Diff of the two buildlogs: -- --- b1/build.log 2025-04-13 14:16:20.253527700 +0000 +++ b2/build.log 2025-04-13 14:21:33.362707423 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Sun Apr 13 02:13:34 -12 2025 -I: pbuilder-time-stamp: 1744553614 +I: Current time: Sun May 17 10:39:23 +14 2026 +I: pbuilder-time-stamp: 1778963963 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz] I: copying local configuration @@ -25,52 +25,84 @@ dpkg-source: info: applying disable-tests-that-download.patch I: Not using root during the build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/2447002/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/D01_modify_environment starting +debug: Running on codethink03-arm64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 May 16 20:39 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='arm64' - DEBIAN_FRONTEND='noninteractive' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu") + BASH_VERSION='5.2.37(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=arm64 + DEBIAN_FRONTEND=noninteractive DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 ' - DISTRIBUTION='unstable' - HOME='/root' - HOST_ARCH='arm64' + DIRSTACK=() + DISTRIBUTION=unstable + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=aarch64 + HOST_ARCH=arm64 IFS=' ' - INVOCATION_ID='6503c71444d44478b556afbcd71c0759' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='2447002' - PS1='# ' - PS2='> ' + INVOCATION_ID=24adfa70a99a437b83524f07372bd707 + LANG=C + LANGUAGE=nl_BE:nl + LC_ALL=C + MACHTYPE=aarch64-unknown-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=949536 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.K44MRbu7/pbuilderrc_KHyv --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.K44MRbu7/b1 --logfile b1/build.log golang-github-sigstore-sigstore_1.9.3-2.dsc' - SUDO_GID='109' - SUDO_UID='104' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://192.168.101.4:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.K44MRbu7/pbuilderrc_3Y1T --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.K44MRbu7/b2 --logfile b2/build.log golang-github-sigstore-sigstore_1.9.3-2.dsc' + SUDO_GID=109 + SUDO_UID=104 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://192.168.101.4:3128 I: uname -a - Linux codethink04-arm64 6.1.0-33-cloud-arm64 #1 SMP Debian 6.1.133-1 (2025-04-10) aarch64 GNU/Linux + Linux i-capture-the-hostname 6.1.0-33-cloud-arm64 #1 SMP Debian 6.1.133-1 (2025-04-10) aarch64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Mar 4 11:20 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/2447002/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Mar 4 2025 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -633,7 +665,7 @@ Get: 473 http://deb.debian.org/debian unstable/main arm64 golang-github-theupdateframework-go-tuf-dev all 2.0.2+0.7.0-1 [200 kB] Get: 474 http://deb.debian.org/debian unstable/main arm64 golang-github-tink-crypto-tink-go-dev all 2.4.0-1 [2021 kB] Get: 475 http://deb.debian.org/debian unstable/main arm64 golang-github-sigstore-sigstore-dev all 1.9.3-2 [112 kB] -Fetched 223 MB in 1s (195 MB/s) +Fetched 223 MB in 3s (66.2 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19954 files and directories currently installed.) @@ -2156,8 +2188,8 @@ Setting up tzdata (2025b-2) ... Current default time zone: 'Etc/UTC' -Local time is now: Sun Apr 13 14:14:39 UTC 2025. -Universal Time is now: Sun Apr 13 14:14:39 UTC 2025. +Local time is now: Sat May 16 20:42:14 UTC 2026. +Universal Time is now: Sat May 16 20:42:14 UTC 2026. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ... @@ -2554,7 +2586,11 @@ Building tag database... -> Finished parsing the build-deps I: Building the package -I: Running cd /build/reproducible-path/golang-github-sigstore-sigstore-1.9.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../golang-github-sigstore-sigstore_1.9.3-2_source.changes +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for unstable +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/golang-github-sigstore-sigstore-1.9.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../golang-github-sigstore-sigstore_1.9.3-2_source.changes dpkg-buildpackage: info: source package golang-github-sigstore-sigstore dpkg-buildpackage: info: source version 1.9.3-2 dpkg-buildpackage: info: source distribution unstable @@ -2582,57 +2618,57 @@ make[1]: Leaving directory '/build/reproducible-path/golang-github-sigstore-sigstore-1.9.3' dh_auto_build -O--builddirectory=_build -O--buildsystem=golang cd _build && go install -trimpath -v -p 12 github.com/sigstore/sigstore/pkg/cryptoutils github.com/sigstore/sigstore/pkg/fulcioroots github.com/sigstore/sigstore/pkg/oauth github.com/sigstore/sigstore/pkg/oauth/internal github.com/sigstore/sigstore/pkg/oauth/oidc github.com/sigstore/sigstore/pkg/oauthflow github.com/sigstore/sigstore/pkg/signature github.com/sigstore/sigstore/pkg/signature/dsse github.com/sigstore/sigstore/pkg/signature/kms github.com/sigstore/sigstore/pkg/signature/kms/aws github.com/sigstore/sigstore/pkg/signature/kms/cliplugin github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/common github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/handler github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/internal/signerverifier github.com/sigstore/sigstore/pkg/signature/kms/fake github.com/sigstore/sigstore/pkg/signature/options github.com/sigstore/sigstore/pkg/signature/payload github.com/sigstore/sigstore/pkg/signature/ssh github.com/sigstore/sigstore/pkg/signature/tink github.com/sigstore/sigstore/pkg/tuf github.com/sigstore/sigstore/test -internal/msan +internal/profilerecord +internal/goexperiment internal/coverage/rtcov -internal/byteorder internal/godebugs -internal/goexperiment -internal/profilerecord internal/goarch +internal/byteorder +internal/msan internal/unsafeheader internal/asan internal/runtime/syscall -sync/atomic internal/goos -internal/abi internal/cpu -internal/runtime/math +sync/atomic math/bits unicode +internal/abi +internal/runtime/math unicode/utf8 -internal/chacha8rand crypto/internal/fips140/alias -crypto/internal/fips140deps/byteorder internal/itoa +internal/chacha8rand +crypto/internal/fips140deps/byteorder cmp -math crypto/internal/boring/sig -unicode/utf16 crypto/internal/fips140/subtle +unicode/utf16 +math vendor/golang.org/x/crypto/cryptobyte/asn1 internal/nettrace encoding -golang.org/x/crypto/salsa20/salsa golang.org/x/crypto/internal/alias +golang.org/x/crypto/salsa20/salsa google.golang.org/protobuf/internal/flags google.golang.org/protobuf/internal/set github.com/theupdateframework/go-tuf/v0/internal/sets log/internal -container/list internal/bytealg internal/runtime/atomic -crypto/internal/fips140deps/cpu -github.com/aws/aws-sdk-go-v2/internal/sdkio internal/runtime/sys +crypto/internal/fips140deps/cpu +container/list vendor/golang.org/x/crypto/internal/alias +github.com/aws/aws-sdk-go-v2/internal/sdkio github.com/tink-crypto/tink-go/internal github.com/tink-crypto/tink-go/internal/internalapi github.com/tink-crypto/tink-go/key internal/runtime/exithook +internal/stringslite internal/race internal/runtime/maps internal/sync -internal/stringslite runtime internal/reflectlite sync @@ -2645,289 +2681,289 @@ internal/testlog internal/singleflight unique -errors google.golang.org/protobuf/internal/pragma +errors sort runtime/cgo io strconv internal/oserror +internal/godebug path math/rand/v2 vendor/golang.org/x/net/dns/dnsmessage -internal/godebug syscall bytes hash -crypto/internal/fips140deps/godebug -crypto/internal/randutil strings -reflect +crypto/internal/fips140deps/godebug crypto -golang.org/x/crypto/blowfish -net/netip +reflect +crypto/internal/randutil +github.com/aws/smithy-go/transport/http/internal/io +crypto/internal/fips140 +crypto/internal/impl +regexp/syntax +bufio math/rand +net/netip hash/fnv hash/crc32 -crypto/internal/fips140 -github.com/aws/smithy-go/transport/http/internal/io +github.com/theupdateframework/go-tuf/v0/internal/roles vendor/golang.org/x/text/transform -github.com/syndtr/goleveldb/leveldb/comparer -github.com/aws/smithy-go/io -crypto/internal/impl -time -crypto/internal/fips140/sha3 -internal/syscall/execenv -internal/syscall/unix -regexp/syntax crypto/internal/fips140/sha256 +crypto/internal/fips140/sha3 crypto/internal/fips140/sha512 -bufio -github.com/theupdateframework/go-tuf/v0/internal/roles crypto/tls/internal/fips140tls net/http/internal/ascii +github.com/syndtr/goleveldb/leveldb/comparer net/http/internal/testcert -crypto/sha3 +golang.org/x/crypto/blowfish +github.com/aws/smithy-go/io github.com/aws/aws-sdk-go-v2/internal/strings +crypto/sha3 container/heap -crypto/internal/fips140hash crypto/internal/fips140/hmac +crypto/internal/fips140hash +internal/syscall/unix +time +internal/syscall/execenv crypto/internal/fips140/check crypto/internal/fips140/aes crypto/internal/fips140/nistec/fiat -crypto/internal/fips140/bigmod -crypto/internal/fips140/tls12 crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/bigmod crypto/internal/fips140/hkdf -crypto/internal/fips140/tls13 +crypto/internal/fips140/tls12 regexp +crypto/internal/fips140/tls13 crypto/internal/fips140/edwards25519 io/fs +internal/poll +context github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/common github.com/aws/aws-sdk-go-v2/internal/timeconv -context github.com/aws/smithy-go/ptr -internal/poll -internal/filepathlite -embed github.com/aws/aws-sdk-go-v2/internal/sdk github.com/aws/smithy-go/context github.com/tink-crypto/tink-go/tink +internal/filepathlite +embed +crypto/internal/fips140/nistec google.golang.org/protobuf/internal/editiondefaults os -crypto/internal/fips140/nistec internal/fmtsort encoding/binary encoding/base64 vendor/golang.org/x/crypto/internal/poly1305 -github.com/golang/snappy -golang.org/x/crypto/internal/poly1305 github.com/tink-crypto/tink-go/internal/outputprefix golang.org/x/sys/unix +github.com/golang/snappy +golang.org/x/crypto/internal/poly1305 +encoding/pem +golang.org/x/crypto/nacl/secretbox crypto/internal/sysrand fmt path/filepath google.golang.org/protobuf/internal/detrand golang.org/x/sys/cpu -encoding/pem io/ioutil -golang.org/x/crypto/nacl/secretbox internal/sysinfo crypto/internal/entropy crypto/internal/fips140/drbg -golang.org/x/crypto/sha3 os/exec crypto/internal/fips140/aes/gcm -crypto/internal/fips140/mlkem crypto/internal/fips140only +crypto/internal/fips140/mlkem +crypto/internal/fips140/ecdh +crypto/internal/fips140/ecdsa crypto/internal/fips140/ed25519 crypto/internal/fips140/rsa +golang.org/x/crypto/sha3 crypto/md5 crypto/rc4 +net github.com/skratchdot/open-golang/open -crypto/internal/fips140/ecdh -crypto/internal/fips140/ecdsa +crypto/cipher +crypto/internal/boring +crypto/des +vendor/golang.org/x/crypto/chacha20 +golang.org/x/crypto/chacha20 +crypto/ecdh +crypto/sha512 +crypto/sha1 +crypto/aes +crypto/sha256 +crypto/hmac +golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +golang.org/x/crypto/pbkdf2 +golang.org/x/crypto/hkdf math/big -net/url encoding/hex -github.com/opencontainers/go-digest +net/url encoding/json -crypto/cipher +github.com/opencontainers/go-digest google.golang.org/protobuf/internal/errors -net go/token +golang.org/x/crypto/scrypt compress/flate -google.golang.org/protobuf/encoding/protowire google.golang.org/protobuf/internal/version +google.golang.org/protobuf/encoding/protowire github.com/theupdateframework/go-tuf/v0/internal/fsutil log +vendor/golang.org/x/crypto/chacha20poly1305 vendor/golang.org/x/text/unicode/norm -vendor/golang.org/x/net/http2/hpack google.golang.org/protobuf/reflect/protoreflect +vendor/golang.org/x/net/http2/hpack mime -crypto/internal/boring -crypto/des -vendor/golang.org/x/crypto/chacha20 -crypto/ecdh -crypto/sha512 -crypto/sha1 -crypto/aes -crypto/sha256 -crypto/hmac -compress/gzip -vendor/golang.org/x/crypto/chacha20poly1305 -golang.org/x/crypto/pbkdf2 -vendor/golang.org/x/text/unicode/bidi mime/quotedprintable -golang.org/x/crypto/scrypt net/http/internal github.com/syndtr/goleveldb/leveldb/util +vendor/golang.org/x/text/unicode/bidi github.com/syndtr/goleveldb/leveldb/storage flag -google.golang.org/protobuf/internal/descopts +github.com/syndtr/goleveldb/leveldb/cache +compress/gzip +github.com/syndtr/goleveldb/leveldb/filter +runtime/debug +vendor/golang.org/x/text/secure/bidirule +github.com/syndtr/goleveldb/leveldb/opt google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/descopts google.golang.org/protobuf/internal/strs google.golang.org/protobuf/internal/encoding/messageset google.golang.org/protobuf/internal/genid -google.golang.org/protobuf/internal/order google.golang.org/protobuf/internal/encoding/text +google.golang.org/protobuf/internal/order google.golang.org/protobuf/reflect/protoregistry google.golang.org/protobuf/runtime/protoiface -vendor/golang.org/x/text/secure/bidirule -github.com/syndtr/goleveldb/leveldb/cache -google.golang.org/protobuf/internal/protolazy -github.com/secure-systems-lab/go-securesystemslib/cjson -github.com/syndtr/goleveldb/leveldb/filter -vendor/golang.org/x/net/idna -runtime/debug runtime/trace +google.golang.org/protobuf/internal/protolazy text/template/parse -github.com/theupdateframework/go-tuf/v0/data -github.com/syndtr/goleveldb/leveldb/opt +github.com/syndtr/goleveldb/leveldb/errors gopkg.in/square/go-jose.v2/json -google.golang.org/protobuf/proto +testing +github.com/syndtr/goleveldb/leveldb/iterator +github.com/syndtr/goleveldb/leveldb/journal google.golang.org/protobuf/internal/encoding/defval +vendor/golang.org/x/net/idna +github.com/pkg/browser +google.golang.org/protobuf/proto +database/sql/driver +github.com/go-jose/go-jose/json +github.com/syndtr/goleveldb/leveldb/memdb +github.com/secure-systems-lab/go-securesystemslib/cjson +github.com/syndtr/goleveldb/leveldb/table +golang.org/x/crypto/curve25519 +github.com/theupdateframework/go-tuf/v0/data +github.com/aws/aws-sdk-go-v2/internal/sync/singleflight +golang.org/x/term +github.com/aws/smithy-go/internal/sync/singleflight +github.com/aws/smithy-go/logging crypto/elliptic crypto/internal/boring/bbig encoding/asn1 crypto/rand crypto/dsa -github.com/theupdateframework/go-tuf/v0/util -github.com/syndtr/goleveldb/leveldb/errors crypto/ed25519 crypto/rsa github.com/secure-systems-lab/go-securesystemslib/encrypted -golang.org/x/term -crypto/internal/hpke -github.com/syndtr/goleveldb/leveldb/iterator -github.com/syndtr/goleveldb/leveldb/journal -testing -golang.org/x/crypto/ed25519 -github.com/pkg/browser -database/sql/driver -github.com/sigstore/sigstore/pkg/signature/options -github.com/go-jose/go-jose/json -github.com/syndtr/goleveldb/leveldb/memdb -github.com/syndtr/goleveldb/leveldb/table -golang.org/x/crypto/chacha20 google.golang.org/protobuf/internal/filedesc google.golang.org/protobuf/encoding/prototext -github.com/segmentio/ksuid -golang.org/x/crypto/curve25519 -golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +github.com/theupdateframework/go-tuf/v0/util +crypto/internal/hpke text/template +github.com/syndtr/goleveldb/leveldb +golang.org/x/crypto/ed25519 +github.com/segmentio/ksuid github.com/aws/aws-sdk-go-v2/internal/rand +github.com/sigstore/sigstore/pkg/signature/options +github.com/aws/smithy-go/middleware +github.com/aws/smithy-go vendor/golang.org/x/crypto/cryptobyte crypto/x509/pkix -github.com/aws/aws-sdk-go-v2/internal/sync/singleflight -github.com/aws/smithy-go/internal/sync/singleflight -github.com/syndtr/goleveldb/leveldb -github.com/aws/smithy-go/logging -github.com/aws/smithy-go github.com/aws/smithy-go/time github.com/aws/smithy-go/rand github.com/aws/smithy-go/auth -github.com/aws/smithy-go/middleware github.com/aws/aws-sdk-go-v2/aws/ratelimit -crypto/ecdsa github.com/aws/aws-sdk-go-v2/feature/ec2/imds/internal/config os/user github.com/aws/aws-sdk-go-v2/aws/protocol/restjson github.com/aws/smithy-go/document github.com/aws/smithy-go/encoding +encoding/xml +github.com/aws/aws-sdk-go-v2/internal/ini github.com/aws/smithy-go/encoding/json +golang.org/x/sync/singleflight github.com/aws/aws-sdk-go-v2/service/sso/types -github.com/aws/aws-sdk-go-v2/service/ssooidc/types -encoding/xml -github.com/aws/aws-sdk-go-v2/service/sts/types +crypto/ecdsa github.com/aws/aws-sdk-go-v2/aws/middleware/private/metrics github.com/aws/aws-sdk-go-v2/internal/context +github.com/aws/aws-sdk-go-v2/service/ssooidc/types +github.com/aws/aws-sdk-go-v2/service/sts/types github.com/aws/aws-sdk-go-v2/internal/middleware -github.com/aws/aws-sdk-go-v2/internal/ini github.com/aws/aws-sdk-go-v2/service/kms/types -golang.org/x/sync/singleflight +github.com/jellydator/ttlcache github.com/tink-crypto/tink-go/subtle/random google.golang.org/protobuf/internal/encoding/json -github.com/sigstore/sigstore/pkg/oauth -github.com/jellydator/ttlcache github.com/tink-crypto/tink-go/internal/signature/ecdsa -golang.org/x/crypto/hkdf +github.com/tink-crypto/tink-go/subtle +github.com/sigstore/sigstore/pkg/oauth gopkg.in/square/go-jose.v2/cipher github.com/go-jose/go-jose/cipher -github.com/tink-crypto/tink-go/subtle +github.com/tink-crypto/tink-go/signature/subtle google.golang.org/protobuf/internal/encoding/tag google.golang.org/protobuf/encoding/protojson -github.com/tink-crypto/tink-go/signature/subtle google.golang.org/protobuf/internal/impl github.com/aws/aws-sdk-go-v2/aws/protocol/xml github.com/aws/smithy-go/encoding/xml