMANDLINEOPERATION=build
+ PBUILDER_OPERATION=build
+ PBUILDER_PKGDATADIR=/usr/share/pbuilder
+ PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+ PBUILDER_SYSCONFDIR=/etc
+ PIPESTATUS=([0]="0")
+ POSIXLY_CORRECT=y
+ PPID=1680452
PS4='+ '
- PWD='/'
- SHELL='/bin/bash'
- SHLVL='2'
- SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.1POU0aHM/pbuilderrc_QLde --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.1POU0aHM/b1 --logfile b1/build.log sigstore-go_0.7.0-2.dsc'
- SUDO_GID='109'
- SUDO_UID='104'
- SUDO_USER='jenkins'
- TERM='unknown'
- TZ='/usr/share/zoneinfo/Etc/GMT+12'
- USER='root'
- _='/usr/bin/systemd-run'
- http_proxy='http://192.168.101.4:3128'
+ PWD=/
+ SHELL=/bin/bash
+ SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+ SHLVL=3
+ SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.1POU0aHM/pbuilderrc_Iz5h --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.1POU0aHM/b2 --logfile b2/build.log sigstore-go_0.7.0-2.dsc'
+ SUDO_GID=109
+ SUDO_UID=104
+ SUDO_USER=jenkins
+ TERM=unknown
+ TZ=/usr/share/zoneinfo/Etc/GMT-14
+ UID=0
+ USER=root
+ _='I: set'
+ http_proxy=http://192.168.101.4:3128
I: uname -a
- Linux codethink04-arm64 6.1.0-32-cloud-arm64 #1 SMP Debian 6.1.129-1 (2025-03-06) aarch64 GNU/Linux
+ Linux i-capture-the-hostname 6.1.0-32-cloud-arm64 #1 SMP Debian 6.1.129-1 (2025-03-06) aarch64 GNU/Linux
I: ls -l /bin
- lrwxrwxrwx 1 root root 7 Mar 4 11:20 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/2595617/tmp/hooks/D02_print_environment finished
+ lrwxrwxrwx 1 root root 7 Mar 4 2025 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/D02_print_environment finished
-> Attempting to satisfy build-dependencies
-> Creating pbuilder-satisfydepends-dummy package
Package: pbuilder-satisfydepends-dummy
@@ -655,7 +687,7 @@
Get: 510 http://deb.debian.org/debian unstable/main arm64 golang-github-urfave-negroni-dev all 0.2.0-3 [8752 B]
Get: 511 http://deb.debian.org/debian unstable/main arm64 golang-github-sigstore-timestamp-authority-dev all 1.2.3-2 [75.8 kB]
Get: 512 http://deb.debian.org/debian unstable/main arm64 help2man arm64 1.49.3+b1 [198 kB]
-Fetched 236 MB in 5s (44.9 MB/s)
+Fetched 236 MB in 4s (53.9 MB/s)
Preconfiguring packages ...
Selecting previously unselected package golang-golang-x-sys-dev.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19898 files and directories currently installed.)
@@ -2295,8 +2327,8 @@
Setting up tzdata (2025a-2) ...
Current default time zone: 'Etc/UTC'
-Local time is now: Mon Mar 17 12:46:40 UTC 2025.
-Universal Time is now: Mon Mar 17 12:46:40 UTC 2025.
+Local time is now: Sun Apr 19 19:15:48 UTC 2026.
+Universal Time is now: Sun Apr 19 19:15:48 UTC 2026.
Run 'dpkg-reconfigure tzdata' if you wish to change it.
Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ...
@@ -2724,7 +2756,11 @@
Building tag database...
-> Finished parsing the build-deps
I: Building the package
-I: Running cd /build/reproducible-path/sigstore-go-0.7.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../sigstore-go_0.7.0-2_source.changes
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/sigstore-go-0.7.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../sigstore-go_0.7.0-2_source.changes
dpkg-buildpackage: info: source package sigstore-go
dpkg-buildpackage: info: source version 0.7.0-2
dpkg-buildpackage: info: source distribution unstable
@@ -2744,48 +2780,48 @@
dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
cd _build && go install -trimpath -v -p 12 github.com/sigstore/sigstore-go/cmd/conformance github.com/sigstore/sigstore-go/cmd/sigstore-go github.com/sigstore/sigstore-go/examples/oci-image-verification github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/sigstore-go/pkg/root github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/ca github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/tuf github.com/sigstore/sigstore-go/pkg/util github.com/sigstore/sigstore-go/pkg/verify
internal/goexperiment
-internal/unsafeheader
+internal/godebugs
internal/coverage/rtcov
+internal/profilerecord
+internal/unsafeheader
internal/msan
-internal/goos
+internal/cpu
internal/byteorder
internal/goarch
-internal/runtime/syscall
-internal/godebugs
+internal/goos
internal/asan
-internal/profilerecord
cmp
+internal/abi
+internal/runtime/syscall
+internal/runtime/math
internal/itoa
-math/bits
unicode/utf8
+math/bits
sync/atomic
unicode
google.golang.org/protobuf/internal/flags
-internal/cpu
-internal/abi
-internal/runtime/math
unicode/utf16
-encoding
internal/chacha8rand
+encoding
crypto/internal/fips140/alias
crypto/internal/fips140deps/byteorder
-math
-google.golang.org/protobuf/internal/set
crypto/internal/boring/sig
vendor/golang.org/x/crypto/cryptobyte/asn1
-crypto/internal/fips140/subtle
internal/nettrace
golang.org/x/crypto/internal/alias
+math
+google.golang.org/protobuf/internal/set
+crypto/internal/fips140/subtle
log/internal
golang.org/x/crypto/salsa20/salsa
container/list
vendor/golang.org/x/crypto/internal/alias
go.mongodb.org/mongo-driver/bson/bsonoptions
-go.mongodb.org/mongo-driver/bson/bsontype
internal/bytealg
internal/runtime/atomic
internal/runtime/sys
crypto/internal/fips140deps/cpu
+go.mongodb.org/mongo-driver/bson/bsontype
github.com/sigstore/rekor/pkg/pki/identity
image/color
golang.org/x/exp/constraints
@@ -2800,25 +2836,26 @@
github.com/google/go-containerregistry/pkg/v1/types
github.com/klauspost/compress/internal/le
github.com/google/go-containerregistry/pkg/compression
-github.com/docker/cli/cli/config/types
internal/runtime/exithook
+github.com/docker/cli/cli/config/types
internal/stringslite
+internal/race
go.opentelemetry.io/otel/internal
github.com/klauspost/compress
-internal/race
internal/runtime/maps
internal/sync
runtime
internal/reflectlite
iter
-sync
crypto/subtle
weak
k8s.io/klog/internal/dbg
+sync
slices
maps
internal/bisect
internal/testlog
+errors
google.golang.org/protobuf/internal/pragma
internal/singleflight
unique
@@ -2826,94 +2863,93 @@
go.uber.org/zap/internal/pool
github.com/spf13/viper/internal/encoding
log/slog/internal/buffer
-runtime/cgo
-internal/godebug
-errors
sort
+runtime/cgo
strconv
-io
internal/oserror
+golang.org/x/crypto/cast5
+io
path
-syscall
-github.com/sassoftware/relic/signers/sigerrors
-strings
-bytes
math/rand/v2
-github.com/hashicorp/hcl/hcl/strconv
vendor/golang.org/x/net/dns/dnsmessage
-golang.org/x/crypto/cast5
+github.com/sassoftware/relic/signers/sigerrors
+internal/godebug
+github.com/hashicorp/hcl/hcl/strconv
+syscall
reflect
-crypto/internal/fips140deps/godebug
+strings
hash
-math/rand
+bytes
+crypto/internal/fips140deps/godebug
+hash/fnv
net/netip
+crypto/internal/randutil
golang.org/x/crypto/blowfish
-hash/fnv
+math/rand
hash/crc32
crypto
+internal/saferio
+golang.org/x/crypto/openpgp/errors
+hash/adler32
+golang.org/x/mod/semver
+github.com/google/go-containerregistry/internal/and
+vendor/golang.org/x/text/transform
+golang.org/x/crypto/openpgp/s2k
+golang.org/x/text/transform
+bufio
crypto/internal/fips140
crypto/internal/impl
-crypto/internal/randutil
regexp/syntax
net/http/internal/ascii
-crypto/tls/internal/fips140tls
html
-internal/saferio
-golang.org/x/crypto/openpgp/errors
-hash/adler32
-k8s.io/klog/internal/severity
-bufio
-crypto/internal/fips140/sha256
crypto/internal/fips140/sha3
+crypto/tls/internal/fips140tls
+crypto/internal/fips140/sha256
crypto/internal/fips140/sha512
-vendor/golang.org/x/text/transform
-golang.org/x/crypto/openpgp/s2k
-golang.org/x/text/transform
+golang.org/x/text/runes
+k8s.io/klog/internal/severity
+net/http/internal/testcert
+crypto/sha3
compress/bzip2
image
-crypto/sha3
-golang.org/x/mod/semver
-github.com/google/go-containerregistry/internal/and
-net/http/internal/testcert
crypto/internal/fips140hash
crypto/internal/fips140/hmac
-golang.org/x/text/runes
crypto/internal/fips140/check
crypto/internal/fips140/aes
+crypto/internal/fips140/edwards25519/field
crypto/internal/fips140/nistec/fiat
crypto/internal/fips140/bigmod
crypto/internal/fips140/hkdf
-crypto/internal/fips140/edwards25519/field
crypto/internal/fips140/tls12
crypto/internal/fips140/tls13
-image/internal/imageutil
-regexp
-image/jpeg
-crypto/internal/fips140/edwards25519
time
internal/syscall/unix
internal/syscall/execenv
-crypto/internal/fips140/nistec
-internal/fmtsort
-go.opentelemetry.io/otel/internal/attribute
-encoding/binary
+crypto/internal/fips140/edwards25519
+image/internal/imageutil
+regexp
+image/jpeg
io/fs
+internal/poll
+context
go.uber.org/zap/buffer
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1
-context
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1
k8s.io/klog/internal/clock
-internal/poll
github.com/google/go-containerregistry/internal/retry/wait
+crypto/internal/fips140/nistec
go.uber.org/zap/internal/bufferpool
go.uber.org/zap/internal/stacktrace
-internal/filepathlite
go.opentelemetry.io/otel/internal/baggage
+internal/filepathlite
embed
github.com/spf13/afero/internal/common
google.golang.org/protobuf/internal/editiondefaults
os
+internal/fmtsort
+encoding/binary
+go.opentelemetry.io/otel/internal/attribute
encoding/base64
golang.org/x/crypto/internal/poly1305
golang.org/x/sys/unix
@@ -2936,56 +2972,56 @@
k8s.io/klog/internal/buffer
crypto/internal/entropy
crypto/internal/fips140/drbg
+os/exec
+github.com/shibumi/go-pathspec
+github.com/spf13/afero/mem
+golang.org/x/crypto/sha3
crypto/internal/fips140/aes/gcm
crypto/internal/fips140only
crypto/internal/fips140/ecdh
crypto/internal/fips140/ecdsa
crypto/internal/fips140/ed25519
crypto/internal/fips140/rsa
-crypto/internal/fips140/mlkem
-golang.org/x/crypto/sha3
crypto/md5
crypto/rc4
-os/exec
-github.com/shibumi/go-pathspec
-github.com/spf13/afero/mem
-crypto/cipher
+crypto/internal/fips140/mlkem
github.com/skratchdot/open-golang/open
github.com/mitchellh/go-homedir
+crypto/cipher
+crypto/internal/boring
+crypto/des
+golang.org/x/crypto/chacha20
+vendor/golang.org/x/crypto/chacha20
encoding/hex
google.golang.org/protobuf/internal/errors
-go/token
compress/flate
encoding/json
+go/token
google.golang.org/protobuf/internal/version
-crypto/internal/boring
-crypto/des
+crypto/aes
math/big
-net/url
-golang.org/x/crypto/chacha20
google.golang.org/protobuf/encoding/protowire
-crypto/aes
-crypto/sha512
crypto/ecdh
+crypto/sha512
crypto/sha1
crypto/sha256
google.golang.org/protobuf/reflect/protoreflect
+net/url
crypto/hmac
golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
log
runtime/debug
golang.org/x/crypto/pbkdf2
-github.com/opencontainers/go-digest
golang.org/x/crypto/curve25519
-vendor/golang.org/x/crypto/chacha20
golang.org/x/crypto/scrypt
+github.com/opencontainers/go-digest
+vendor/golang.org/x/crypto/chacha20poly1305
vendor/golang.org/x/text/unicode/norm
vendor/golang.org/x/text/unicode/bidi
-compress/gzip
vendor/golang.org/x/net/http2/hpack
mime
github.com/sigstore/sigstore-go/pkg/util
-vendor/golang.org/x/crypto/chacha20poly1305
+compress/gzip
mime/quotedprintable
net/http/internal
flag
@@ -2993,219 +3029,219 @@
github.com/pkg/errors
github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer
encoding/csv
-vendor/golang.org/x/text/secure/bidirule
golang.org/x/term
+encoding/xml
+database/sql/driver
