Diff of the two buildlogs: -- --- b1/build.log 2025-04-12 09:42:35.564721313 +0000 +++ b2/build.log 2025-04-12 09:57:14.480674562 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Fri Apr 11 21:24:05 -12 2025 -I: pbuilder-time-stamp: 1744449845 +I: Current time: Sat May 16 06:05:38 +14 2026 +I: pbuilder-time-stamp: 1778861138 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz] I: copying local configuration @@ -22,51 +22,83 @@ dpkg-source: info: unpacking sigstore-go_0.7.1-2.debian.tar.xz I: Not using root during the build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/481254/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/D01_modify_environment starting +debug: Running on infom02-amd64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 May 15 16:05 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='amd64' - DEBIAN_FRONTEND='noninteractive' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu") + BASH_VERSION='5.2.37(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=amd64 + DEBIAN_FRONTEND=noninteractive DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 ' - DISTRIBUTION='unstable' - HOME='/root' - HOST_ARCH='amd64' + DIRSTACK=() + DISTRIBUTION=unstable + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=x86_64 + HOST_ARCH=amd64 IFS=' ' - INVOCATION_ID='ef2b713ed66142a788fe8837c620ad46' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='481254' - PS1='# ' - PS2='> ' + INVOCATION_ID=e677aa27bb2a42e281fdb2abbaa38e6d + LANG=C + LANGUAGE=et_EE:et + LC_ALL=C + MACHTYPE=x86_64-pc-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=2474186 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.toU73KiP/pbuilderrc_v3xh --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.toU73KiP/b1 --logfile b1/build.log sigstore-go_0.7.1-2.dsc' - SUDO_GID='109' - SUDO_UID='104' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.toU73KiP/pbuilderrc_BUjW --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.toU73KiP/b2 --logfile b2/build.log sigstore-go_0.7.1-2.dsc' + SUDO_GID=109 + SUDO_UID=104 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' I: uname -a - Linux infom01-amd64 6.1.0-32-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.129-1 (2025-03-06) x86_64 GNU/Linux + Linux i-capture-the-hostname 6.12.12+bpo-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.12-1~bpo12+1 (2025-02-23) x86_64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Mar 4 11:20 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/481254/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Mar 4 2025 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -660,7 +692,7 @@ Get: 516 http://deb.debian.org/debian unstable/main amd64 golang-github-urfave-negroni-dev all 0.2.0-3 [8752 B] Get: 517 http://deb.debian.org/debian unstable/main amd64 golang-github-sigstore-timestamp-authority-dev all 1.2.3-2 [75.8 kB] Get: 518 http://deb.debian.org/debian unstable/main amd64 help2man amd64 1.49.3 [198 kB] -Fetched 232 MB in 6s (38.4 MB/s) +Fetched 232 MB in 3s (76.2 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19840 files and directories currently installed.) @@ -2319,8 +2351,8 @@ Setting up tzdata (2025b-1) ... Current default time zone: 'Etc/UTC' -Local time is now: Sat Apr 12 09:38:46 UTC 2025. -Universal Time is now: Sat Apr 12 09:38:46 UTC 2025. +Local time is now: Fri May 15 16:17:22 UTC 2026. +Universal Time is now: Fri May 15 16:17:22 UTC 2026. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ... @@ -2753,7 +2785,11 @@ Building tag database... -> Finished parsing the build-deps I: Building the package -I: Running cd /build/reproducible-path/sigstore-go-0.7.1/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../sigstore-go_0.7.1-2_source.changes +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for unstable +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/sigstore-go-0.7.1/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../sigstore-go_0.7.1-2_source.changes dpkg-buildpackage: info: source package sigstore-go dpkg-buildpackage: info: source version 0.7.1-2 dpkg-buildpackage: info: source distribution unstable @@ -2772,28 +2808,28 @@ dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang dh_auto_build -O--builddirectory=_build -O--buildsystem=golang cd _build && go install -trimpath -v -p 12 github.com/sigstore/sigstore-go/examples/oci-image-verification github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/examples/sigstore-go-verification github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/sigstore-go/pkg/root github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/ca github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/tuf github.com/sigstore/sigstore-go/pkg/util github.com/sigstore/sigstore-go/pkg/verify github.com/sigstore/sigstore-go/test/conformance -internal/goos internal/coverage/rtcov -internal/godebugs internal/asan -internal/unsafeheader internal/byteorder -internal/profilerecord internal/goexperiment +internal/godebugs +internal/profilerecord internal/msan internal/goarch -math/bits -internal/runtime/math -unicode +internal/unsafeheader internal/cpu -sync/atomic internal/runtime/atomic -internal/runtime/sys +internal/runtime/syscall +internal/goos +sync/atomic +math/bits +unicode unicode/utf8 -crypto/internal/fips140/alias internal/abi -internal/runtime/syscall internal/chacha8rand +internal/runtime/math +crypto/internal/fips140/alias +internal/runtime/sys crypto/internal/fips140deps/byteorder internal/itoa cmp @@ -2803,13 +2839,12 @@ vendor/golang.org/x/crypto/cryptobyte/asn1 internal/nettrace encoding -container/list internal/bytealg math crypto/internal/fips140deps/cpu +container/list vendor/golang.org/x/crypto/internal/alias github.com/google/go-containerregistry/pkg/v1/types -internal/runtime/exithook github.com/klauspost/compress/internal/cpuinfo github.com/klauspost/compress/internal/le log/internal @@ -2825,515 +2860,516 @@ image/color golang.org/x/exp/constraints github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common +golang.org/x/exp/slices github.com/pelletier/go-toml/v2/internal/characters log/slog/internal go.opentelemetry.io/otel/metric/embedded go.opentelemetry.io/otel/trace/embedded -golang.org/x/exp/slices github.com/transparency-dev/merkle golang.org/x/crypto/cryptobyte/asn1 -internal/stringslite +internal/runtime/exithook internal/race -internal/runtime/maps +internal/stringslite internal/sync +internal/runtime/maps github.com/klauspost/compress go.opentelemetry.io/otel/internal runtime +internal/reflectlite sync iter -crypto/subtle weak +crypto/subtle k8s.io/klog/internal/dbg -internal/reflectlite -slices maps +slices +errors +sort internal/bisect -internal/testlog internal/singleflight -unique +internal/testlog google.golang.org/protobuf/internal/pragma -github.com/josharian/intern go.uber.org/zap/internal/pool +unique +github.com/josharian/intern github.com/spf13/viper/internal/encoding log/slog/internal/buffer -errors -sort -internal/godebug -internal/oserror +runtime/cgo io +internal/oserror +strconv path +vendor/golang.org/x/net/dns/dnsmessage math/rand/v2 -github.com/sassoftware/relic/signers/sigerrors golang.org/x/crypto/cast5 -vendor/golang.org/x/net/dns/dnsmessage -strconv -github.com/hashicorp/hcl/hcl/strconv -syscall -runtime/cgo -hash +internal/godebug +github.com/sassoftware/relic/signers/sigerrors bytes +crypto/internal/fips140deps/godebug +hash github.com/google/go-containerregistry/internal/and -internal/saferio strings +reflect +syscall +net/netip +golang.org/x/crypto/blowfish crypto/internal/randutil -hash/crc32 -hash/fnv -hash/adler32 -golang.org/x/mod/semver -crypto/internal/fips140deps/godebug -math/rand crypto -crypto/internal/fips140 -regexp/syntax -net/http/internal/ascii -internal/syscall/unix +hash/crc32 crypto/internal/impl -vendor/golang.org/x/text/transform -net/netip -crypto/internal/fips140/sha3 -golang.org/x/crypto/blowfish +regexp/syntax +crypto/internal/fips140 bufio -reflect -time -internal/syscall/execenv +vendor/golang.org/x/text/transform +math/rand +net/http/internal/ascii +hash/fnv +html crypto/internal/fips140/sha256 -crypto/internal/fips140/sha512 +crypto/internal/fips140/sha3 crypto/tls/internal/fips140tls -html +internal/saferio +crypto/internal/fips140/sha512 golang.org/x/crypto/openpgp/errors -golang.org/x/text/transform -golang.org/x/crypto/openpgp/s2k compress/bzip2 +hash/adler32 image -k8s.io/klog/internal/severity -net/http/internal/testcert +golang.org/x/crypto/openpgp/s2k +golang.org/x/text/transform +regexp +github.com/hashicorp/hcl/hcl/strconv golang.org/x/text/runes +internal/syscall/unix +time +internal/syscall/execenv +k8s.io/klog/internal/severity +golang.org/x/mod/semver crypto/internal/fips140/hmac crypto/sha3 +net/http/internal/testcert +image/internal/imageutil crypto/internal/fips140/check -regexp +image/jpeg crypto/internal/fips140hash -crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/tls12 crypto/internal/fips140/aes -crypto/internal/fips140/hkdf crypto/internal/fips140/bigmod +crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/hkdf crypto/internal/fips140/nistec/fiat -crypto/internal/fips140/tls12 crypto/internal/fips140/tls13 -image/internal/imageutil -io/fs -internal/poll +internal/fmtsort +encoding/binary +go.opentelemetry.io/otel/internal/attribute +crypto/internal/fips140/edwards25519 context +io/fs github.com/google/go-containerregistry/internal/retry/wait -crypto/internal/fips140/edwards25519 -go.uber.org/zap/buffer -image/jpeg github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1 +go.uber.org/zap/buffer +internal/poll github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2 github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1 +k8s.io/klog/internal/clock internal/filepathlite embed -go.uber.org/zap/internal/bufferpool github.com/spf13/afero/internal/common +go.uber.org/zap/internal/bufferpool go.opentelemetry.io/otel/internal/baggage -k8s.io/klog/internal/clock +crypto/internal/fips140/nistec +encoding/base64 +github.com/cespare/xxhash +vendor/golang.org/x/crypto/internal/poly1305 +github.com/klauspost/compress/internal/snapref +golang.org/x/crypto/internal/poly1305 +golang.org/x/sys/unix go.uber.org/zap/internal/stacktrace -os google.golang.org/protobuf/internal/editiondefaults -crypto/internal/fips140/nistec -internal/fmtsort -go.opentelemetry.io/otel/internal/attribute -encoding/binary +os +golang.org/x/crypto/openpgp/armor +encoding/pem +golang.org/x/crypto/nacl/secretbox crypto/internal/sysrand path/filepath +fmt vendor/golang.org/x/sys/cpu internal/sysinfo +google.golang.org/protobuf/internal/detrand golang.org/x/sys/cpu io/ioutil go.uber.org/zap/internal/exit -fmt k8s.io/klog/internal/buffer -encoding/base64 -vendor/golang.org/x/crypto/internal/poly1305 crypto/internal/entropy -github.com/cespare/xxhash -github.com/klauspost/compress/internal/snapref -os/exec -encoding/pem crypto/internal/fips140/drbg -google.golang.org/protobuf/internal/detrand -golang.org/x/crypto/internal/poly1305 +github.com/shibumi/go-pathspec +os/exec +github.com/spf13/afero/mem golang.org/x/crypto/sha3 -golang.org/x/sys/unix -golang.org/x/crypto/openpgp/armor golang.org/x/crypto/blake2b crypto/internal/fips140only crypto/internal/fips140/aes/gcm crypto/internal/fips140/ecdh -crypto/internal/fips140/ecdsa crypto/internal/fips140/ed25519 +crypto/internal/fips140/ecdsa crypto/md5 crypto/internal/fips140/rsa +crypto/internal/fips140/mlkem +crypto/rc4 +github.com/mitchellh/go-homedir +golang.org/x/term math/big encoding/hex net/url -flag encoding/json -crypto/internal/fips140/mlkem -crypto/rc4 -crypto/cipher +flag compress/flate github.com/containerd/stargz-snapshotter/estargz/errorutil +crypto/cipher github.com/klauspost/compress/fse log runtime/debug github.com/opencontainers/go-digest +golang.org/x/sync/errgroup +runtime/trace +github.com/opencontainers/image-spec/specs-go +golang.org/x/sys/execabs +github.com/pkg/errors +github.com/opencontainers/image-spec/specs-go/v1 +github.com/google/go-containerregistry/internal/redact crypto/internal/boring crypto/des vendor/golang.org/x/crypto/chacha20 -golang.org/x/sync/errgroup -crypto/ecdh github.com/klauspost/compress/huff0 +compress/gzip +testing +github.com/google/go-containerregistry/pkg/logs +github.com/google/go-containerregistry/internal/retry +vendor/golang.org/x/text/unicode/bidi +crypto/ecdh crypto/sha512 crypto/aes crypto/sha1 crypto/sha256 crypto/hmac -runtime/trace vendor/golang.org/x/crypto/chacha20poly1305 -github.com/google/go-containerregistry/pkg/logs -github.com/opencontainers/image-spec/specs-go -golang.org/x/sys/execabs -github.com/opencontainers/image-spec/specs-go/v1 -github.com/pkg/errors -testing -compress/gzip -github.com/mitchellh/go-homedir -github.com/google/go-containerregistry/internal/redact -github.com/google/go-containerregistry/internal/retry -vendor/golang.org/x/text/unicode/bidi +github.com/google/go-containerregistry/internal/gzip +vendor/golang.org/x/text/secure/bidirule vendor/golang.org/x/text/unicode/norm vendor/golang.org/x/net/http2/hpack -mime -github.com/google/go-containerregistry/internal/gzip -mime/quotedprintable -net/http/internal -google.golang.org/protobuf/internal/errors -go/token -google.golang.org/protobuf/internal/version -google.golang.org/protobuf/encoding/protowire -golang.org/x/crypto/chacha20 -golang.org/x/crypto/curve25519 -github.com/google/go-containerregistry/pkg/v1 -github.com/docker/docker-credential-helpers/credentials -google.golang.org/protobuf/reflect/protoreflect -golang.org/x/crypto/ssh/internal/bcrypt_pbkdf crypto/elliptic crypto/internal/boring/bbig encoding/asn1 crypto/dsa crypto/rand -github.com/docker/docker-credential-helpers/client +github.com/google/go-containerregistry/pkg/v1 +github.com/docker/docker-credential-helpers/credentials +github.com/sirupsen/logrus crypto/ed25519 crypto/rsa -crypto/internal/hpke -github.com/docker/cli/cli/config/credentials +github.com/klauspost/compress/zstd github.com/google/go-containerregistry/pkg/v1/match +vendor/golang.org/x/crypto/cryptobyte +crypto/x509/pkix github.com/google/go-containerregistry/pkg/legacy -github.com/klauspost/compress/zstd +github.com/docker/docker-credential-helpers/client +crypto/internal/hpke github.com/google/go-containerregistry/pkg/v1/stream -github.com/google/go-containerregistry/internal/verify -vendor/golang.org/x/text/secure/bidirule -net os/user +net +github.com/google/go-containerregistry/internal/verify +vendor/golang.org/x/net/idna +crypto/ecdsa +mime +github.com/docker/cli/cli/config/credentials +mime/quotedprintable +net/http/internal +google.golang.org/protobuf/internal/errors +go/token +google.golang.org/protobuf/internal/version +github.com/docker/cli/cli/config/configfile +golang.org/x/crypto/chacha20 +golang.org/x/crypto/curve25519 +google.golang.org/protobuf/encoding/protowire +golang.org/x/crypto/ssh/internal/bcrypt_pbkdf github.com/sigstore/sigstore-go/pkg/util github.com/secure-systems-lab/go-securesystemslib/cjson -golang.org/x/crypto/nacl/secretbox -crypto/x509/pkix -vendor/golang.org/x/crypto/cryptobyte -google.golang.org/protobuf/internal/descfmt -google.golang.org/protobuf/internal/descopts -vendor/golang.org/x/net/idna -google.golang.org/protobuf/internal/strs -google.golang.org/protobuf/internal/encoding/messageset -google.golang.org/protobuf/internal/order -google.golang.org/protobuf/internal/genid -google.golang.org/protobuf/runtime/protoiface -github.com/sirupsen/logrus -google.golang.org/protobuf/internal/encoding/json golang.org/x/crypto/pbkdf2 -google.golang.org/protobuf/internal/encoding/text -google.golang.org/protobuf/reflect/protoregistry -golang.org/x/term -google.golang.org/protobuf/internal/protolazy -golang.org/x/crypto/scrypt -crypto/ecdsa github.com/sigstore/sigstore/pkg/signature/options -google.golang.org/protobuf/proto +google.golang.org/protobuf/reflect/protoreflect github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer -github.com/secure-systems-lab/go-securesystemslib/encrypted +golang.org/x/crypto/scrypt encoding/csv -google.golang.org/protobuf/internal/encoding/defval encoding/xml +github.com/secure-systems-lab/go-securesystemslib/encrypted database/sql/driver go.mongodb.org/mongo-driver/bson/primitive github.com/mailru/easyjson/jlexer gopkg.in/yaml.v3 encoding/gob -github.com/docker/cli/cli/config/configfile -go.mongodb.org/mongo-driver/x/bsonx/bsoncore -google.golang.org/protobuf/encoding/prototext -google.golang.org/protobuf/internal/filedesc -github.com/oklog/ulid github.com/go-openapi/analysis/internal/debug github.com/go-openapi/jsonreference/internal -github.com/blang/semver +go.mongodb.org/mongo-driver/x/bsonx/bsoncore internal/profile text/tabwriter go.uber.org/atomic +github.com/oklog/ulid +github.com/blang/semver +google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/descopts +google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/internal/encoding/messageset +google.golang.org/protobuf/internal/genid +google.golang.org/protobuf/internal/encoding/text +google.golang.org/protobuf/internal/order +google.golang.org/protobuf/reflect/protoregistry +github.com/google/go-containerregistry/internal/zstd +google.golang.org/protobuf/runtime/protoiface +google.golang.org/protobuf/internal/encoding/json +google.golang.org/protobuf/internal/protolazy runtime/pprof +google.golang.org/protobuf/proto +github.com/google/go-containerregistry/internal/compression +google.golang.org/protobuf/internal/encoding/defval +go.uber.org/multierr go.uber.org/zap/internal/color +github.com/google/go-containerregistry/pkg/v1/partial golang.org/x/crypto/ed25519 compress/zlib -github.com/jedisct1/go-minisign -go.uber.org/multierr golang.org/x/crypto/openpgp/elgamal +github.com/jedisct1/go-minisign