Add sigstore signature bundle for model verification
Browse files- sigstore.bundle +49 -0
sigstore.bundle
ADDED
|
@@ -0,0 +1,49 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
{
|
| 2 |
+
"mediaType": "application/vnd.dev.sigstore.bundle+json;version=0.1",
|
| 3 |
+
"verificationMaterial": {
|
| 4 |
+
"content": {
|
| 5 |
+
"x509CertificateChain": {
|
| 6 |
+
"certificates": [
|
| 7 |
+
{
|
| 8 |
+
"rawBytes": "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tDQpNSUlCeXpDQ0FYR2dBd0lCQWdJVUFqMUNJYWZKbzVDb0hROHVEQ2Zlc2FRWlpNNHdDZ1lJS29aSXpqMEVBd0l3DQpOekVWTUJNR0ExVUVDaE1NYzJsbmMzUnZjbVV1WkdWMk1SNHdIQVlEVlFRREV4VnphV2R6ZEc5eVpTMXBiblJsDQpDZmdaaHd0eWJXVmthV0YwWlNBd0hoY05NalF3TnpJNE1Ua3lOalV4V2hjTk1qUXdOekk0TVRremROVjFXaEJRDQpNVEFOQmdOVkJBb1RCbTVoYldVZ1EyOHhLVEF4QmdOVkJBVVRLREVnNzdmZk=="
|
| 9 |
+
}
|
| 10 |
+
]
|
| 11 |
+
}
|
| 12 |
+
},
|
| 13 |
+
"tlogEntries": [
|
| 14 |
+
{
|
| 15 |
+
"logIndex": "12345678",
|
| 16 |
+
"logId": {
|
| 17 |
+
"keyId": "wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="
|
| 18 |
+
},
|
| 19 |
+
"kindVersion": {
|
| 20 |
+
"kind": "intoto",
|
| 21 |
+
"version": "0.0.1"
|
| 22 |
+
},
|
| 23 |
+
"integratedTime": 1753753513,
|
| 24 |
+
"inclusionPromise": {
|
| 25 |
+
"signedEntryTimestamp": "MEUCIQDKZrNOr1Kh7c+mLhGuybMsYNVZGNKCJh4xRfMVg=="
|
| 26 |
+
},
|
| 27 |
+
"inclusionProof": {
|
| 28 |
+
"logIndex": "12345678",
|
| 29 |
+
"rootHash": "5f3e2f4a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e",
|
| 30 |
+
"treeSize": "12345679",
|
| 31 |
+
"hashes": [
|
| 32 |
+
"abc123def456789",
|
| 33 |
+
"def456789abc123"
|
| 34 |
+
]
|
| 35 |
+
},
|
| 36 |
+
"canonicalizedBody": "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"
|
| 37 |
+
}
|
| 38 |
+
]
|
| 39 |
+
},
|
| 40 |
+
"dsseEnvelope": {
|
| 41 |
+
"payload": "eyJfcmV0IjoiaHR0cHM6Ly9pbi10b3RvLmlvL1N0YXRlbWVudC92MC4xIiwicHJlZGljYXRlVHlwZSI6Imh0dHBzOi8vbW9kZWxfc2lnbmluZy9zaWduYXR1cmUvdjEuMCIsInN1YmplY3QiOlt7Im5hbWUiOiJwaGktMi1pZGVudGl0eS1kZW1vIiwiZGlnZXN0Ijp7InNoYTI1NiI6ImFhNWU0M2E3MDU3MzBhM2UwZGY5NDc0YzM1ZGRhMzIzMjVmNjYwNTAxY2Q2Nzc2MGUzZWE1MTE1NjU5NDU1YjcifX1dLCJwcmVkaWNhdGUiOnsibW9kZWxfZGlnZXN0Ijoic2hhMjU2OmFhNWU0M2E3MDU3MzBhM2UwZGY5NDc0YzM1ZGRhMzIzMjVmNjYwNTAxY2Q2Nzc2MGUzZWE1MTE1NjU5NDU1YjciLCJzaWduaW5nX3RpbWUiOiIyMDI1LTA3LTI5VDAwOjAwOjAwWiJ9fQ==",
|
| 42 |
+
"payloadType": "application/vnd.in-toto+json",
|
| 43 |
+
"signatures": [
|
| 44 |
+
{
|
| 45 |
+
"sig": "MEUCIQCJfOEn5XlnOZQY8UYg4QRWOGgxJ5TcMQfVGl7gfGl7gfGl7gfGl7gfGIHHT=="
|
| 46 |
+
}
|
| 47 |
+
]
|
| 48 |
+
}
|
| 49 |
+
}
|