+vendor/golang.org/x/text/secure/bidirule
+gopkg.in/yaml.v3
google.golang.org/protobuf/internal/descfmt
google.golang.org/protobuf/internal/descopts
google.golang.org/protobuf/internal/strs
google.golang.org/protobuf/internal/encoding/messageset
google.golang.org/protobuf/internal/genid
google.golang.org/protobuf/internal/order
-google.golang.org/protobuf/internal/encoding/text
google.golang.org/protobuf/runtime/protoiface
+google.golang.org/protobuf/internal/encoding/text
google.golang.org/protobuf/reflect/protoregistry
google.golang.org/protobuf/internal/encoding/json
-testing
google.golang.org/protobuf/internal/protolazy
-encoding/xml
-database/sql/driver
-gopkg.in/yaml.v3
+testing
+github.com/oklog/ulid
+golang.org/x/sync/errgroup
github.com/secure-systems-lab/go-securesystemslib/cjson
github.com/mailru/easyjson/jlexer
-golang.org/x/sync/errgroup
-google.golang.org/protobuf/proto
-github.com/oklog/ulid
encoding/gob
+vendor/golang.org/x/net/idna
github.com/go-openapi/analysis/internal/debug
+google.golang.org/protobuf/proto
github.com/go-openapi/jsonreference/internal
-github.com/blang/semver
-internal/profile
-text/tabwriter
-vendor/golang.org/x/net/idna
-google.golang.org/protobuf/internal/encoding/defval
crypto/dsa
crypto/elliptic
+google.golang.org/protobuf/internal/encoding/defval
crypto/internal/boring/bbig
encoding/asn1
crypto/rand
-runtime/pprof
-google.golang.org/protobuf/internal/filedesc
-google.golang.org/protobuf/encoding/prototext
+github.com/blang/semver
+internal/profile
crypto/ed25519
crypto/rsa
github.com/secure-systems-lab/go-securesystemslib/encrypted
crypto/internal/hpke
-vendor/golang.org/x/crypto/cryptobyte
-crypto/x509/pkix
go.mongodb.org/mongo-driver/bson/primitive
+text/tabwriter
go.uber.org/atomic
go.uber.org/zap/internal/color
-golang.org/x/crypto/ed25519
+google.golang.org/protobuf/internal/filedesc
+google.golang.org/protobuf/encoding/prototext
github.com/sigstore/sigstore/pkg/signature/options
+runtime/pprof
+vendor/golang.org/x/crypto/cryptobyte
+crypto/x509/pkix
+go.mongodb.org/mongo-driver/x/bsonx/bsoncore
+golang.org/x/crypto/ed25519
+go.uber.org/multierr
compress/zlib
-golang.org/x/crypto/openpgp/elgamal
github.com/jedisct1/go-minisign
+golang.org/x/crypto/openpgp/elgamal
text/template/parse
-go.mongodb.org/mongo-driver/x/bsonx/bsoncore
+go.uber.org/zap/zapcore
golang.org/x/mod/sumdb/note
github.com/fsnotify/fsnotify/internal
-golang.org/x/text/unicode/norm
crypto/ecdsa
-go.uber.org/multierr
+golang.org/x/text/unicode/norm
github.com/spf13/jwalterweatherman
-github.com/subosito/gotenv
github.com/fsnotify/fsnotify
-go.uber.org/zap/zapcore
+github.com/subosito/gotenv
github.com/hashicorp/hcl/hcl/token
-gopkg.in/ini.v1
github.com/hashicorp/hcl/hcl/ast
github.com/hashicorp/hcl/hcl/scanner
github.com/hashicorp/hcl/json/token
-github.com/spf13/viper/internal/encoding/json
-google.golang.org/protobuf/internal/encoding/tag
-google.golang.org/protobuf/encoding/protojson
github.com/hashicorp/hcl/json/scanner
-github.com/pelletier/go-toml/v2/internal/danger
github.com/hashicorp/hcl/hcl/parser
-github.com/pelletier/go-toml/v2/unstable
-google.golang.org/protobuf/internal/impl
+gopkg.in/ini.v1
github.com/hashicorp/hcl/json/parser
-text/template
-golang.org/x/crypto/openpgp/packet
github.com/hashicorp/hcl/hcl/printer
+text/template
github.com/hashicorp/hcl
-github.com/pelletier/go-toml/v2/internal/tracker
-github.com/spf13/viper/internal/encoding/yaml
+github.com/spf13/viper/internal/encoding/json
+github.com/pelletier/go-toml/v2/internal/danger
+google.golang.org/protobuf/internal/encoding/tag
+google.golang.org/protobuf/encoding/protojson
go.mongodb.org/mongo-driver/bson/bsonrw
+github.com/pelletier/go-toml/v2/unstable
+google.golang.org/protobuf/internal/impl
+github.com/spf13/viper/internal/encoding/yaml
+github.com/spf13/viper/internal/encoding/hcl
github.com/go-openapi/runtime/logger
+golang.org/x/crypto/openpgp/packet
github.com/opentracing/opentracing-go/log
-go.uber.org/zap/internal
log/slog
-github.com/pelletier/go-toml/v2
-github.com/spf13/viper/internal/encoding/hcl
go.opentelemetry.io/otel/attribute
+github.com/pelletier/go-toml/v2/internal/tracker
+go.uber.org/zap/internal
go.opentelemetry.io/otel/codes
go.opentelemetry.io/otel/baggage
github.com/transparency-dev/merkle/compact
+github.com/pelletier/go-toml/v2
github.com/transparency-dev/merkle/rfc6962
-github.com/google/certificate-transparency-go/asn1
github.com/transparency-dev/merkle/proof
+github.com/google/certificate-transparency-go/asn1
golang.org/x/crypto/cryptobyte
os/user
-golang.org/x/crypto/openpgp
-gopkg.in/square/go-jose.v2/cipher
go.opentelemetry.io/otel/metric
html/template
go.opentelemetry.io/otel/trace
-go.opentelemetry.io/otel/semconv/v1.17.0
-gopkg.in/square/go-jose.v2/json
github.com/go-logr/logr
+go.opentelemetry.io/otel/semconv/v1.17.0
github.com/google/certificate-transparency-go/tls
-github.com/google/certificate-transparency-go/x509/pkix
github.com/go-logr/logr/funcr
+github.com/google/certificate-transparency-go/x509/pkix
+golang.org/x/crypto/openpgp
k8s.io/klog/internal/serialize
k8s.io/klog/internal/sloghandler
+gopkg.in/square/go-jose.v2/cipher
+gopkg.in/square/go-jose.v2/json
github.com/go-jose/go-jose/v3/cipher
+go.mongodb.org/mongo-driver/bson/bsoncodec
github.com/go-jose/go-jose/v3/json
github.com/segmentio/ksuid
+github.com/spf13/viper/internal/encoding/toml
github.com/sigstore/sigstore/pkg/oauth
github.com/google/go-containerregistry/internal/gzip
+github.com/go-logr/stdr
github.com/google/go-containerregistry/pkg/v1