github.com/aws/aws-sdk-go-v2/internal/shareddefaults crypto/x509 github.com/google/go-containerregistry/pkg/name -net/textproto vendor/golang.org/x/net/http/httpproxy +net/textproto +github.com/sigstore/sigstore/pkg/signature/payload vendor/golang.org/x/net/http/httpguts mime/multipart -github.com/sigstore/sigstore/pkg/signature/payload google.golang.org/protobuf/internal/filetype -github.com/sigstore/sigstore/pkg/cryptoutils -github.com/theupdateframework/go-tuf/v0/pkg/keys -crypto/tls +google.golang.org/protobuf/runtime/protoimpl gopkg.in/square/go-jose.v2 +crypto/tls +github.com/theupdateframework/go-tuf/v0/pkg/keys golang.org/x/crypto/ssh github.com/sigstore/sigstore/test github.com/go-jose/go-jose -google.golang.org/protobuf/runtime/protoimpl +github.com/sigstore/sigstore/pkg/cryptoutils google.golang.org/protobuf/types/descriptorpb google.golang.org/protobuf/types/known/timestamppb github.com/tink-crypto/tink-go/proto/tink_go_proto github.com/tink-crypto/tink-go/proto/common_go_proto github.com/tink-crypto/tink-go/proto/ed25519_go_proto github.com/tink-crypto/tink-go/proto/ecdsa_go_proto +github.com/tink-crypto/tink-go/core/registry +github.com/tink-crypto/tink-go/core/cryptofmt github.com/theupdateframework/go-tuf/v0/internal/signer github.com/theupdateframework/go-tuf/v0/verify github.com/theupdateframework/go-tuf/v0/sign -github.com/tink-crypto/tink-go/core/registry -github.com/tink-crypto/tink-go/core/cryptofmt +github.com/tink-crypto/tink-go/internal/primitiveset github.com/tink-crypto/tink-go/internal/protoserialization github.com/tink-crypto/tink-go/internal/registryconfig -github.com/tink-crypto/tink-go/internal/primitiveset github.com/theupdateframework/go-tuf/v0/pkg/targets -github.com/theupdateframework/go-tuf/v0 github.com/tink-crypto/tink-go/keyset +github.com/theupdateframework/go-tuf/v0 google.golang.org/genproto/googleapis/api/annotations github.com/tink-crypto/tink-go/insecurecleartextkeyset github.com/sigstore/sigstore/pkg/signature/tink github.com/sigstore/protobuf-specs/gen/pb-go/common/v1 github.com/sigstore/sigstore/pkg/signature -github.com/secure-systems-lab/go-securesystemslib/dsse -github.com/sigstore/sigstore/pkg/signature/dsse github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/internal/signerverifier -github.com/sigstore/sigstore/pkg/signature/ssh github.com/sigstore/sigstore/pkg/signature/kms/cliplugin github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/handler +github.com/secure-systems-lab/go-securesystemslib/dsse +github.com/sigstore/sigstore/pkg/signature/ssh github.com/sigstore/sigstore/pkg/signature/kms +github.com/sigstore/sigstore/pkg/signature/dsse github.com/sigstore/sigstore/pkg/signature/kms/fake net/http/httptrace net/http @@ -2935,14 +2971,14 @@ net/http/httptest golang.org/x/oauth2/internal net/http/httputil -github.com/aws/smithy-go/encoding/httpbinding github.com/aws/smithy-go/endpoints +github.com/aws/smithy-go/encoding/httpbinding golang.org/x/oauth2 github.com/theupdateframework/go-tuf/v0/client/leveldbstore -github.com/aws/smithy-go/transport/http -github.com/sigstore/sigstore/pkg/tuf github.com/sigstore/sigstore/pkg/oauth/internal +github.com/aws/smithy-go/transport/http github.com/coreos/go-oidc/v3/oidc +github.com/sigstore/sigstore/pkg/tuf github.com/sigstore/sigstore/pkg/oauth/oidc github.com/sigstore/sigstore/pkg/oauthflow github.com/sigstore/sigstore/pkg/fulcioroots @@ -2958,26 +2994,26 @@ github.com/aws/aws-sdk-go-v2/credentials/processcreds github.com/aws/aws-sdk-go-v2/aws/defaults github.com/aws/aws-sdk-go-v2/aws/signer/internal/v4 -github.com/aws/aws-sdk-go-v2/internal/configsources github.com/aws/aws-sdk-go-v2/internal/endpoints +github.com/aws/aws-sdk-go-v2/internal/configsources github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 -github.com/aws/aws-sdk-go-v2/aws/transport/http -github.com/aws/aws-sdk-go-v2/aws/retry github.com/aws/aws-sdk-go-v2/service/sso/internal/endpoints -github.com/aws/aws-sdk-go-v2/service/ssooidc/internal/endpoints github.com/aws/aws-sdk-go-v2/service/sts/internal/endpoints +github.com/aws/aws-sdk-go-v2/service/ssooidc/internal/endpoints github.com/aws/aws-sdk-go-v2/service/kms/internal/endpoints +github.com/aws/aws-sdk-go-v2/aws/transport/http +github.com/aws/aws-sdk-go-v2/aws/retry github.com/aws/aws-sdk-go-v2/aws/signer/v4 github.com/aws/aws-sdk-go-v2/internal/auth/smithy github.com/aws/aws-sdk-go-v2/service/internal/presigned-url github.com/aws/aws-sdk-go-v2/feature/ec2/imds github.com/aws/aws-sdk-go-v2/credentials/endpointcreds/internal/client -github.com/aws/aws-sdk-go-v2/service/ssooidc github.com/aws/aws-sdk-go-v2/service/sso +github.com/aws/aws-sdk-go-v2/service/ssooidc github.com/aws/aws-sdk-go-v2/service/sts github.com/aws/aws-sdk-go-v2/service/kms -github.com/aws/aws-sdk-go-v2/credentials/endpointcreds github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds +github.com/aws/aws-sdk-go-v2/credentials/endpointcreds github.com/aws/aws-sdk-go-v2/credentials/ssocreds github.com/aws/aws-sdk-go-v2/credentials/stscreds github.com/aws/aws-sdk-go-v2/config @@ -3047,17 +3083,17 @@ === RUN TestMarshalCertificateToPEM/cert1 === RUN TestMarshalCertificateToPEM/cert2 === RUN TestMarshalCertificateToPEM/nil ---- PASS: TestMarshalCertificateToPEM (0.00s) - --- PASS: TestMarshalCertificateToPEM/cert1 (0.00s) +--- PASS: TestMarshalCertificateToPEM (0.01s) + --- PASS: TestMarshalCertificateToPEM/cert1 (0.01s) --- PASS: TestMarshalCertificateToPEM/cert2 (0.00s) --- PASS: TestMarshalCertificateToPEM/nil (0.00s) === RUN TestMarshalCertificatesToPEM === RUN TestMarshalCertificatesToPEM/one_cert === RUN TestMarshalCertificatesToPEM/two_certs === RUN TestMarshalCertificatesToPEM/nil_cert ---- PASS: TestMarshalCertificatesToPEM (0.00s) +--- PASS: TestMarshalCertificatesToPEM (0.02s) --- PASS: TestMarshalCertificatesToPEM/one_cert (0.00s) - --- PASS: TestMarshalCertificatesToPEM/two_certs (0.00s) + --- PASS: TestMarshalCertificatesToPEM/two_certs (0.01s) --- PASS: TestMarshalCertificatesToPEM/nil_cert (0.00s) === RUN TestCheckExpiration === RUN TestCheckExpiration/valid @@ -3086,7 +3122,7 @@ === RUN TestRSAPrivateKeyPEMRoundtrip === PAUSE TestRSAPrivateKeyPEMRoundtrip === RUN TestUnmarshalPEMToPrivateKey ---- PASS: TestUnmarshalPEMToPrivateKey (1.18s) +--- PASS: TestUnmarshalPEMToPrivateKey (3.48s) === RUN TestECDSAPublicKeyPEMRoundtrip === PAUSE TestECDSAPublicKeyPEMRoundtrip === RUN TestEd25519PublicKeyPEMRoundtrip @@ -3094,13 +3130,13 @@ === RUN TestRSAPublicKeyPEMRoundtrip === PAUSE TestRSAPublicKeyPEMRoundtrip === RUN TestSKIDRSA ---- PASS: TestSKIDRSA (0.42s) +--- PASS: TestSKIDRSA (1.61s) === RUN TestSKIDECDSA --- PASS: TestSKIDECDSA (0.00s) === RUN TestSKIDED25519 ---- PASS: TestSKIDED25519 (0.00s) +--- PASS: TestSKIDED25519 (0.01s) === RUN TestEqualKeys ---- PASS: TestEqualKeys (0.35s) +--- PASS: TestEqualKeys (3.89s) === RUN TestValidatePubKeyUnsupported --- PASS: TestValidatePubKeyUnsupported (0.00s) === RUN TestValidatePubKeyRsa @@ -3112,7 +3148,7 @@ === RUN TestValidatePubKeyEd25519 --- PASS: TestValidatePubKeyEd25519 (0.00s) === RUN TestUnmarshalPEMToPublicKey ---- PASS: TestUnmarshalPEMToPublicKey (0.94s) +--- PASS: TestUnmarshalPEMToPublicKey (1.78s) === RUN TestMarshalAndUnmarshalOtherNameSAN --- PASS: TestMarshalAndUnmarshalOtherNameSAN (0.00s) === RUN TestUnmarshalOtherNameSANFailures @@ -3128,6 +3164,8 @@ === PAUSE TestGeneratePEMEncodedRSAKeyPair/SkipPassword_func === CONT TestGeneratePEMEncodedRSAKeyPair/encrypted === CONT TestEd25519PrivateKeyPEMRoundtrip +--- PASS: TestEd25519PrivateKeyPEMRoundtrip (0.00s) +=== CONT TestRSAPublicKeyPEMRoundtrip === CONT TestGeneratePEMEncodedECDSAKeyPair === RUN TestGeneratePEMEncodedECDSAKeyPair/encrypted === PAUSE TestGeneratePEMEncodedECDSAKeyPair/encrypted @@ -3136,31 +3174,29 @@ === RUN TestGeneratePEMEncodedECDSAKeyPair/SkipPassword_func === PAUSE TestGeneratePEMEncodedECDSAKeyPair/SkipPassword_func === CONT TestGeneratePEMEncodedECDSAKeyPair/encrypted ---- PASS: TestEd25519PrivateKeyPEMRoundtrip (0.00s) -=== CONT TestRSAPublicKeyPEMRoundtrip -=== CONT TestEd25519PublicKeyPEMRoundtrip ---- PASS: TestEd25519PublicKeyPEMRoundtrip (0.00s) -=== CONT TestECDSAPublicKeyPEMRoundtrip ---- PASS: TestECDSAPublicKeyPEMRoundtrip (0.00s) -=== CONT TestRSAPrivateKeyPEMRoundtrip -=== CONT TestGeneratePEMEncodedRSAKeyPair/SkipPassword_func === CONT TestECDSAPrivateKeyPEMRoundtrip --- PASS: TestECDSAPrivateKeyPEMRoundtrip (0.00s) -=== CONT TestGeneratePEMEncodedRSAKeyPair/nil_pass_func === CONT TestGeneratePEMEncodedECDSAKeyPair/SkipPassword_func +=== CONT TestEd25519PublicKeyPEMRoundtrip +=== CONT TestGeneratePEMEncodedRSAKeyPair/SkipPassword_func +=== CONT TestRSAPrivateKeyPEMRoundtrip +=== CONT TestGeneratePEMEncodedRSAKeyPair/nil_pass_func === CONT TestGeneratePEMEncodedECDSAKeyPair/nil_pass_func ---- PASS: TestRSAPrivateKeyPEMRoundtrip (0.33s) +=== CONT TestECDSAPublicKeyPEMRoundtrip +--- PASS: TestEd25519PublicKeyPEMRoundtrip (0.06s) +--- PASS: TestECDSAPublicKeyPEMRoundtrip (0.00s) +--- PASS: TestRSAPrivateKeyPEMRoundtrip (0.74s) --- PASS: TestGeneratePEMEncodedECDSAKeyPair (0.00s) - --- PASS: TestGeneratePEMEncodedECDSAKeyPair/nil_pass_func (0.00s) --- PASS: TestGeneratePEMEncodedECDSAKeyPair/SkipPassword_func (0.00s) - --- PASS: TestGeneratePEMEncodedECDSAKeyPair/encrypted (0.57s) ---- PASS: TestRSAPublicKeyPEMRoundtrip (0.67s) + --- PASS: TestGeneratePEMEncodedECDSAKeyPair/nil_pass_func (0.00s) + --- PASS: TestGeneratePEMEncodedECDSAKeyPair/encrypted (1.26s) +--- PASS: TestRSAPublicKeyPEMRoundtrip (1.48s) --- PASS: TestGeneratePEMEncodedRSAKeyPair (0.00s) - --- PASS: TestGeneratePEMEncodedRSAKeyPair/SkipPassword_func (0.62s) - --- PASS: TestGeneratePEMEncodedRSAKeyPair/nil_pass_func (0.78s) - --- PASS: TestGeneratePEMEncodedRSAKeyPair/encrypted (1.11s) + --- PASS: TestGeneratePEMEncodedRSAKeyPair/SkipPassword_func (2.11s) + --- PASS: TestGeneratePEMEncodedRSAKeyPair/encrypted (2.29s) + --- PASS: TestGeneratePEMEncodedRSAKeyPair/nil_pass_func (2.67s) PASS -ok github.com/sigstore/sigstore/pkg/cryptoutils 4.029s +ok github.com/sigstore/sigstore/pkg/cryptoutils 13.636s ? github.com/sigstore/sigstore/pkg/fulcioroots [no test files] ? github.com/sigstore/sigstore/pkg/oauth [no test files] === RUN TestParseAccessTokenSuccessResponse @@ -3184,7 +3220,7 @@ === RUN FuzzParseAccessTokenSuccess --- PASS: FuzzParseAccessTokenSuccess (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/oauth/internal 0.014s +ok github.com/sigstore/sigstore/pkg/oauth/internal 0.036s ? github.com/sigstore/sigstore/pkg/oauth/oidc [no test files] === RUN TestClientCredentialsFlowTokenGetter_ccFlow client_credentials_test.go:36: got request: /.well-known/openid-configuration @@ -3215,33 +3251,33 @@ --- PASS: TestStaticTokenGetter_GetIDToken/verified (0.00s) --- PASS: TestStaticTokenGetter_GetIDToken/spiffeid (0.00s) === RUN TestSubjectFromToken -=== RUN TestSubjectFromToken/Email_not_verified === RUN TestSubjectFromToken/invalid_email_verified_property === RUN TestSubjectFromToken/Subject_as_subject === RUN TestSubjectFromToken/no_email_or_subject === RUN TestSubjectFromToken/Email_as_subject === RUN TestSubjectFromToken/String_email_verified_value +=== RUN TestSubjectFromToken/Email_not_verified --- PASS: TestSubjectFromToken (0.00s) - --- PASS: TestSubjectFromToken/Email_not_verified (0.00s) --- PASS: TestSubjectFromToken/invalid_email_verified_property (0.00s) --- PASS: TestSubjectFromToken/Subject_as_subject (0.00s) --- PASS: TestSubjectFromToken/no_email_or_subject (0.00s) --- PASS: TestSubjectFromToken/Email_as_subject (0.00s) --- PASS: TestSubjectFromToken/String_email_verified_value (0.00s) + --- PASS: TestSubjectFromToken/Email_not_verified (0.00s) === RUN TestSubjectFromUnverifiedToken -=== RUN TestSubjectFromUnverifiedToken/invalid_email_verified_property === RUN TestSubjectFromUnverifiedToken/Subject_as_subject === RUN TestSubjectFromUnverifiedToken/no_email_or_subject === RUN TestSubjectFromUnverifiedToken/Email_as_subject === RUN TestSubjectFromUnverifiedToken/String_email_verified_value === RUN TestSubjectFromUnverifiedToken/Email_not_verified +=== RUN TestSubjectFromUnverifiedToken/invalid_email_verified_property --- PASS: TestSubjectFromUnverifiedToken (0.00s) - --- PASS: TestSubjectFromUnverifiedToken/invalid_email_verified_property (0.00s) --- PASS: TestSubjectFromUnverifiedToken/Subject_as_subject (0.00s) --- PASS: TestSubjectFromUnverifiedToken/no_email_or_subject (0.00s) --- PASS: TestSubjectFromUnverifiedToken/Email_as_subject (0.00s) --- PASS: TestSubjectFromUnverifiedToken/String_email_verified_value (0.00s) --- PASS: TestSubjectFromUnverifiedToken/Email_not_verified (0.00s) + --- PASS: TestSubjectFromUnverifiedToken/invalid_email_verified_property (0.00s) === RUN TestInteractiveFlow_IO === RUN TestInteractiveFlow_IO/default === RUN TestInteractiveFlow_IO/buffer @@ -3249,11 +3285,11 @@ --- PASS: TestInteractiveFlow_IO/default (0.00s) --- PASS: TestInteractiveFlow_IO/buffer (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/oauthflow 0.032s +ok github.com/sigstore/sigstore/pkg/oauthflow 0.085s === RUN TestGetAlgorithmDetails --- PASS: TestGetAlgorithmDetails (0.00s) === RUN TestAlgorithmRegistryConfig ---- PASS: TestAlgorithmRegistryConfig (5.44s) +--- PASS: TestAlgorithmRegistryConfig (5.78s) === RUN TestSignatureAlgorithmFlagRoundtrip --- PASS: TestSignatureAlgorithmFlagRoundtrip (0.00s) === RUN TestGetDefaultPublicKeyDetails @@ -3263,17 +3299,17 @@ === RUN TestGetDefaultPublicKeyDetails/ed25519 === RUN TestGetDefaultPublicKeyDetails/ed25519-ph === RUN TestGetDefaultPublicKeyDetails/rsa-2048-pss ---- PASS: TestGetDefaultPublicKeyDetails (1.08s) +--- PASS: TestGetDefaultPublicKeyDetails (3.79s) --- PASS: TestGetDefaultPublicKeyDetails/ecdsa-p256 (0.00s) --- PASS: TestGetDefaultPublicKeyDetails/ecdsa-p384 (0.00s) - --- PASS: TestGetDefaultPublicKeyDetails/rsa-2048 (0.66s) + --- PASS: TestGetDefaultPublicKeyDetails/rsa-2048 (2.67s) --- PASS: TestGetDefaultPublicKeyDetails/ed25519 (0.00s) --- PASS: TestGetDefaultPublicKeyDetails/ed25519-ph (0.00s) - --- PASS: TestGetDefaultPublicKeyDetails/rsa-2048-pss (0.41s) + --- PASS: TestGetDefaultPublicKeyDetails/rsa-2048-pss (1.11s) === RUN TestHashingAlgorithmMatches --- PASS: TestHashingAlgorithmMatches (0.00s) === RUN TestECDSASignerVerifier ---- PASS: TestECDSASignerVerifier (0.00s) +--- PASS: TestECDSASignerVerifier (0.01s) === RUN TestECDSASignerVerifierUnsupportedHash --- PASS: TestECDSASignerVerifierUnsupportedHash (0.00s) === RUN TestECDSALoadVerifierWithoutKey @@ -3282,7 +3318,7 @@ P256 point not on curve --- PASS: TestECDSALoadVerifierInvalidCurve (0.00s) === RUN TestED25519SignerVerifier ---- PASS: TestED25519SignerVerifier (0.01s) +--- PASS: TestED25519SignerVerifier (0.00s) === RUN TestED25519Verifier --- PASS: TestED25519Verifier (0.00s) === RUN TestED25519phSignerVerifier @@ -3290,7 +3326,7 @@ === RUN TestED25519phVerifier --- PASS: TestED25519phVerifier (0.00s) === RUN TestRSAPKCS1v15SignerVerifier ---- PASS: TestRSAPKCS1v15SignerVerifier (0.08s) +--- PASS: TestRSAPKCS1v15SignerVerifier (0.09s) === RUN TestRSAPKCS1v15SignerVerifierUnsupportedHash --- PASS: TestRSAPKCS1v15SignerVerifierUnsupportedHash (0.00s) === RUN TestRSAPSSSignerVerifier @@ -3307,9 +3343,9 @@ === RUN TestLoadDefaultSigner/ecdsa-p256 === RUN TestLoadDefaultSigner/ed25519 === RUN TestLoadDefaultSigner/ed25519-ph ---- PASS: TestLoadDefaultSigner (1.54s) - --- PASS: TestLoadDefaultSigner/rsa-2048 (0.38s) - --- PASS: TestLoadDefaultSigner/rsa-2048-pss (1.17s) +--- PASS: TestLoadDefaultSigner (1.38s) + --- PASS: TestLoadDefaultSigner/rsa-2048 (0.66s) + --- PASS: TestLoadDefaultSigner/rsa-2048-pss (0.72s) --- PASS: TestLoadDefaultSigner/ecdsa-p256 (0.00s) --- PASS: TestLoadDefaultSigner/ed25519 (0.00s) --- PASS: TestLoadDefaultSigner/ed25519-ph (0.00s) @@ -3323,36 +3359,36 @@ === RUN TestLoadDefaultSignerVerifier/ecdsa-p256 === RUN TestLoadDefaultSignerVerifier/ed25519 === RUN TestLoadDefaultSignerVerifier/ed25519-ph ---- PASS: TestLoadDefaultSignerVerifier (0.83s) - --- PASS: TestLoadDefaultSignerVerifier/rsa-2048 (0.62s) - --- PASS: TestLoadDefaultSignerVerifier/rsa-2048-pss (0.21s) +--- PASS: TestLoadDefaultSignerVerifier (2.40s) + --- PASS: TestLoadDefaultSignerVerifier/rsa-2048 (0.55s) + --- PASS: TestLoadDefaultSignerVerifier/rsa-2048-pss (1.85s) --- PASS: TestLoadDefaultSignerVerifier/ecdsa-p256 (0.00s) --- PASS: TestLoadDefaultSignerVerifier/ed25519 (0.00s) --- PASS: TestLoadDefaultSignerVerifier/ed25519-ph (0.00s) === RUN TestProviderRoundtrip === RUN TestProviderRoundtrip/ECDSA === RUN TestProviderRoundtrip/RSA ---- PASS: TestProviderRoundtrip (0.59s) +--- PASS: TestProviderRoundtrip (0.42s) --- PASS: TestProviderRoundtrip/ECDSA (0.00s) - --- PASS: TestProviderRoundtrip/RSA (0.01s) + --- PASS: TestProviderRoundtrip/RSA (0.00s) === RUN TestLoadUnsafeVerifier ---- PASS: TestLoadUnsafeVerifier (2.14s) +--- PASS: TestLoadUnsafeVerifier (1.07s) === RUN TestLoadVerifier ---- PASS: TestLoadVerifier (1.50s) +--- PASS: TestLoadVerifier (1.72s) === RUN TestLoadDefaultVerifier === RUN TestLoadDefaultVerifier/rsa-2048 === RUN TestLoadDefaultVerifier/rsa-2048-pss === RUN TestLoadDefaultVerifier/ecdsa-p256 === RUN TestLoadDefaultVerifier/ed25519 === RUN TestLoadDefaultVerifier/ed25519-ph ---- PASS: TestLoadDefaultVerifier (0.87s) - --- PASS: TestLoadDefaultVerifier/rsa-2048 (0.24s) - --- PASS: TestLoadDefaultVerifier/rsa-2048-pss (0.63s) +--- PASS: TestLoadDefaultVerifier (1.08s) + --- PASS: TestLoadDefaultVerifier/rsa-2048 (0.56s) + --- PASS: TestLoadDefaultVerifier/rsa-2048-pss (0.52s) --- PASS: TestLoadDefaultVerifier/ecdsa-p256 (0.00s) --- PASS: TestLoadDefaultVerifier/ed25519 (0.00s) --- PASS: TestLoadDefaultVerifier/ed25519-ph (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature 14.271s +ok github.com/sigstore/sigstore/pkg/signature 18.020s === RUN TestImplementsDSSESigner --- PASS: TestImplementsDSSESigner (0.00s) === RUN TestImplementsDSSEVerifier @@ -3366,7 +3402,7 @@ === RUN TestInvalidSignature --- PASS: TestInvalidSignature (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/dsse 0.035s +ok github.com/sigstore/sigstore/pkg/signature/dsse 0.040s === RUN TestGet === PAUSE TestGet === CONT TestGet @@ -3388,7 +3424,7 @@ --- PASS: TestGet/file_path (0.00s) --- PASS: TestGet/registered_provider_error (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/kms 0.064s +ok github.com/sigstore/sigstore/pkg/signature/kms 0.066s === RUN TestParseReference === RUN TestParseReference/awskms:///1234abcd-12ab-34cd-56ef-1234567890ab === RUN TestParseReference/awskms:///mrk-1234abcd12ab34cd56ef1234567890ab @@ -3422,7 +3458,7 @@ --- PASS: TestParseReference/awskms:///1234abcd-12ab-YYYY-56ef-1234567890ab (0.00s) --- PASS: TestParseReference/awskms://1234abcd-12ab-34cd-56ef-1234567890ab (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/kms/aws 0.075s +ok github.com/sigstore/sigstore/pkg/signature/kms/aws 0.030s === RUN TestInvokePlugin === RUN TestInvokePlugin/success === RUN TestInvokePlugin/success:_expected_stdin @@ -3467,7 +3503,7 @@ === CONT TestPluginClient/PublicKey === CONT TestPluginClient/CreateKey === CONT TestPluginClient/SupportedAlgorithms ---- PASS: TestPluginClient (0.00s) +--- PASS: TestPluginClient (0.01s) --- PASS: TestPluginClient/DefaultAlgorithm (0.00s) --- PASS: TestPluginClient/CryptoSigner (0.00s) --- PASS: TestPluginClient/VerifySignature (0.00s) @@ -3476,7 +3512,7 @@ --- PASS: TestPluginClient/CreateKey (0.00s) --- PASS: TestPluginClient/SupportedAlgorithms (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/kms/cliplugin 0.064s +ok github.com/sigstore/sigstore/pkg/signature/kms/cliplugin 0.051s === RUN TestPluginArgsJSON === PAUSE TestPluginArgsJSON === RUN TestPluginRespJSON @@ -3556,65 +3592,65 @@ === CONT TestPluginArgsJSON/publicKey === CONT TestPluginArgsJSON/createKey === CONT TestPluginArgsJSON/supportedAlgorithms ---- PASS: TestPluginArgsJSON (0.00s) - --- PASS: TestPluginArgsJSON/defaultAlgorithm (0.00s) - --- PASS: TestPluginArgsJSON/verifySignature (0.00s) - --- PASS: TestPluginArgsJSON/signMessage (0.00s) - --- PASS: TestPluginArgsJSON/publicKey (0.00s) - --- PASS: TestPluginArgsJSON/createKey (0.00s) - --- PASS: TestPluginArgsJSON/supportedAlgorithms (0.00s) -=== CONT TestHashFuncJSON/BLAKE2b-512 -=== CONT TestHashFuncJSON/BLAKE2b-384 -=== CONT TestHashFuncJSON/BLAKE2b-256 -=== CONT TestHashFuncJSON/BLAKE2s-256 -=== CONT TestHashFuncJSON/SHA-512/256 +=== CONT TestHashFuncJSON/MD5+SHA1 === CONT TestHashFuncJSON/SHA-512/224 +=== CONT TestHashFuncJSON/MD5 === CONT TestHashFuncJSON/SHA3-512 -=== CONT TestHashFuncJSON/SHA3-384 -=== CONT TestHashFuncJSON/SHA3-256 -=== CONT TestHashFuncJSON/SHA3-224 -=== CONT TestHashFuncJSON/RIPEMD-160 -=== CONT TestHashFuncJSON/MD5+SHA1 -=== CONT TestHashFuncJSON/SHA-512 === CONT TestHashFuncJSON/SHA-384 === CONT TestHashFuncJSON/SHA-256 === CONT TestHashFuncJSON/SHA-224 === CONT TestHashFuncJSON/SHA-1 -=== CONT TestHashFuncJSON/MD5 ---- PASS: TestHashFuncJSON (0.00s) - --- PASS: TestHashFuncJSON/MD4 (0.00s) - --- PASS: TestHashFuncJSON/BLAKE2b-512 (0.00s) - --- PASS: TestHashFuncJSON/BLAKE2b-384 (0.00s) - --- PASS: TestHashFuncJSON/BLAKE2b-256 (0.00s) - --- PASS: TestHashFuncJSON/BLAKE2s-256 (0.00s) - --- PASS: TestHashFuncJSON/SHA-512/256 (0.00s) - --- PASS: TestHashFuncJSON/SHA-512/224 (0.00s) - --- PASS: TestHashFuncJSON/SHA3-512 (0.00s) - --- PASS: TestHashFuncJSON/SHA3-384 (0.00s) - --- PASS: TestHashFuncJSON/SHA3-256 (0.00s) - --- PASS: TestHashFuncJSON/SHA3-224 (0.00s) - --- PASS: TestHashFuncJSON/RIPEMD-160 (0.00s) - --- PASS: TestHashFuncJSON/MD5+SHA1 (0.00s) - --- PASS: TestHashFuncJSON/SHA-512 (0.00s) - --- PASS: TestHashFuncJSON/SHA-384 (0.00s) - --- PASS: TestHashFuncJSON/SHA-256 (0.00s) - --- PASS: TestHashFuncJSON/SHA-224 (0.00s) - --- PASS: TestHashFuncJSON/SHA-1 (0.00s) - --- PASS: TestHashFuncJSON/MD5 (0.00s) -=== CONT TestPluginRespJSON/verifySignature +=== CONT TestHashFuncJSON/SHA-512 +=== CONT TestHashFuncJSON/SHA3-384 === CONT TestPluginRespJSON/signMessage -=== CONT TestPluginRespJSON/publicKey === CONT TestPluginRespJSON/createKey === CONT TestPluginRespJSON/supportedAlgorithms +=== CONT TestPluginRespJSON/publicKey +=== CONT TestPluginRespJSON/verifySignature --- PASS: TestPluginRespJSON (0.00s) --- PASS: TestPluginRespJSON/defaultAlgorithm (0.00s) - --- PASS: TestPluginRespJSON/verifySignature (0.00s) --- PASS: TestPluginRespJSON/signMessage (0.00s) - --- PASS: TestPluginRespJSON/publicKey (0.00s) --- PASS: TestPluginRespJSON/createKey (0.00s) --- PASS: TestPluginRespJSON/supportedAlgorithms (0.00s) + --- PASS: TestPluginRespJSON/publicKey (0.00s) + --- PASS: TestPluginRespJSON/verifySignature (0.00s) +=== CONT TestHashFuncJSON/SHA3-256 +=== CONT TestHashFuncJSON/SHA3-224 +=== CONT TestHashFuncJSON/RIPEMD-160 +=== CONT TestHashFuncJSON/BLAKE2b-256 +=== CONT TestHashFuncJSON/BLAKE2b-512 +=== CONT TestHashFuncJSON/BLAKE2b-384 +=== CONT TestHashFuncJSON/BLAKE2s-256 +=== CONT TestHashFuncJSON/SHA-512/256 +--- PASS: TestHashFuncJSON (0.00s) + --- PASS: TestHashFuncJSON/MD4 (0.00s) + --- PASS: TestHashFuncJSON/MD5+SHA1 (0.00s) + --- PASS: TestHashFuncJSON/SHA-512/224 (0.00s) + --- PASS: TestHashFuncJSON/MD5 (0.00s) + --- PASS: TestHashFuncJSON/SHA3-512 (0.00s) + --- PASS: TestHashFuncJSON/SHA-384 (0.00s) + --- PASS: TestHashFuncJSON/SHA-256 (0.00s) + --- PASS: TestHashFuncJSON/SHA-224 (0.00s) + --- PASS: TestHashFuncJSON/SHA-1 (0.00s) + --- PASS: TestHashFuncJSON/SHA-512 (0.00s) + --- PASS: TestHashFuncJSON/SHA3-384 (0.00s) + --- PASS: TestHashFuncJSON/SHA3-256 (0.00s) + --- PASS: TestHashFuncJSON/SHA3-224 (0.00s) + --- PASS: TestHashFuncJSON/RIPEMD-160 (0.00s) + --- PASS: TestHashFuncJSON/BLAKE2b-256 (0.00s) + --- PASS: TestHashFuncJSON/BLAKE2b-512 (0.00s) + --- PASS: TestHashFuncJSON/BLAKE2b-384 (0.00s) + --- PASS: TestHashFuncJSON/BLAKE2s-256 (0.00s) + --- PASS: TestHashFuncJSON/SHA-512/256 (0.00s) +--- PASS: TestPluginArgsJSON (0.00s) + --- PASS: TestPluginArgsJSON/defaultAlgorithm (0.00s) + --- PASS: TestPluginArgsJSON/verifySignature (0.00s) + --- PASS: TestPluginArgsJSON/signMessage (0.00s) + --- PASS: TestPluginArgsJSON/publicKey (0.00s) + --- PASS: TestPluginArgsJSON/createKey (0.00s) + --- PASS: TestPluginArgsJSON/supportedAlgorithms (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/common 0.036s +ok github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/common 0.032s === RUN TestPackRPCOptions === PAUSE TestPackRPCOptions === RUN TestUnpackRPCOptions @@ -3656,7 +3692,7 @@ === CONT TestUnpackRPCOptions --- PASS: TestUnpackRPCOptions (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding 0.024s +ok github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding 0.017s ? github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/handler [no test files] ? github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/internal/signerverifier [no test files] === RUN TestFakeSigner @@ -3664,7 +3700,7 @@ === RUN TestFakeSignerWithPrivateKey --- PASS: TestFakeSignerWithPrivateKey (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/kms/fake 0.021s +ok github.com/sigstore/sigstore/pkg/signature/kms/fake 0.035s ? github.com/sigstore/sigstore/pkg/signature/options [no test files] === RUN TestMarshalCosign === PAUSE TestMarshalCosign @@ -3678,32 +3714,32 @@ === RUN TestMarshalCosign/arbitrary_claims === PAUSE TestMarshalCosign/arbitrary_claims === RUN TestMarshalCosign/custom_identity -=== PAUSE TestMarshalCosign/custom_identity === CONT TestUnmarshalCosign -=== CONT TestMarshalCosign/arbitrary_claims +=== PAUSE TestMarshalCosign/custom_identity +=== CONT TestMarshalCosign/no_claims === RUN TestUnmarshalCosign/no_claims -=== CONT TestMarshalCosign/standard_atomic_signature === PAUSE TestUnmarshalCosign/no_claims -=== CONT TestMarshalCosign/custom_identity === RUN TestUnmarshalCosign/arbitrary_claims === PAUSE TestUnmarshalCosign/arbitrary_claims === RUN TestUnmarshalCosign/unknown_type === PAUSE TestUnmarshalCosign/unknown_type === CONT TestUnmarshalCosign/no_claims -=== CONT TestMarshalCosign/no_claims +=== CONT TestMarshalCosign/custom_identity === CONT TestUnmarshalCosign/unknown_type +=== CONT TestMarshalCosign/arbitrary_claims +=== CONT TestUnmarshalCosign/arbitrary_claims +=== CONT TestMarshalCosign/standard_atomic_signature --- PASS: TestMarshalCosign (0.00s) - --- PASS: TestMarshalCosign/arbitrary_claims (0.00s) - --- PASS: TestMarshalCosign/custom_identity (0.00s) --- PASS: TestMarshalCosign/no_claims (0.00s) + --- PASS: TestMarshalCosign/custom_identity (0.00s) + --- PASS: TestMarshalCosign/arbitrary_claims (0.00s) --- PASS: TestMarshalCosign/standard_atomic_signature (0.00s) -=== CONT TestUnmarshalCosign/arbitrary_claims --- PASS: TestUnmarshalCosign (0.00s) --- PASS: TestUnmarshalCosign/no_claims (0.00s) --- PASS: TestUnmarshalCosign/unknown_type (0.00s) --- PASS: TestUnmarshalCosign/arbitrary_claims (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/signature/payload 0.010s +ok github.com/sigstore/sigstore/pkg/signature/payload 0.016s === RUN TestFromOpenSSH sign_test.go:154: skip TestFromOpenSSH: missing ssh-keygen in PATH --- SKIP: TestFromOpenSSH (0.00s) @@ -3713,17 +3749,17 @@ === RUN TestRoundTrip === RUN TestRoundTrip/rsa === RUN TestRoundTrip/ed25519 ---- PASS: TestRoundTrip (0.10s) - --- PASS: TestRoundTrip/rsa (0.04s) +--- PASS: TestRoundTrip (0.06s) + --- PASS: TestRoundTrip/rsa (0.03s) --- PASS: TestRoundTrip/ed25519 (0.01s) PASS -ok github.com/sigstore/sigstore/pkg/signature/ssh 0.112s +ok github.com/sigstore/sigstore/pkg/signature/ssh 0.078s === RUN TestKeyHandleToSignerECDSA ---- PASS: TestKeyHandleToSignerECDSA (0.07s) +--- PASS: TestKeyHandleToSignerECDSA (0.04s) === RUN TestKeyHandleToSignerED25519 --- PASS: TestKeyHandleToSignerED25519 (0.01s) PASS -ok github.com/sigstore/sigstore/pkg/signature/tink 0.089s +ok github.com/sigstore/sigstore/pkg/signature/tink 0.059s === RUN TestMarshalStatusType --- PASS: TestMarshalStatusType (0.00s) === RUN TestMarshalInvalidStatusType @@ -3745,9 +3781,9 @@ === RUN TestUnmarshalInvalidUsageType --- PASS: TestUnmarshalInvalidUsageType (0.00s) PASS -ok github.com/sigstore/sigstore/pkg/tuf 0.014s +ok github.com/sigstore/sigstore/pkg/tuf 0.022s ? github.com/sigstore/sigstore/test [no test files] - rm -fr -- /tmp/dh-xdg-rundir-jzWxUsic + rm -fr -- /tmp/dh-xdg-rundir-eI5wvgH5 rm -rf /build/reproducible-path/golang-github-sigstore-sigstore-1.9.3/debian/tmp-home make[1]: Leaving directory '/build/reproducible-path/golang-github-sigstore-sigstore-1.9.3' create-stamp debian/debhelper-build-stamp @@ -3777,12 +3813,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/949536/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/2447002 and its subdirectories -I: Current time: Sun Apr 13 02:16:19 -12 2025 -I: pbuilder-time-stamp: 1744553779 +I: removing directory /srv/workspace/pbuilder/949536 and its subdirectories +I: Current time: Sun May 17 10:44:32 +14 2026 +I: pbuilder-time-stamp: 1778964272