Diff of the two buildlogs:
--
--- b1/build.log 2025-03-19 01:32:07.179303603 +0000
+++ b2/build.log 2025-03-19 01:36:15.220139449 +0000
@@ -1,6 +1,6 @@
I: pbuilder: network access will be disabled during build
-I: Current time: Mon Apr 20 19:53:02 -12 2026
-I: pbuilder-time-stamp: 1776757982
+I: Current time: Wed Mar 19 15:32:14 +14 2025
+I: pbuilder-time-stamp: 1742347934
I: Building the build Environment
I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
I: copying local configuration
@@ -23,54 +23,86 @@
dpkg-source: info: unpacking sigstore-go_0.7.0-2.debian.tar.xz
I: Not using root during the build.
I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/74476/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos2-i386.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Mar 19 01:32 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/D02_print_environment starting
I: set
- BUILDDIR='/build/reproducible-path'
- BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
- BUILDUSERNAME='pbuilder1'
- BUILD_ARCH='i386'
- DEBIAN_FRONTEND='noninteractive'
- DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=22 '
- DISTRIBUTION='unstable'
- HOME='/root'
- HOST_ARCH='i386'
+ BASH=/bin/sh
+ BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+ BASH_ALIASES=()
+ BASH_ARGC=()
+ BASH_ARGV=()
+ BASH_CMDS=()
+ BASH_LINENO=([0]="12" [1]="0")
+ BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+ BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+ BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="i686-pc-linux-gnu")
+ BASH_VERSION='5.2.37(1)-release'
+ BUILDDIR=/build/reproducible-path
+ BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+ BUILDUSERNAME=pbuilder2
+ BUILD_ARCH=i386
+ DEBIAN_FRONTEND=noninteractive
+ DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=10 '
+ DIRSTACK=()
+ DISTRIBUTION=unstable
+ EUID=0
+ FUNCNAME=([0]="Echo" [1]="main")
+ GROUPS=()
+ HOME=/root
+ HOSTNAME=i-capture-the-hostname
+ HOSTTYPE=i686
+ HOST_ARCH=i386
IFS='
'
- INVOCATION_ID='be9b2282b5a745d9a3136a4f5474476b'
- LANG='C'
- LANGUAGE='en_US:en'
- LC_ALL='C'
- LD_LIBRARY_PATH='/usr/lib/libeatmydata'
- LD_PRELOAD='libeatmydata.so'
- MAIL='/var/mail/root'
- OPTIND='1'
- PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
- PBCURRENTCOMMANDLINEOPERATION='build'
- PBUILDER_OPERATION='build'
- PBUILDER_PKGDATADIR='/usr/share/pbuilder'
- PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
- PBUILDER_SYSCONFDIR='/etc'
- PPID='74476'
- PS1='# '
- PS2='> '
+ INVOCATION_ID=9a7c679062704879ac613cb200eb55b1
+ LANG=C
+ LANGUAGE=de_CH:de
+ LC_ALL=C
+ LD_LIBRARY_PATH=/usr/lib/libeatmydata
+ LD_PRELOAD=libeatmydata.so
+ MACHTYPE=i686-pc-linux-gnu
+ MAIL=/var/mail/root
+ OPTERR=1
+ OPTIND=1
+ OSTYPE=linux-gnu
+ PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+ PBCURRENTCOMMANDLINEOPERATION=build
+ PBUILDER_OPERATION=build
+ PBUILDER_PKGDATADIR=/usr/share/pbuilder
+ PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+ PBUILDER_SYSCONFDIR=/etc
+ PIPESTATUS=([0]="0")
+ POSIXLY_CORRECT=y
+ PPID=4266
PS4='+ '
- PWD='/'
- SHELL='/bin/bash'
- SHLVL='2'
- SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.hUfZnHNZ/pbuilderrc_kGDy --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.hUfZnHNZ/b1 --logfile b1/build.log sigstore-go_0.7.0-2.dsc'
- SUDO_GID='112'
- SUDO_UID='107'
- SUDO_USER='jenkins'
- TERM='unknown'
- TZ='/usr/share/zoneinfo/Etc/GMT+12'
- USER='root'
- _='/usr/bin/systemd-run'
- http_proxy='http://213.165.73.152:3128'
+ PWD=/
+ SHELL=/bin/bash
+ SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+ SHLVL=3
+ SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.hUfZnHNZ/pbuilderrc_c9Xg --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.hUfZnHNZ/b2 --logfile b2/build.log sigstore-go_0.7.0-2.dsc'
+ SUDO_GID=112
+ SUDO_UID=107
+ SUDO_USER=jenkins
+ TERM=unknown
+ TZ=/usr/share/zoneinfo/Etc/GMT-14
+ UID=0
+ USER=root
+ _='I: set'
+ http_proxy=http://46.16.76.132:3128
I: uname -a
- Linux ionos16-i386 6.1.0-32-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.129-1 (2025-03-06) x86_64 GNU/Linux
+ Linux i-capture-the-hostname 6.1.0-32-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.129-1 (2025-03-06) x86_64 GNU/Linux
I: ls -l /bin
- lrwxrwxrwx 1 root root 7 Mar 4 2025 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/74476/tmp/hooks/D02_print_environment finished
+ lrwxrwxrwx 1 root root 7 Mar 4 11:20 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/D02_print_environment finished
-> Attempting to satisfy build-dependencies
-> Creating pbuilder-satisfydepends-dummy package
Package: pbuilder-satisfydepends-dummy
@@ -656,7 +688,7 @@
Get: 508 http://deb.debian.org/debian unstable/main i386 golang-github-urfave-negroni-dev all 0.2.0-3 [8752 B]
Get: 509 http://deb.debian.org/debian unstable/main i386 golang-github-sigstore-timestamp-authority-dev all 1.2.3-2 [75.8 kB]
Get: 510 http://deb.debian.org/debian unstable/main i386 help2man i386 1.49.3 [198 kB]
-Fetched 238 MB in 4s (55.1 MB/s)
+Fetched 238 MB in 5s (45.4 MB/s)
Preconfiguring packages ...