text/template/parse -github.com/shibumi/go-pathspec -github.com/google/go-containerregistry/internal/zstd +github.com/google/go-containerregistry/pkg/v1/empty +go.mongodb.org/mongo-driver/bson/bsonrw golang.org/x/mod/sumdb/note golang.org/x/crypto/openpgp/packet -github.com/fsnotify/fsnotify/internal go.uber.org/zap/zapcore -github.com/spf13/afero/mem -github.com/google/go-containerregistry/internal/compression -github.com/fsnotify/fsnotify -github.com/google/go-containerregistry/pkg/v1/partial +github.com/fsnotify/fsnotify/internal golang.org/x/text/unicode/norm -go.mongodb.org/mongo-driver/bson/bsonrw +google.golang.org/protobuf/internal/filedesc +google.golang.org/protobuf/encoding/prototext +github.com/fsnotify/fsnotify github.com/spf13/jwalterweatherman github.com/subosito/gotenv -google.golang.org/protobuf/internal/encoding/tag -google.golang.org/protobuf/encoding/protojson github.com/hashicorp/hcl/hcl/token -github.com/google/go-containerregistry/pkg/v1/empty gopkg.in/ini.v1 +github.com/spf13/viper/internal/encoding/json +archive/tar +github.com/vbatts/tar-split/archive/tar +github.com/docker/docker/pkg/homedir +golang.org/x/crypto/openpgp +text/template +github.com/docker/cli/cli/config github.com/hashicorp/hcl/hcl/ast -google.golang.org/protobuf/internal/impl github.com/hashicorp/hcl/hcl/scanner -text/template github.com/hashicorp/hcl/json/token +github.com/pelletier/go-toml/v2/internal/danger github.com/hashicorp/hcl/hcl/parser github.com/hashicorp/hcl/json/scanner -golang.org/x/crypto/openpgp -github.com/hashicorp/hcl/hcl/printer -archive/tar -github.com/vbatts/tar-split/archive/tar -github.com/docker/docker/pkg/homedir go.uber.org/zap/internal -github.com/hashicorp/hcl/json/parser -github.com/spf13/viper/internal/encoding/json -github.com/pelletier/go-toml/v2/internal/danger -github.com/docker/cli/cli/config +github.com/pelletier/go-toml/v2/unstable go.mongodb.org/mongo-driver/bson/bsoncodec github.com/spf13/viper/internal/encoding/yaml github.com/go-openapi/runtime/logger +github.com/hashicorp/hcl/json/parser github.com/opentracing/opentracing-go/log -github.com/pelletier/go-toml/v2/unstable -github.com/hashicorp/hcl +github.com/hashicorp/hcl/hcl/printer +google.golang.org/protobuf/internal/encoding/tag +google.golang.org/protobuf/encoding/protojson log/slog +github.com/hashicorp/hcl +google.golang.org/protobuf/internal/impl go.opentelemetry.io/otel/attribute +html/template +github.com/pelletier/go-toml/v2/internal/tracker go.opentelemetry.io/otel/codes -github.com/transparency-dev/merkle/compact go.opentelemetry.io/otel/baggage -github.com/transparency-dev/merkle/proof -html/template +github.com/pelletier/go-toml/v2 +github.com/transparency-dev/merkle/compact github.com/spf13/viper/internal/encoding/hcl -github.com/pelletier/go-toml/v2/internal/tracker go.opentelemetry.io/otel/metric go.opentelemetry.io/otel/trace go.opentelemetry.io/otel/semconv/v1.17.0 +github.com/transparency-dev/merkle/proof github.com/transparency-dev/merkle/rfc6962 +github.com/containerd/stargz-snapshotter/estargz +github.com/go-logr/logr github.com/google/certificate-transparency-go/asn1 golang.org/x/crypto/cryptobyte -github.com/pelletier/go-toml/v2 +github.com/spf13/cast +k8s.io/klog/internal/sloghandler +github.com/go-logr/logr/funcr +k8s.io/klog/internal/serialize gopkg.in/square/go-jose.v2/cipher gopkg.in/square/go-jose.v2/json github.com/go-jose/go-jose/cipher -github.com/go-jose/go-jose/json github.com/google/certificate-transparency-go/tls -github.com/go-logr/logr +github.com/spf13/viper/internal/encoding/dotenv +github.com/go-logr/stdr github.com/google/certificate-transparency-go/x509/pkix -github.com/containerd/stargz-snapshotter/estargz -k8s.io/klog/internal/sloghandler +github.com/spf13/viper/internal/encoding/ini +k8s.io/klog +github.com/spf13/viper/internal/encoding/toml github.com/segmentio/ksuid +github.com/go-jose/go-jose/json github.com/sigstore/sigstore/pkg/oauth -github.com/go-logr/logr/funcr -github.com/spf13/viper/internal/encoding/toml -k8s.io/klog/internal/serialize -github.com/spf13/cast github.com/skratchdot/open-golang/open github.com/davecgh/go-spew/spew github.com/pmezard/go-difflib/difflib github.com/stretchr/testify/assert/yaml -k8s.io/klog -github.com/go-logr/stdr -github.com/spf13/viper/internal/encoding/dotenv -github.com/spf13/viper/internal/encoding/ini go.mongodb.org/mongo-driver/bson -google.golang.org/protobuf/internal/filetype github.com/google/go-containerregistry/internal/estargz -google.golang.org/protobuf/runtime/protoimpl -google.golang.org/protobuf/types/known/timestamppb -github.com/sigstore/protobuf-specs/gen/pb-go/dsse -google.golang.org/protobuf/types/known/structpb -google.golang.org/protobuf/types/descriptorpb -github.com/google/certificate-transparency-go/client/configpb -github.com/in-toto/attestation/go/v1 -github.com/google/go-containerregistry/pkg/name vendor/golang.org/x/net/http/httpproxy -github.com/spf13/pflag -github.com/google/uuid -github.com/mitchellh/mapstructure -github.com/mailru/easyjson/buffer -github.com/google/certificate-transparency-go/x509 net/textproto +github.com/google/go-containerregistry/pkg/name crypto/x509 -github.com/google/go-containerregistry/pkg/v1/tarball -github.com/google/go-containerregistry/pkg/authn -github.com/sigstore/sigstore/pkg/signature/payload -google.golang.org/genproto/googleapis/api/annotations +github.com/mailru/easyjson/buffer +github.com/mitchellh/mapstructure +github.com/google/uuid +github.com/google/certificate-transparency-go/x509 +github.com/spf13/pflag github.com/mailru/easyjson/jwriter vendor/golang.org/x/net/http/httpguts mime/multipart net/mail -github.com/google/go-containerregistry/internal/windows +github.com/google/go-containerregistry/pkg/v1/tarball +github.com/google/go-containerregistry/pkg/authn +github.com/sigstore/sigstore/pkg/signature/payload +google.golang.org/protobuf/internal/filetype github.com/google/go-containerregistry/pkg/legacy/tarball github.com/google/go-containerregistry/pkg/v1/mutate -github.com/sigstore/protobuf-specs/gen/pb-go/common/v1 +github.com/google/go-containerregistry/internal/windows +golang.org/x/crypto/ssh github.com/secure-systems-lab/go-securesystemslib/signerverifier github.com/sigstore/sigstore/pkg/cryptoutils -golang.org/x/crypto/ssh -crypto/tls -github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1 -github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1 -github.com/asaskevich/govalidator github.com/digitorus/pkcs7 -github.com/spf13/cobra -github.com/google/certificate-transparency-go +github.com/asaskevich/govalidator +crypto/tls +google.golang.org/protobuf/runtime/protoimpl gopkg.in/square/go-jose.v2 -github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1 github.com/go-jose/go-jose -github.com/sigstore/sigstore/pkg/signature github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/timestamp-authority/pkg/x509 github.com/google/go-containerregistry/pkg/v1/layout -github.com/google/certificate-transparency-go/gossip/minimal/x509ext +google.golang.org/protobuf/types/descriptorpb +google.golang.org/protobuf/types/known/timestamppb +github.com/sigstore/protobuf-specs/gen/pb-go/dsse +google.golang.org/protobuf/types/known/structpb +github.com/spf13/cobra +github.com/google/certificate-transparency-go +github.com/in-toto/attestation/go/v1 +github.com/google/certificate-transparency-go/client/configpb github.com/digitorus/timestamp +github.com/google/certificate-transparency-go/gossip/minimal/x509ext +google.golang.org/genproto/googleapis/api/annotations github.com/sigstore/timestamp-authority/pkg/verification -github.com/theupdateframework/go-tuf/metadata -github.com/sigstore/rekor/pkg/pki/minisign -github.com/sigstore/rekor/pkg/pki/x509 -github.com/theupdateframework/go-tuf/metadata/trustedmetadata +github.com/sigstore/protobuf-specs/gen/pb-go/common/v1 github.com/secure-systems-lab/go-securesystemslib/dsse +github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1 +github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1 +github.com/sigstore/sigstore/pkg/signature github.com/in-toto/in-toto-golang/in_toto +github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1 +github.com/sigstore/rekor/pkg/pki/x509 +github.com/sigstore/rekor/pkg/pki/minisign +github.com/theupdateframework/go-tuf/metadata github.com/sigstore/sigstore/pkg/signature/dsse -github.com/sassoftware/relic/lib/x509tools net/http/httptrace -github.com/sassoftware/relic/lib/pkcs7 +github.com/sassoftware/relic/lib/x509tools net/http +github.com/sassoftware/relic/lib/pkcs7 +github.com/theupdateframework/go-tuf/metadata/trustedmetadata github.com/sigstore/rekor/pkg/pki/pkcs7 github.com/docker/distribution/registry/client/auth/challenge github.com/theupdateframework/go-tuf/metadata/fetcher +expvar +net/http/httputil +net/http/pprof github.com/go-openapi/errors github.com/sigstore/rekor/pkg/pki/pgp -github.com/sigstore/rekor/pkg/util -github.com/go-openapi/swag -expvar -github.com/sigstore/rekor/pkg/pki/ssh github.com/go-chi/chi -net/http/pprof +github.com/sigstore/rekor/pkg/pki/ssh +github.com/sigstore/rekor/pkg/util go.uber.org/zap -net/http/httputil -github.com/theupdateframework/go-tuf/metadata/config +github.com/go-openapi/swag github.com/spf13/afero -github.com/theupdateframework/go-tuf/metadata/updater +github.com/theupdateframework/go-tuf/metadata/config github.com/magiconair/properties github.com/go-openapi/runtime/middleware/denco github.com/sigstore/rekor/pkg/pki github.com/go-openapi/strfmt github.com/go-openapi/runtime/middleware/header +github.com/theupdateframework/go-tuf/metadata/updater github.com/opentracing/opentracing-go github.com/google/go-containerregistry/pkg/v1/remote/transport -github.com/spf13/viper/internal/encoding/javaproperties go.opentelemetry.io/otel/propagation go.opentelemetry.io/otel/semconv/internal/v2 github.com/go-chi/chi/middleware golang.org/x/net/context/ctxhttp -github.com/sigstore/sigstore-go/pkg/tuf github.com/opentracing/opentracing-go/ext -github.com/google/certificate-transparency-go/x509util go.opentelemetry.io/otel/internal/global +go.opentelemetry.io/otel/semconv/v1.17.0/httpconv +github.com/spf13/viper/internal/encoding/javaproperties github.com/google/certificate-transparency-go/jsonclient +github.com/google/go-containerregistry/pkg/v1/remote +github.com/sigstore/sigstore-go/pkg/tuf github.com/hashicorp/go-cleanhttp +golang.org/x/oauth2/internal +github.com/google/certificate-transparency-go/x509util +net/http/httptest +go.opentelemetry.io/otel github.com/spf13/viper -go.opentelemetry.io/otel/semconv/v1.17.0/httpconv -github.com/google/go-containerregistry/pkg/v1/remote github.com/hashicorp/go-retryablehttp -github.com/sigstore/sigstore-go/pkg/root -github.com/go-openapi/jsonpointer -golang.org/x/oauth2/internal github.com/google/certificate-transparency-go/client -go.opentelemetry.io/otel -github.com/go-openapi/jsonreference golang.org/x/oauth2 -github.com/google/certificate-transparency-go/loglist3 -net/http/httptest +github.com/sigstore/sigstore-go/pkg/root +github.com/stretchr/testify/assert +github.com/go-openapi/runtime +github.com/go-openapi/jsonpointer github.com/sigstore/rekor/pkg/log -github.com/coreos/go-oidc/v3/oidc -github.com/go-openapi/spec +github.com/google/certificate-transparency-go/loglist3 +github.com/go-openapi/jsonreference github.com/google/certificate-transparency-go/ctutil -github.com/go-openapi/runtime -github.com/stretchr/testify/assert -github.com/sigstore/sigstore/pkg/oauthflow +github.com/coreos/go-oidc/v3/oidc +github.com/google/go-containerregistry/pkg/crane github.com/go-openapi/runtime/security github.com/go-openapi/runtime/yamlpc +github.com/go-openapi/spec +github.com/sigstore/sigstore/pkg/oauthflow github.com/go-openapi/analysis/internal/flatten/normalize