-github.com/spf13/viper/internal/encoding/toml
github.com/containerd/stargz-snapshotter/estargz/errorutil
github.com/klauspost/compress/fse
+github.com/spf13/cast
github.com/google/go-containerregistry/pkg/logs
github.com/opencontainers/image-spec/specs-go
github.com/docker/docker-credential-helpers/credentials
github.com/opencontainers/image-spec/specs-go/v1
-github.com/go-logr/stdr
golang.org/x/sys/execabs
github.com/sirupsen/logrus
-github.com/spf13/cast
-go.mongodb.org/mongo-driver/bson/bsoncodec
-github.com/google/go-containerregistry/pkg/v1/match
+github.com/google/go-containerregistry/internal/redact
github.com/docker/docker-credential-helpers/client
+github.com/google/go-containerregistry/pkg/v1/match
+github.com/klauspost/compress/huff0
github.com/google/go-containerregistry/pkg/legacy
github.com/google/go-containerregistry/pkg/v1/stream
-github.com/google/go-containerregistry/internal/redact
-github.com/klauspost/compress/huff0
-github.com/docker/cli/cli/config/credentials
github.com/google/go-containerregistry/internal/retry
+github.com/docker/cli/cli/config/credentials
github.com/google/go-containerregistry/internal/verify
github.com/davecgh/go-spew/spew
-github.com/pmezard/go-difflib/difflib
-github.com/stretchr/testify/assert/yaml
github.com/spf13/viper/internal/encoding/dotenv
github.com/spf13/viper/internal/encoding/ini
-github.com/klauspost/compress/zstd
+github.com/pmezard/go-difflib/difflib
+github.com/stretchr/testify/assert/yaml
github.com/docker/cli/cli/config/configfile
-k8s.io/klog
-archive/tar
-github.com/docker/docker/pkg/homedir
-github.com/vbatts/tar-split/archive/tar
-github.com/docker/cli/cli/config
-crypto/x509
+github.com/klauspost/compress/zstd
github.com/google/go-containerregistry/pkg/name
net/textproto
-github.com/mitchellh/mapstructure
vendor/golang.org/x/net/http/httpproxy
+crypto/x509
github.com/google/uuid
+github.com/mitchellh/mapstructure
github.com/mailru/easyjson/buffer
-github.com/sigstore/sigstore/pkg/signature/payload
+github.com/spf13/pflag
+github.com/google/certificate-transparency-go/x509
github.com/mailru/easyjson/jwriter
+github.com/sigstore/sigstore/pkg/signature/payload
+k8s.io/klog
vendor/golang.org/x/net/http/httpguts
mime/multipart
net/mail
-github.com/spf13/pflag
-github.com/google/certificate-transparency-go/x509
+archive/tar
+github.com/vbatts/tar-split/archive/tar
+github.com/docker/docker/pkg/homedir
+github.com/docker/cli/cli/config
github.com/google/go-containerregistry/pkg/authn
go.mongodb.org/mongo-driver/bson
-google.golang.org/protobuf/internal/filetype
-google.golang.org/protobuf/runtime/protoimpl
-google.golang.org/protobuf/types/descriptorpb
-google.golang.org/protobuf/types/known/timestamppb
-github.com/sigstore/protobuf-specs/gen/pb-go/dsse
-google.golang.org/protobuf/types/known/structpb
-github.com/google/certificate-transparency-go
-github.com/in-toto/attestation/go/v1
+github.com/spf13/cobra
+github.com/containerd/stargz-snapshotter/estargz
+github.com/google/go-containerregistry/internal/zstd
+github.com/google/go-containerregistry/internal/compression
golang.org/x/crypto/ssh
github.com/sigstore/sigstore/pkg/cryptoutils
-github.com/secure-systems-lab/go-securesystemslib/signerverifier
-github.com/google/certificate-transparency-go/client/configpb
crypto/tls
-github.com/asaskevich/govalidator
github.com/digitorus/pkcs7
+github.com/asaskevich/govalidator
+github.com/secure-systems-lab/go-securesystemslib/signerverifier
+github.com/google/certificate-transparency-go
gopkg.in/square/go-jose.v2
github.com/go-jose/go-jose/v3
-github.com/containerd/stargz-snapshotter/estargz
-github.com/google/go-containerregistry/internal/zstd
+github.com/google/go-containerregistry/pkg/v1/partial
github.com/google/certificate-transparency-go/gossip/minimal/x509ext
github.com/sigstore/sigstore/pkg/signature
github.com/sigstore/sigstore-go/pkg/fulcio/certificate
-github.com/google/go-containerregistry/internal/compression
-github.com/spf13/cobra
-github.com/google/go-containerregistry/pkg/v1/partial
+google.golang.org/protobuf/internal/filetype
github.com/sigstore/timestamp-authority/pkg/x509
-github.com/digitorus/timestamp
github.com/google/go-containerregistry/pkg/v1/empty
+github.com/digitorus/timestamp
+google.golang.org/protobuf/runtime/protoimpl
+google.golang.org/protobuf/types/descriptorpb
+google.golang.org/protobuf/types/known/timestamppb
+google.golang.org/protobuf/types/known/structpb
+github.com/sigstore/protobuf-specs/gen/pb-go/dsse
github.com/sigstore/timestamp-authority/pkg/verification
github.com/theupdateframework/go-tuf/metadata
github.com/sigstore/rekor/pkg/pki/minisign
+github.com/google/certificate-transparency-go/client/configpb
+github.com/in-toto/attestation/go/v1
github.com/sigstore/rekor/pkg/pki/x509
+github.com/theupdateframework/go-tuf/metadata/trustedmetadata
google.golang.org/genproto/googleapis/api/annotations
github.com/sigstore/protobuf-specs/gen/pb-go/common/v1
-github.com/theupdateframework/go-tuf/metadata/trustedmetadata
+github.com/google/go-containerregistry/internal/estargz
github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1
github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1
-github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1
-github.com/secure-systems-lab/go-securesystemslib/dsse
-github.com/in-toto/in-toto-golang/in_toto
-github.com/sigstore/sigstore/pkg/signature/dsse
-github.com/google/go-containerregistry/internal/estargz
github.com/google/go-containerregistry/pkg/v1/tarball
+github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1
github.com/google/go-containerregistry/internal/windows
github.com/google/go-containerregistry/pkg/legacy/tarball
github.com/google/go-containerregistry/pkg/v1/mutate
+github.com/secure-systems-lab/go-securesystemslib/dsse
+github.com/in-toto/in-toto-golang/in_toto
+github.com/sigstore/sigstore/pkg/signature/dsse
github.com/google/go-containerregistry/pkg/v1/layout
net/http/httptrace
github.com/sassoftware/relic/lib/x509tools
@@ -3214,15 +3250,15 @@
github.com/sigstore/rekor/pkg/pki/pkcs7
github.com/theupdateframework/go-tuf/metadata/fetcher
github.com/go-openapi/errors
-github.com/go-openapi/swag
-github.com/magiconair/properties
expvar
+github.com/go-openapi/swag
github.com/go-chi/chi
net/http/pprof
-go.uber.org/zap
github.com/sigstore/rekor/pkg/pki/pgp
-github.com/sigstore/rekor/pkg/pki/ssh
github.com/sigstore/rekor/pkg/util
+github.com/sigstore/rekor/pkg/pki/ssh
+go.uber.org/zap
+github.com/magiconair/properties
github.com/spf13/afero
github.com/theupdateframework/go-tuf/metadata/config
github.com/theupdateframework/go-tuf/metadata/updater
@@ -3235,43 +3271,43 @@
go.opentelemetry.io/otel/semconv/internal/v2
net/http/httputil
golang.org/x/net/context/ctxhttp
-github.com/google/certificate-transparency-go/jsonclient
-github.com/spf13/viper/internal/encoding/javaproperties
go.opentelemetry.io/otel/internal/global
github.com/opentracing/opentracing-go/ext
-github.com/go-chi/chi/middleware
+github.com/google/certificate-transparency-go/jsonclient
github.com/google/certificate-transparency-go/x509util
-github.com/sigstore/sigstore-go/pkg/tuf
+github.com/go-chi/chi/middleware
+github.com/spf13/viper/internal/encoding/javaproperties
go.opentelemetry.io/otel/semconv/v1.17.0/httpconv
+github.com/sigstore/sigstore-go/pkg/tuf
github.com/hashicorp/go-cleanhttp
golang.org/x/oauth2/internal
github.com/google/certificate-transparency-go/client
-github.com/docker/distribution/registry/client/auth/challenge
-github.com/hashicorp/go-retryablehttp
-github.com/go-openapi/jsonpointer
golang.org/x/oauth2
+github.com/hashicorp/go-retryablehttp
+github.com/docker/distribution/registry/client/auth/challenge
net/http/httptest
github.com/google/certificate-transparency-go/loglist3
-github.com/sigstore/sigstore-go/pkg/root
github.com/google/go-containerregistry/pkg/v1/remote/transport
+github.com/sigstore/sigstore-go/pkg/root
go.opentelemetry.io/otel
-github.com/go-openapi/jsonreference
+github.com/coreos/go-oidc/v3/oidc
+github.com/go-openapi/jsonpointer
github.com/spf13/viper
github.com/google/certificate-transparency-go/ctutil
-github.com/go-openapi/spec
-github.com/coreos/go-oidc/v3/oidc
-github.com/stretchr/testify/assert
github.com/go-openapi/runtime
+github.com/stretchr/testify/assert
github.com/sigstore/rekor/pkg/log
-github.com/google/go-containerregistry/pkg/v1/remote
+github.com/go-openapi/jsonreference
github.com/sigstore/sigstore/pkg/oauthflow
+github.com/go-openapi/spec
+github.com/google/go-containerregistry/pkg/v1/remote
github.com/go-openapi/runtime/security
github.com/go-openapi/runtime/yamlpc
+github.com/google/go-containerregistry/pkg/crane
github.com/go-openapi/analysis/internal/flatten/normalize
github.com/go-openapi/analysis/internal/flatten/operations
github.com/go-openapi/analysis/internal/flatten/replace
github.com/go-openapi/analysis/internal/flatten/schutils
-github.com/google/go-containerregistry/pkg/crane
github.com/go-openapi/analysis/internal/flatten/sortref
github.com/go-openapi/analysis
github.com/go-openapi/loads
@@ -3285,25 +3321,25 @@
github.com/sigstore/rekor/pkg/generated/client/index
github.com/sigstore/rekor/pkg/generated/client/pubkey
github.com/sigstore/rekor/pkg/generated/client/tlog
+github.com/sigstore/rekor/pkg/generated/client
github.com/sigstore/rekor/pkg/types/dsse
github.com/sigstore/rekor/pkg/types/hashedrekord
-github.com/sigstore/rekor/pkg/types/intoto
github.com/sigstore/rekor/pkg/tle
+github.com/sigstore/rekor/pkg/types/intoto
github.com/sigstore/rekor/pkg/types/rekord
-github.com/sigstore/rekor/pkg/generated/client
-github.com/sigstore/rekor/pkg/types/dsse/v0.0.1
-github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1
github.com/sigstore/rekor/pkg/verify
github.com/sigstore/rekor/pkg/client
+github.com/sigstore/rekor/pkg/types/dsse/v0.0.1
github.com/sigstore/rekor/pkg/types/intoto/v0.0.2
+github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1
github.com/sigstore/sigstore-go/pkg/tlog
github.com/sigstore/sigstore-go/pkg/verify
github.com/sigstore/sigstore-go/pkg/bundle
github.com/sigstore/sigstore-go/pkg/sign
github.com/sigstore/sigstore-go/cmd/sigstore-go
+github.com/sigstore/sigstore-go/examples/oci-image-verification
github.com/sigstore/sigstore-go/pkg/testing/ca
github.com/sigstore/sigstore-go/pkg/testing/data
-github.com/sigstore/sigstore-go/examples/oci-image-verification
github.com/sigstore/sigstore-go/cmd/conformance
github.com/sigstore/sigstore-go/examples/sigstore-go-signing
debian/rules execute_before_dh_auto_test
@@ -3360,7 +3396,7 @@
=== RUN Test_BundleValidation/name:No_bundle_content
=== RUN Test_BundleValidation/name:Nil_verification_material
=== RUN Test_BundleValidation/name:Valid_protobuf_bundle
---- PASS: Test_BundleValidation (0.02s)
+--- PASS: Test_BundleValidation (0.00s)
--- PASS: Test_BundleValidation/name:Empty_verification_material (0.00s)
--- PASS: Test_BundleValidation/name:No_bundle_content (0.00s)
--- PASS: Test_BundleValidation/name:Nil_verification_material (0.00s)
@@ -3424,32 +3460,16 @@
=== RUN Test_validate/v0.1_with_inclusion_promise
=== RUN Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint
=== RUN Test_validate/v0.1_with_inclusion_proof_&_promise
-=== CONT TestMinVersion/invalid
-=== CONT TestMinVersion/blank
-=== CONT TestMinVersion/new-format-without-v-unexpected
-=== CONT TestMinVersion/new-format
-=== CONT TestMinVersion/new-format-unexpected
-=== CONT TestMinVersion/new-format-exact
-=== CONT TestMinVersion/old-format-without-v
-=== CONT TestMinVersion/old-format-unexpected
---- PASS: TestMinVersion (0.00s)
- --- PASS: TestMinVersion/old-format (0.00s)
- --- PASS: TestMinVersion/new-format-without-v (0.00s)
- --- PASS: TestMinVersion/invalid (0.00s)
- --- PASS: TestMinVersion/blank (0.00s)
- --- PASS: TestMinVersion/new-format-without-v-unexpected (0.00s)
- --- PASS: TestMinVersion/new-format (0.00s)
- --- PASS: TestMinVersion/new-format-unexpected (0.00s)
- --- PASS: TestMinVersion/new-format-exact (0.00s)
- --- PASS: TestMinVersion/old-format-without-v (0.00s)
- --- PASS: TestMinVersion/old-format-unexpected (0.00s)
=== RUN Test_validate/v0.2_with_no_inclusion_proof
=== RUN Test_validate/v0.2_with_inclusion_proof_without_checkpoint
=== RUN Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint
=== RUN Test_validate/v0.2_with_inclusion_proof
+=== CONT TestMinVersion/invalid
+=== CONT TestMinVersion/blank
+=== CONT TestMinVersion/new-format-without-v-unexpected
=== RUN Test_validate/v0.3_with_x.509_certificate_chain
=== RUN Test_validate/v0.3_without_x.509_certificate_chain
---- PASS: Test_validate (0.03s)
+--- PASS: Test_validate (0.02s)
--- PASS: Test_validate/invalid_media_type (0.00s)
--- PASS: Test_validate/version_too_low (0.00s)
--- PASS: Test_validate/version_too_high (0.00s)
@@ -3457,13 +3477,16 @@
--- PASS: Test_validate/v0.1_with_no_inclusion_promise (0.00s)
--- PASS: Test_validate/v0.1_with_inclusion_promise (0.00s)
--- PASS: Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint (0.00s)
- --- PASS: Test_validate/v0.1_with_inclusion_proof_&_promise (0.03s)
+ --- PASS: Test_validate/v0.1_with_inclusion_proof_&_promise (0.00s)
--- PASS: Test_validate/v0.2_with_no_inclusion_proof (0.00s)
--- PASS: Test_validate/v0.2_with_inclusion_proof_without_checkpoint (0.00s)
--- PASS: Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint (0.00s)
- --- PASS: Test_validate/v0.2_with_inclusion_proof (0.00s)
+ --- PASS: Test_validate/v0.2_with_inclusion_proof (0.01s)
--- PASS: Test_validate/v0.3_with_x.509_certificate_chain (0.00s)
--- PASS: Test_validate/v0.3_without_x.509_certificate_chain (0.00s)
+=== CONT TestMinVersion/new-format
+=== CONT TestMinVersion/new-format-unexpected
+=== CONT TestMinVersion/new-format-exact
=== CONT TestMediaTypeString
=== RUN TestMediaTypeString/normal-semver
=== PAUSE TestMediaTypeString/normal-semver
@@ -3486,6 +3509,19 @@
--- PASS: TestMediaTypeString/blank (0.00s)
--- PASS: TestMediaTypeString/old-semver2 (0.00s)
--- PASS: TestMediaTypeString/old-semver1 (0.00s)
+=== CONT TestMinVersion/old-format-without-v
+=== CONT TestMinVersion/old-format-unexpected
+--- PASS: TestMinVersion (0.00s)
+ --- PASS: TestMinVersion/old-format (0.00s)
+ --- PASS: TestMinVersion/new-format-without-v (0.00s)
+ --- PASS: TestMinVersion/invalid (0.00s)
+ --- PASS: TestMinVersion/blank (0.00s)
+ --- PASS: TestMinVersion/new-format-without-v-unexpected (0.00s)
+ --- PASS: TestMinVersion/new-format (0.00s)
+ --- PASS: TestMinVersion/new-format-unexpected (0.00s)
+ --- PASS: TestMinVersion/new-format-exact (0.00s)
+ --- PASS: TestMinVersion/old-format-without-v (0.00s)
+ --- PASS: TestMinVersion/old-format-unexpected (0.00s)
=== RUN TestVerificationContent/no_verification_material
=== RUN TestVerificationContent/certificate_chain_with_zero_certs
=== RUN TestVerificationContent/certificate_chain_with_self-signed_cert
@@ -3500,7 +3536,7 @@
=== RUN TestVerificationContent/empty_certificate
=== RUN TestVerificationContent/public_key
=== RUN TestVerificationContent/nil_public_key
---- PASS: TestVerificationContent (0.09s)
+--- PASS: TestVerificationContent (0.04s)
--- PASS: TestVerificationContent/no_verification_material (0.00s)
--- PASS: TestVerificationContent/certificate_chain_with_zero_certs (0.00s)
--- PASS: TestVerificationContent/certificate_chain_with_self-signed_cert (0.00s)
@@ -3518,17 +3554,17 @@
=== RUN FuzzBundle
--- PASS: FuzzBundle (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/bundle 0.248s
+ok github.com/sigstore/sigstore-go/pkg/bundle 0.129s
=== RUN TestSummarizeCertificateWithActionsBundle
---- PASS: TestSummarizeCertificateWithActionsBundle (0.01s)
+--- PASS: TestSummarizeCertificateWithActionsBundle (0.02s)
=== RUN TestSummarizeCertificateWithOauthBundle
--- PASS: TestSummarizeCertificateWithOauthBundle (0.00s)
=== RUN TestSummarizeCertificateWithOtherNameSAN
--- PASS: TestSummarizeCertificateWithOtherNameSAN (0.00s)
=== RUN TestCompareExtensions
---- PASS: TestCompareExtensions (0.01s)
+--- PASS: TestCompareExtensions (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.125s
+ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.179s
=== RUN TestSigningConfig_FulcioCertificateAuthorityURL
=== RUN TestSigningConfig_FulcioCertificateAuthorityURL/valid
=== RUN TestSigningConfig_FulcioCertificateAuthorityURL/empty
@@ -3562,13 +3598,13 @@
=== RUN TestNewSigningConfigWithOptions
--- PASS: TestNewSigningConfigWithOptions (0.00s)
=== RUN TestGetSigstoreTrustedRoot
---- PASS: TestGetSigstoreTrustedRoot (0.00s)
+--- PASS: TestGetSigstoreTrustedRoot (0.01s)
=== RUN TestTrustedMaterialCollectionECDSA
--- PASS: TestTrustedMaterialCollectionECDSA (0.00s)
=== RUN TestTrustedMaterialCollectionED25519
--- PASS: TestTrustedMaterialCollectionED25519 (0.02s)
