From ed3cc32c832a03c6f0de51e8f87b65b4576c8c61 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Jan 2026 16:37:17 +0000 Subject: [PATCH 1/2] build(deps): bump sigstore/sigstore-conformance in the actions group Bumps the actions group with 1 update: [sigstore/sigstore-conformance](https://github.com/sigstore/sigstore-conformance). Updates `sigstore/sigstore-conformance` from 0.0.24 to 0.0.25 - [Release notes](https://github.com/sigstore/sigstore-conformance/releases) - [Commits](https://github.com/sigstore/sigstore-conformance/compare/b7856cfca56fe3f957d4cefdc2c359cc36a84e14...eae6eb1f59e25c6d3d602c5dad3dc55767c2f1cb) --- updated-dependencies: - dependency-name: sigstore/sigstore-conformance dependency-version: 0.0.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/conformance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml index a6c0ab93f..38b5582b3 100644 --- a/.github/workflows/conformance.yml +++ b/.github/workflows/conformance.yml @@ -28,7 +28,7 @@ jobs: - name: install sigstore-python run: python -m pip install . - - uses: sigstore/sigstore-conformance@b7856cfca56fe3f957d4cefdc2c359cc36a84e14 # v0.0.24 + - uses: sigstore/sigstore-conformance@eae6eb1f59e25c6d3d602c5dad3dc55767c2f1cb # v0.0.25 with: entrypoint: ${{ github.workspace }}/test/integration/sigstore-python-conformance xfail: "test_verify*intoto-with-custom-trust-root]" # see issue 1442 From 6e684bf7b2258540d817e7be556927263fffbd93 Mon Sep 17 00:00:00 2001 From: Jussi Kukkonen Date: Fri, 16 Jan 2026 18:43:12 +0200 Subject: [PATCH 2/2] conformance: Add expected failures for the "managed key" tests We only support OIDC identities at the moment Signed-off-by: Jussi Kukkonen --- .github/workflows/conformance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml index 38b5582b3..69f593252 100644 --- a/.github/workflows/conformance.yml +++ b/.github/workflows/conformance.yml @@ -31,7 +31,7 @@ jobs: - uses: sigstore/sigstore-conformance@eae6eb1f59e25c6d3d602c5dad3dc55767c2f1cb # v0.0.25 with: entrypoint: ${{ github.workspace }}/test/integration/sigstore-python-conformance - xfail: "test_verify*intoto-with-custom-trust-root]" # see issue 1442 + xfail: "test_verify*intoto-with-custom-trust-root] test_verify*managed-key-happy-path] test_verify*managed-key-and-trusted-root]" # see issues 1442, 1244 file-issue-on-failure: needs: [conformance]