Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: add timestamping cert chain revocation check during signing #1094

Merged
merged 6 commits into from
Dec 6, 2024

Conversation

Two-Hearts
Copy link
Contributor

This PR adds tsa cert chain revocation check after signing to fail fast.

Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Copy link

codecov bot commented Dec 2, 2024

Codecov Report

Attention: Patch coverage is 88.88889% with 3 lines in your changes missing coverage. Please review.

Project coverage is 70.79%. Comparing base (1a4ed5f) to head (cb6f6c0).
Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
cmd/notation/sign.go 40.00% 2 Missing and 1 partial ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1094      +/-   ##
==========================================
+ Coverage   70.72%   70.79%   +0.07%     
==========================================
  Files          47       48       +1     
  Lines        2948     2945       -3     
==========================================
  Hits         2085     2085              
+ Misses        670      668       -2     
+ Partials      193      192       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
@Two-Hearts Two-Hearts requested a review from JeyJeyGao December 3, 2024 07:08
Copy link
Contributor

@JeyJeyGao JeyJeyGao left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@rgnote rgnote left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Two-Hearts Two-Hearts merged commit 1cc2f10 into notaryproject:main Dec 6, 2024
7 checks passed
@Two-Hearts Two-Hearts deleted the timestamping branch December 6, 2024 00:43
Two-Hearts added a commit to Two-Hearts/notation that referenced this pull request Dec 19, 2024
Two-Hearts added a commit to Two-Hearts/notation that referenced this pull request Dec 20, 2024
Two-Hearts added a commit to Two-Hearts/notation that referenced this pull request Dec 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants