Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Missing Signature Digest Algorithm Specification flag in cosign verify-attestation #1478

Open
capitalterefe opened this issue Oct 26, 2023 · 0 comments
Open

Missing Signature Digest Algorithm Specification flag in cosign verify-attestation #1478

capitalterefe opened this issue Oct 26, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@capitalterefe
Copy link

Description

I have a requirement to use AWS KMS ECC Keys (ECC_NIST_P384 or ECC_NIST_P521) for signing and verification.
cosign verify-attestation lacks a flag to specify the signature digest algorithm during verifying the attestation and default to SHA256. this has result in the attestation failing during processing the signature. cosign verify on the other hand has --signature-digest-algorithm flag which allows to control digest algorithm to use
@capitalterefe capitalterefe added the enhancement New feature or request label Oct 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@capitalterefe