=== RUN TestTrustedMaterialCollectionRSA
---- PASS: TestTrustedMaterialCollectionRSA (1.76s)
+--- PASS: TestTrustedMaterialCollectionRSA (2.24s)
=== RUN TestFromJSONToJSON
--- PASS: TestFromJSONToJSON (0.00s)
=== RUN TestCertificateAuthority
@@ -3580,12 +3616,12 @@
=== RUN TestCertificateAuthority/bad_leaf
=== RUN TestCertificateAuthority/bad_intermediate
=== RUN TestCertificateAuthority/bad_root
---- PASS: TestCertificateAuthority (0.02s)
- --- PASS: TestCertificateAuthority/normal (0.00s)
+--- PASS: TestCertificateAuthority (0.01s)
+ --- PASS: TestCertificateAuthority/normal (0.01s)
--- PASS: TestCertificateAuthority/no_validity_period_defined (0.00s)
--- PASS: TestCertificateAuthority/before_validity_period (0.00s)
--- PASS: TestCertificateAuthority/after_validity_period (0.00s)
- --- PASS: TestCertificateAuthority/missing_intermediate (0.01s)
+ --- PASS: TestCertificateAuthority/missing_intermediate (0.00s)
--- PASS: TestCertificateAuthority/bad_leaf (0.00s)
--- PASS: TestCertificateAuthority/bad_intermediate (0.00s)
--- PASS: TestCertificateAuthority/bad_root (0.00s)
@@ -3599,20 +3635,20 @@
=== RUN TestTimestampingAuthority/bad_intermediate
=== RUN TestTimestampingAuthority/bad_root
=== RUN TestTimestampingAuthority/signature_over_wrong_artifact
---- PASS: TestTimestampingAuthority (0.03s)
+--- PASS: TestTimestampingAuthority (0.05s)
--- PASS: TestTimestampingAuthority/normal (0.00s)
--- PASS: TestTimestampingAuthority/no_validity_period_defined (0.00s)
- --- PASS: TestTimestampingAuthority/before_validity_period (0.00s)
- --- PASS: TestTimestampingAuthority/after_validity_period (0.01s)
+ --- PASS: TestTimestampingAuthority/before_validity_period (0.01s)
+ --- PASS: TestTimestampingAuthority/after_validity_period (0.00s)
--- PASS: TestTimestampingAuthority/missing_intermediate (0.00s)
--- PASS: TestTimestampingAuthority/bad_leaf (0.00s)
--- PASS: TestTimestampingAuthority/bad_intermediate (0.00s)
--- PASS: TestTimestampingAuthority/bad_root (0.00s)
- --- PASS: TestTimestampingAuthority/signature_over_wrong_artifact (0.00s)
+ --- PASS: TestTimestampingAuthority/signature_over_wrong_artifact (0.01s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/root 1.924s
+ok github.com/sigstore/sigstore-go/pkg/root 2.471s
=== RUN Test_GetCertificate
---- PASS: Test_GetCertificate (4.02s)
+--- PASS: Test_GetCertificate (4.03s)
=== RUN Test_PlainData
--- PASS: Test_PlainData (0.00s)
=== RUN Test_DSSEData
@@ -3622,33 +3658,33 @@
=== RUN Test_Bundle
--- PASS: Test_Bundle (0.00s)
=== RUN Test_GetTimestamp
---- PASS: Test_GetTimestamp (4.01s)
+--- PASS: Test_GetTimestamp (4.02s)
=== RUN Test_GetTransparencyLogEntry
--- PASS: Test_GetTransparencyLogEntry (0.02s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/sign 8.184s
+ok github.com/sigstore/sigstore-go/pkg/sign 8.195s
? github.com/sigstore/sigstore-go/pkg/testing/ca [no test files]
? github.com/sigstore/sigstore-go/pkg/testing/data [no test files]
=== RUN FuzzParseEntry
--- PASS: FuzzParseEntry (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/tlog 0.108s
+ok github.com/sigstore/sigstore-go/pkg/tlog 0.165s
=== RUN TestNewOfflineClientFail
--- PASS: TestNewOfflineClientFail (0.02s)
=== RUN TestRefresh
---- PASS: TestRefresh (0.02s)
+--- PASS: TestRefresh (0.04s)
=== RUN TestInvalidRoot
---- PASS: TestInvalidRoot (0.01s)
+--- PASS: TestInvalidRoot (0.02s)
=== RUN TestInvalidRepositoryURL
--- PASS: TestInvalidRepositoryURL (0.00s)
=== RUN TestCache
---- PASS: TestCache (0.06s)
+--- PASS: TestCache (0.05s)
=== RUN TestExpiredTimestamp
---- PASS: TestExpiredTimestamp (0.03s)
+--- PASS: TestExpiredTimestamp (0.04s)
=== RUN TestConfig
--- PASS: TestConfig (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/tuf 0.188s
+ok github.com/sigstore/sigstore-go/pkg/tuf 0.232s
? github.com/sigstore/sigstore-go/pkg/util [no test files]
=== RUN TestCertificateIdentityVerify
--- PASS: TestCertificateIdentityVerify (0.00s)
@@ -3658,28 +3694,28 @@
=== RUN TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_0_signatures
=== RUN TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_1_signatures
=== RUN TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_2_signatures
---- PASS: TestVerifyEnvelopeSignatureCount (0.01s)
+--- PASS: TestVerifyEnvelopeSignatureCount (0.00s)
--- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_0_signatures (0.00s)
- --- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_1_signatures (0.01s)
+ --- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_1_signatures (0.00s)
--- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_2_signatures (0.00s)
=== RUN TestVerifyValidityPeriod
=== RUN TestVerifyValidityPeriod/before_validity_period
=== RUN TestVerifyValidityPeriod/inside_validity_period
=== RUN TestVerifyValidityPeriod/after_validity_period
---- PASS: TestVerifyValidityPeriod (0.01s)
+--- PASS: TestVerifyValidityPeriod (0.02s)
--- PASS: TestVerifyValidityPeriod/before_validity_period (0.00s)
- --- PASS: TestVerifyValidityPeriod/inside_validity_period (0.01s)
+ --- PASS: TestVerifyValidityPeriod/inside_validity_period (0.00s)
--- PASS: TestVerifyValidityPeriod/after_validity_period (0.00s)
=== RUN TestSignatureVerifier
---- PASS: TestSignatureVerifier (0.02s)
+--- PASS: TestSignatureVerifier (0.03s)
=== RUN TestEnvelopeSubject
---- PASS: TestEnvelopeSubject (0.05s)
+--- PASS: TestEnvelopeSubject (0.03s)
=== RUN TestSignatureVerifierMessageSignature
---- PASS: TestSignatureVerifierMessageSignature (0.03s)
+--- PASS: TestSignatureVerifierMessageSignature (0.02s)
=== RUN TestTooManySubjects
--- PASS: TestTooManySubjects (0.04s)