github.com/go-openapi/analysis/internal/flatten/operations -github.com/go-openapi/analysis/internal/flatten/replace github.com/go-openapi/analysis/internal/flatten/schutils +github.com/go-openapi/analysis/internal/flatten/replace github.com/go-openapi/analysis/internal/flatten/sortref -github.com/google/go-containerregistry/pkg/crane github.com/go-openapi/analysis github.com/go-openapi/loads -github.com/go-openapi/validate github.com/go-openapi/runtime/middleware/untyped -github.com/sigstore/rekor/pkg/generated/models +github.com/go-openapi/validate github.com/go-openapi/runtime/middleware +github.com/sigstore/rekor/pkg/generated/models github.com/go-openapi/runtime/client github.com/sigstore/rekor/pkg/types -github.com/sigstore/rekor/pkg/generated/client/entries github.com/sigstore/rekor/pkg/generated/client/index github.com/sigstore/rekor/pkg/generated/client/pubkey github.com/sigstore/rekor/pkg/generated/client/tlog +github.com/sigstore/rekor/pkg/generated/client/entries github.com/sigstore/rekor/pkg/types/dsse -github.com/sigstore/rekor/pkg/tle github.com/sigstore/rekor/pkg/types/hashedrekord github.com/sigstore/rekor/pkg/types/intoto +github.com/sigstore/rekor/pkg/tle github.com/sigstore/rekor/pkg/types/rekord +github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1 +github.com/sigstore/rekor/pkg/types/dsse/v0.0.1 +github.com/sigstore/rekor/pkg/types/intoto/v0.0.2 github.com/sigstore/rekor/pkg/generated/client -github.com/sigstore/rekor/pkg/verify github.com/sigstore/rekor/pkg/client -github.com/sigstore/rekor/pkg/types/intoto/v0.0.2 -github.com/sigstore/rekor/pkg/types/dsse/v0.0.1 -github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1 +github.com/sigstore/rekor/pkg/verify github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/verify github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/examples/oci-image-verification +github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/examples/sigstore-go-verification github.com/sigstore/sigstore-go/pkg/testing/ca -github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/test/conformance @@ -3446,20 +3482,6 @@ === CONT TestVerificationContent === CONT TestMinVersion/new-format-without-v === CONT Test_validate -=== RUN Test_validate/invalid_media_type -=== RUN Test_validate/version_too_low -=== RUN Test_validate/version_too_high -=== RUN Test_validate/no_verification_material -=== RUN Test_validate/v0.1_with_no_inclusion_promise -=== RUN Test_validate/v0.1_with_inclusion_promise -=== RUN Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint -=== RUN Test_validate/v0.1_with_inclusion_proof_&_promise -=== RUN Test_validate/v0.2_with_no_inclusion_proof -=== RUN Test_validate/v0.2_with_inclusion_proof_without_checkpoint -=== RUN Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint -=== RUN Test_validate/v0.2_with_inclusion_proof -=== RUN Test_validate/v0.3_with_x.509_certificate_chain -=== RUN Test_validate/v0.3_without_x.509_certificate_chain === CONT TestMinVersion/new-format === CONT TestMinVersion/new-format-unexpected === CONT TestMinVersion/new-format-exact @@ -3467,6 +3489,7 @@ === CONT TestMediaTypeString === RUN TestMediaTypeString/normal-semver === PAUSE TestMediaTypeString/normal-semver +=== RUN Test_validate/invalid_media_type === RUN TestMediaTypeString/old-semver1 === PAUSE TestMediaTypeString/old-semver1 === RUN TestMediaTypeString/old-semver2 @@ -3476,10 +3499,27 @@ === RUN TestMediaTypeString/invalid === PAUSE TestMediaTypeString/invalid === CONT TestMediaTypeString/normal-semver -=== CONT TestMinVersion/old-format-without-v +=== RUN Test_validate/version_too_low +=== CONT TestMediaTypeString/invalid +=== RUN Test_validate/version_too_high +=== CONT TestMediaTypeString/blank +=== CONT TestMediaTypeString/old-semver2 +=== CONT TestMediaTypeString/old-semver1 +=== RUN Test_validate/no_verification_material +--- PASS: TestMediaTypeString (0.00s) + --- PASS: TestMediaTypeString/normal-semver (0.00s) + --- PASS: TestMediaTypeString/invalid (0.00s) + --- PASS: TestMediaTypeString/blank (0.00s) + --- PASS: TestMediaTypeString/old-semver2 (0.00s) + --- PASS: TestMediaTypeString/old-semver1 (0.00s) === CONT TestMinVersion/old-format-unexpected === CONT TestMinVersion/blank +=== RUN Test_validate/v0.1_with_no_inclusion_promise === CONT TestMinVersion/new-format-without-v-unexpected +=== RUN Test_validate/v0.1_with_inclusion_promise +=== CONT TestMinVersion/old-format-without-v +=== RUN Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint +=== RUN Test_validate/v0.1_with_inclusion_proof_&_promise --- PASS: TestMinVersion (0.00s) --- PASS: TestMinVersion/old-format (0.00s) --- PASS: TestMinVersion/new-format-without-v (0.00s) @@ -3487,10 +3527,16 @@ --- PASS: TestMinVersion/new-format-unexpected (0.00s) --- PASS: TestMinVersion/new-format-exact (0.00s) --- PASS: TestMinVersion/invalid (0.00s) - --- PASS: TestMinVersion/old-format-without-v (0.00s) --- PASS: TestMinVersion/old-format-unexpected (0.00s) --- PASS: TestMinVersion/blank (0.00s) --- PASS: TestMinVersion/new-format-without-v-unexpected (0.00s) + --- PASS: TestMinVersion/old-format-without-v (0.00s) +=== RUN Test_validate/v0.2_with_no_inclusion_proof +=== RUN Test_validate/v0.2_with_inclusion_proof_without_checkpoint +=== RUN Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint +=== RUN Test_validate/v0.2_with_inclusion_proof +=== RUN Test_validate/v0.3_with_x.509_certificate_chain +=== RUN Test_validate/v0.3_without_x.509_certificate_chain --- PASS: Test_validate (0.02s) --- PASS: Test_validate/invalid_media_type (0.00s) --- PASS: Test_validate/version_too_low (0.00s) @@ -3503,19 +3549,9 @@ --- PASS: Test_validate/v0.2_with_no_inclusion_proof (0.00s) --- PASS: Test_validate/v0.2_with_inclusion_proof_without_checkpoint (0.00s) --- PASS: Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint (0.00s) - --- PASS: Test_validate/v0.2_with_inclusion_proof (0.00s) - --- PASS: Test_validate/v0.3_with_x.509_certificate_chain (0.00s) - --- PASS: Test_validate/v0.3_without_x.509_certificate_chain (0.01s) -=== CONT TestMediaTypeString/old-semver2 -=== CONT TestMediaTypeString/invalid -=== CONT TestMediaTypeString/blank -=== CONT TestMediaTypeString/old-semver1 ---- PASS: TestMediaTypeString (0.00s) - --- PASS: TestMediaTypeString/normal-semver (0.01s) - --- PASS: TestMediaTypeString/old-semver2 (0.00s) - --- PASS: TestMediaTypeString/invalid (0.00s) - --- PASS: TestMediaTypeString/blank (0.00s) - --- PASS: TestMediaTypeString/old-semver1 (0.00s) + --- PASS: Test_validate/v0.2_with_inclusion_proof (0.01s) + --- PASS: Test_validate/v0.3_with_x.509_certificate_chain (0.01s) + --- PASS: Test_validate/v0.3_without_x.509_certificate_chain (0.00s) === RUN TestVerificationContent/no_verification_material === RUN TestVerificationContent/certificate_chain_with_zero_certs === RUN TestVerificationContent/certificate_chain_with_self-signed_cert @@ -3548,17 +3584,17 @@ === RUN FuzzBundle --- PASS: FuzzBundle (0.00s) PASS -ok github.com/sigstore/sigstore-go/pkg/bundle 0.073s +ok github.com/sigstore/sigstore-go/pkg/bundle 0.068s === RUN TestSummarizeCertificateWithActionsBundle --- PASS: TestSummarizeCertificateWithActionsBundle (0.00s) === RUN TestSummarizeCertificateWithOauthBundle --- PASS: TestSummarizeCertificateWithOauthBundle (0.00s) === RUN TestSummarizeCertificateWithOtherNameSAN ---- PASS: TestSummarizeCertificateWithOtherNameSAN (0.00s) +--- PASS: TestSummarizeCertificateWithOtherNameSAN (0.01s) === RUN TestCompareExtensions --- PASS: TestCompareExtensions (0.00s) PASS -ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.044s +ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.041s === RUN TestSelectService === RUN TestSelectService/single_matching_service === RUN TestSelectService/multiple_matching_service,_first_selected @@ -3668,13 +3704,13 @@ === RUN TestNewSigningConfigWithOptions --- PASS: TestNewSigningConfigWithOptions (0.00s) === RUN TestGetSigstoreTrustedRoot ---- PASS: TestGetSigstoreTrustedRoot (0.01s) +--- PASS: TestGetSigstoreTrustedRoot (0.00s) === RUN TestTrustedMaterialCollectionECDSA --- PASS: TestTrustedMaterialCollectionECDSA (0.00s) === RUN TestTrustedMaterialCollectionED25519 ---- PASS: TestTrustedMaterialCollectionED25519 (0.00s) +--- PASS: TestTrustedMaterialCollectionED25519 (0.01s) === RUN TestTrustedMaterialCollectionRSA ---- PASS: TestTrustedMaterialCollectionRSA (0.47s) +--- PASS: TestTrustedMaterialCollectionRSA (0.29s) === RUN TestFromJSONToJSON --- PASS: TestFromJSONToJSON (0.00s) === RUN TestCertificateAuthority @@ -3705,7 +3741,7 @@ === RUN TestTimestampingAuthority/bad_intermediate === RUN TestTimestampingAuthority/bad_root === RUN TestTimestampingAuthority/signature_over_wrong_artifact ---- PASS: TestTimestampingAuthority (0.02s) +--- PASS: TestTimestampingAuthority (0.01s) --- PASS: TestTimestampingAuthority/normal (0.00s) --- PASS: TestTimestampingAuthority/no_validity_period_defined (0.00s) --- PASS: TestTimestampingAuthority/before_validity_period (0.00s) @@ -3716,7 +3752,7 @@ --- PASS: TestTimestampingAuthority/bad_root (0.00s) --- PASS: TestTimestampingAuthority/signature_over_wrong_artifact (0.00s) PASS -ok github.com/sigstore/sigstore-go/pkg/root 0.539s +ok github.com/sigstore/sigstore-go/pkg/root 0.339s === RUN Test_GetCertificate --- PASS: Test_GetCertificate (4.02s) === RUN Test_PlainData @@ -3728,29 +3764,29 @@ === RUN Test_Bundle --- PASS: Test_Bundle (0.00s) === RUN Test_GetTimestamp ---- PASS: Test_GetTimestamp (4.03s) +--- PASS: Test_GetTimestamp (4.02s) === RUN Test_GetTransparencyLogEntry ---- PASS: Test_GetTransparencyLogEntry (0.00s) +--- PASS: Test_GetTransparencyLogEntry (0.01s) PASS -ok github.com/sigstore/sigstore-go/pkg/sign 8.092s +ok github.com/sigstore/sigstore-go/pkg/sign 8.125s ? github.com/sigstore/sigstore-go/pkg/testing/ca [no test files] ? github.com/sigstore/sigstore-go/pkg/testing/data [no test files] === RUN FuzzParseEntry --- PASS: FuzzParseEntry (0.00s) PASS -ok github.com/sigstore/sigstore-go/pkg/tlog 0.044s +ok github.com/sigstore/sigstore-go/pkg/tlog 0.078s === RUN TestNewOfflineClientFail ---- PASS: TestNewOfflineClientFail (0.03s) +--- PASS: TestNewOfflineClientFail (0.14s) === RUN TestRefresh ---- PASS: TestRefresh (0.02s) +--- PASS: TestRefresh (0.10s) === RUN TestInvalidRoot --- PASS: TestInvalidRoot (0.01s) === RUN TestInvalidRepositoryURL --- PASS: TestInvalidRepositoryURL (0.00s) === RUN TestCache ---- PASS: TestCache (0.05s) +--- PASS: TestCache (0.44s) === RUN TestExpiredTimestamp ---- PASS: TestExpiredTimestamp (0.03s) +--- PASS: TestExpiredTimestamp (0.30s) === RUN TestURLToPath === RUN TestURLToPath/no-change === RUN TestURLToPath/simple @@ -3768,7 +3804,7 @@ === RUN TestConfig --- PASS: TestConfig (0.00s) PASS -ok github.com/sigstore/sigstore-go/pkg/tuf 0.173s +ok github.com/sigstore/sigstore-go/pkg/tuf 1.057s ? github.com/sigstore/sigstore-go/pkg/util [no test files] === RUN TestCertificateIdentityVerify --- PASS: TestCertificateIdentityVerify (0.00s) @@ -3799,7 +3835,7 @@ === RUN TestGetHashFunctions/choose_two_algorithms === RUN TestGetHashFunctions/ignore_unknown_algorithm === RUN TestGetHashFunctions/no_recognized_algorithms ---- PASS: TestGetHashFunctions (0.01s) +--- PASS: TestGetHashFunctions (0.00s) --- PASS: TestGetHashFunctions/choose_strongest_algorithm (0.00s) --- PASS: TestGetHashFunctions/choose_both_algorithms (0.00s) --- PASS: TestGetHashFunctions/choose_one_algorithm (0.00s) @@ -3819,9 +3855,9 @@ === RUN TestEnvelopeSubject --- PASS: TestEnvelopeSubject (0.01s) === RUN TestSignatureVerifierMessageSignature ---- PASS: TestSignatureVerifierMessageSignature (0.00s) +--- PASS: TestSignatureVerifierMessageSignature (0.01s) === RUN TestTooManySubjects ---- PASS: TestTooManySubjects (0.03s) +--- PASS: TestTooManySubjects (0.01s) === RUN TestTooManyDigests --- PASS: TestTooManyDigests (0.01s) === RUN TestVerifyEnvelopeWithMultipleArtifactsAndArtifactDigests @@ -3831,17 +3867,17 @@ === RUN TestSignedEntityVerifierInitRequiresTimestamp --- PASS: TestSignedEntityVerifierInitRequiresTimestamp (0.00s) === RUN TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully ---- PASS: TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully (0.04s) +--- PASS: TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully (0.02s) === RUN TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully --- PASS: TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully (0.01s) === RUN TestEntitySignedByPublicGoodWithHighTlogThresholdFails --- PASS: TestEntitySignedByPublicGoodWithHighTlogThresholdFails (0.01s) === RUN TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails ---- PASS: TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails (0.01s) +--- PASS: TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails (0.00s) === RUN TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails ---- PASS: TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails (0.00s) +--- PASS: TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails (0.01s) === RUN TestEntitySignedByPublicGoodExpectingTSAFails ---- PASS: TestEntitySignedByPublicGoodExpectingTSAFails (0.01s) +--- PASS: TestEntitySignedByPublicGoodExpectingTSAFails (0.00s) === RUN TestEntitySignedByPublicGoodWithHighObserverTimestampThresholdFails --- PASS: TestEntitySignedByPublicGoodWithHighObserverTimestampThresholdFails (0.01s) === RUN TestEntityWithOthernameSan @@ -3849,7 +3885,7 @@ === RUN TestVerifyPolicyOptionErors --- PASS: TestVerifyPolicyOptionErors (0.00s) === RUN TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully ---- PASS: TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully (0.03s) +--- PASS: TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully (0.02s) === RUN TestThatAllTheJSONKeysStartWithALowerCase --- PASS: TestThatAllTheJSONKeysStartWithALowerCase (0.01s) === RUN TestSigstoreBundle2Sig @@ -3859,29 +3895,29 @@ === RUN TestCertificateSignedEntityWithSCTsRequiredVerifiesSuccessfully --- PASS: TestCertificateSignedEntityWithSCTsRequiredVerifiesSuccessfully (0.01s) === RUN TestForcedKeySignedEntityWithSCTsRequiredFails ---- PASS: TestForcedKeySignedEntityWithSCTsRequiredFails (0.00s) +--- PASS: TestForcedKeySignedEntityWithSCTsRequiredFails (0.01s) === RUN TestTlogVerifier --- PASS: TestTlogVerifier (0.01s) === RUN TestIgnoredTLogEntries --- PASS: TestIgnoredTLogEntries (0.01s) === RUN TestInvalidTLogEntries ---- PASS: TestInvalidTLogEntries (0.00s) +--- PASS: TestInvalidTLogEntries (0.01s) === RUN TestNoTLogEntries ---- PASS: TestNoTLogEntries (0.01s) +--- PASS: TestNoTLogEntries (0.00s) === RUN TestDuplicateTlogEntries ---- PASS: TestDuplicateTlogEntries (0.01s) +--- PASS: TestDuplicateTlogEntries (0.00s) === RUN TestMaxAllowedTlogEntries --- PASS: TestMaxAllowedTlogEntries (0.00s) === RUN TestOfflineInclusionProofVerification ---- PASS: TestOfflineInclusionProofVerification (0.00s) +--- PASS: TestOfflineInclusionProofVerification (0.01s) === RUN TestTimestampAuthorityVerifier ---- PASS: TestTimestampAuthorityVerifier (0.02s) +--- PASS: TestTimestampAuthorityVerifier (0.01s) === RUN TestTimestampAuthorityVerifierWithoutThreshold --- PASS: TestTimestampAuthorityVerifierWithoutThreshold (0.01s) === RUN TestDuplicateTimestamps --- PASS: TestDuplicateTimestamps (0.00s) === RUN TestBadTSASignature ---- PASS: TestBadTSASignature (0.01s) +--- PASS: TestBadTSASignature (0.00s) === RUN TestBadTSACertificateChain --- PASS: TestBadTSACertificateChain (0.00s) === RUN TestBadTSACertificateChainOutsideValidityPeriod @@ -3891,9 +3927,9 @@ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod (0.01s) --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/valid (0.00s) --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future (0.00s) - --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past (0.01s) + --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past (0.00s) === RUN TestTooManyTimestamps ---- PASS: TestTooManyTimestamps (0.01s) +--- PASS: TestTooManyTimestamps (0.00s) === RUN FuzzVerifyTimestampAuthorityWithoutThreshold --- PASS: FuzzVerifyTimestampAuthorityWithoutThreshold (0.00s) === RUN FuzzVerifyTimestampAuthorityWithThreshold @@ -3909,7 +3945,7 @@ === RUN FuzzVerifySignatureWithArtifactDigest --- PASS: FuzzVerifySignatureWithArtifactDigest (0.00s) PASS -ok github.com/sigstore/sigstore-go/pkg/verify 0.465s +ok github.com/sigstore/sigstore-go/pkg/verify 0.344s ? github.com/sigstore/sigstore-go/test/conformance [no test files] create-stamp debian/debhelper-build-stamp dh_testroot -O--builddirectory=_build -O--buildsystem=golang @@ -3963,8 +3999,8 @@ dh_md5sums -O--builddirectory=_build -O--buildsystem=golang dh_builddeb -O--builddirectory=_build -O--buildsystem=golang dpkg-deb: building package 'sigstore-go-dbgsym' in '../sigstore-go-dbgsym_0.7.1-2_amd64.deb'. -dpkg-deb: building package 'golang-github-sigstore-sigstore-go-dev' in '../golang-github-sigstore-sigstore-go-dev_0.7.1-2_all.deb'. dpkg-deb: building package 'sigstore-go' in '../sigstore-go_0.7.1-2_amd64.deb'. +dpkg-deb: building package 'golang-github-sigstore-sigstore-go-dev' in '../golang-github-sigstore-sigstore-go-dev_0.7.1-2_all.deb'. dpkg-genbuildinfo --build=binary -O../sigstore-go_0.7.1-2_amd64.buildinfo dpkg-genchanges --build=binary -O../sigstore-go_0.7.1-2_amd64.changes dpkg-genchanges: info: binary-only upload (no source code included) @@ -3972,12 +4008,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/2474186/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/481254 and its subdirectories -I: Current time: Fri Apr 11 21:42:34 -12 2025 -I: pbuilder-time-stamp: 1744450954 +I: removing directory /srv/workspace/pbuilder/2474186 and its subdirectories +I: Current time: Sat May 16 06:20:13 +14 2026 +I: pbuilder-time-stamp: 1778862013