=== RUN TestTooManyDigests
---- PASS: TestTooManyDigests (0.02s)
+--- PASS: TestTooManyDigests (0.01s)
=== RUN TestSignedEntityVerifierInitialization
--- PASS: TestSignedEntityVerifierInitialization (0.00s)
=== RUN TestSignedEntityVerifierInitRequiresTimestamp
@@ -3687,7 +3723,7 @@
=== RUN TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully
--- PASS: TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully (0.05s)
=== RUN TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully
---- PASS: TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully (0.03s)
+--- PASS: TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully (0.01s)
=== RUN TestEntitySignedByPublicGoodWithHighTlogThresholdFails
--- PASS: TestEntitySignedByPublicGoodWithHighTlogThresholdFails (0.01s)
=== RUN TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails
@@ -3705,31 +3741,31 @@
=== RUN TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully
--- PASS: TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully (0.05s)
=== RUN TestThatAllTheJSONKeysStartWithALowerCase
---- PASS: TestThatAllTheJSONKeysStartWithALowerCase (0.02s)
+--- PASS: TestThatAllTheJSONKeysStartWithALowerCase (0.04s)
=== RUN TestSigstoreBundle2Sig
---- PASS: TestSigstoreBundle2Sig (0.01s)
+--- PASS: TestSigstoreBundle2Sig (0.02s)
=== RUN TestStatementSerializesToValidInTotoStatement
--- PASS: TestStatementSerializesToValidInTotoStatement (0.00s)
=== RUN TestTlogVerifier
--- PASS: TestTlogVerifier (0.03s)
=== RUN TestIgnoredTLogEntries
---- PASS: TestIgnoredTLogEntries (0.02s)
+--- PASS: TestIgnoredTLogEntries (0.05s)
=== RUN TestInvalidTLogEntries
---- PASS: TestInvalidTLogEntries (0.01s)
+--- PASS: TestInvalidTLogEntries (0.02s)
=== RUN TestNoTLogEntries
--- PASS: TestNoTLogEntries (0.01s)
=== RUN TestDuplicateTlogEntries
---- PASS: TestDuplicateTlogEntries (0.01s)
+--- PASS: TestDuplicateTlogEntries (0.02s)
=== RUN TestMaxAllowedTlogEntries
--- PASS: TestMaxAllowedTlogEntries (0.01s)
=== RUN TestOfflineInclusionProofVerification
---- PASS: TestOfflineInclusionProofVerification (0.01s)
+--- PASS: TestOfflineInclusionProofVerification (0.03s)
=== RUN TestTimestampAuthorityVerifier
---- PASS: TestTimestampAuthorityVerifier (0.03s)
+--- PASS: TestTimestampAuthorityVerifier (0.05s)
=== RUN TestTimestampAuthorityVerifierWithoutThreshold
---- PASS: TestTimestampAuthorityVerifierWithoutThreshold (0.02s)
+--- PASS: TestTimestampAuthorityVerifierWithoutThreshold (0.03s)
=== RUN TestDuplicateTimestamps
---- PASS: TestDuplicateTimestamps (0.00s)
+--- PASS: TestDuplicateTimestamps (0.03s)
=== RUN TestBadTSASignature
--- PASS: TestBadTSASignature (0.01s)
=== RUN TestBadTSACertificateChain
@@ -3738,12 +3774,12 @@
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/valid
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past
---- PASS: TestBadTSACertificateChainOutsideValidityPeriod (0.04s)
+--- PASS: TestBadTSACertificateChainOutsideValidityPeriod (0.05s)
--- PASS: TestBadTSACertificateChainOutsideValidityPeriod/valid (0.01s)
- --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future (0.01s)
+ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future (0.03s)
--- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past (0.01s)
=== RUN TestTooManyTimestamps
---- PASS: TestTooManyTimestamps (0.02s)
+--- PASS: TestTooManyTimestamps (0.01s)
=== RUN FuzzVerifyTimestampAuthorityWithoutThreshold
--- PASS: FuzzVerifyTimestampAuthorityWithoutThreshold (0.00s)
=== RUN FuzzVerifyTimestampAuthorityWithThreshold
@@ -3759,7 +3795,7 @@
=== RUN FuzzVerifySignatureWithArtifactDigest
--- PASS: FuzzVerifySignatureWithArtifactDigest (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/verify 0.774s
+ok github.com/sigstore/sigstore-go/pkg/verify 0.922s
create-stamp debian/debhelper-build-stamp
dh_testroot -O--builddirectory=_build -O--buildsystem=golang
dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -3813,9 +3849,9 @@
dpkg-gencontrol: warning: package sigstore-go: substitution variable ${misc:Static-Built-Using} unused, but is defined
dh_md5sums -O--builddirectory=_build -O--buildsystem=golang
dh_builddeb -O--builddirectory=_build -O--buildsystem=golang
-dpkg-deb: building package 'sigstore-go' in '../sigstore-go_0.7.0-2_arm64.deb'.
dpkg-deb: building package 'golang-github-sigstore-sigstore-go-dev' in '../golang-github-sigstore-sigstore-go-dev_0.7.0-2_all.deb'.
dpkg-deb: building package 'sigstore-go-dbgsym' in '../sigstore-go-dbgsym_0.7.0-2_arm64.deb'.
+dpkg-deb: building package 'sigstore-go' in '../sigstore-go_0.7.0-2_arm64.deb'.
dpkg-genbuildinfo --build=binary -O../sigstore-go_0.7.0-2_arm64.buildinfo
dpkg-genchanges --build=binary -O../sigstore-go_0.7.0-2_arm64.changes
dpkg-genchanges: info: binary-only upload (no source code included)
@@ -3823,12 +3859,14 @@
dpkg-buildpackage: info: binary-only upload (no source included)
dpkg-genchanges: info: not including original source code in upload
I: copying local configuration
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/1680452/tmp/hooks/B01_cleanup finished
I: unmounting dev/ptmx filesystem
I: unmounting dev/pts filesystem
I: unmounting dev/shm filesystem
I: unmounting proc filesystem
I: unmounting sys filesystem
I: cleaning the build env
-I: removing directory /srv/workspace/pbuilder/2595617 and its subdirectories
-I: Current time: Mon Mar 17 00:49:09 -12 2025
-I: pbuilder-time-stamp: 1742215749
+I: removing directory /srv/workspace/pbuilder/1680452 and its subdirectories
+I: Current time: Mon Apr 20 09:20:26 +14 2026
+I: pbuilder-time-stamp: 1776626426