Selecting previously unselected package golang-golang-x-sys-dev.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19770 files and directories currently installed.)
@@ -2289,8 +2321,8 @@
Setting up tzdata (2025a-2) ...
Current default time zone: 'Etc/UTC'
-Local time is now: Tue Apr 21 07:53:55 UTC 2026.
-Universal Time is now: Tue Apr 21 07:53:55 UTC 2026.
+Local time is now: Wed Mar 19 01:33:56 UTC 2025.
+Universal Time is now: Wed Mar 19 01:33:56 UTC 2025.
Run 'dpkg-reconfigure tzdata' if you wish to change it.
Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ...
@@ -2717,7 +2749,11 @@
Building tag database...
-> Finished parsing the build-deps
I: Building the package
-I: Running cd /build/reproducible-path/sigstore-go-0.7.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../sigstore-go_0.7.0-2_source.changes
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/sigstore-go-0.7.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../sigstore-go_0.7.0-2_source.changes
dpkg-buildpackage: info: source package sigstore-go
dpkg-buildpackage: info: source version 0.7.0-2
dpkg-buildpackage: info: source distribution unstable
@@ -2735,468 +2771,457 @@
dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
- cd _build && go install -trimpath -v -p 22 github.com/sigstore/sigstore-go/cmd/conformance github.com/sigstore/sigstore-go/cmd/sigstore-go github.com/sigstore/sigstore-go/examples/oci-image-verification github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/sigstore-go/pkg/root github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/ca github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/tuf github.com/sigstore/sigstore-go/pkg/util github.com/sigstore/sigstore-go/pkg/verify
-internal/itoa
-internal/profilerecord
-internal/unsafeheader
-cmp
-internal/goos
-internal/byteorder
-internal/goarch
-unicode/utf16
+ cd _build && go install -trimpath -v -p 10 github.com/sigstore/sigstore-go/cmd/conformance github.com/sigstore/sigstore-go/cmd/sigstore-go github.com/sigstore/sigstore-go/examples/oci-image-verification github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/sigstore-go/pkg/root github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/ca github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/tuf github.com/sigstore/sigstore-go/pkg/util github.com/sigstore/sigstore-go/pkg/verify
internal/coverage/rtcov
-unicode/utf8
+internal/goarch
+internal/byteorder
internal/godebugs
-internal/runtime/atomic
-encoding
-google.golang.org/protobuf/internal/flags
internal/goexperiment
-internal/cpu
-crypto/internal/fips140/alias
-crypto/internal/boring/sig
+internal/unsafeheader
+internal/goos
+internal/profilerecord
+internal/asan
+internal/msan
internal/runtime/syscall
+internal/cpu
+cmp
+internal/runtime/atomic
+internal/itoa
+internal/abi
+internal/chacha8rand
+internal/runtime/math
+internal/runtime/sys
math/bits
+unicode/utf8
+sync/atomic
+google.golang.org/protobuf/internal/flags
unicode
-internal/nettrace
+unicode/utf16
+encoding
+google.golang.org/protobuf/internal/set
+crypto/internal/fips140/alias
+internal/bytealg
+math
crypto/internal/fips140deps/byteorder
-internal/asan
+crypto/internal/fips140deps/cpu
+crypto/internal/boring/sig
vendor/golang.org/x/crypto/cryptobyte/asn1
-internal/msan
-sync/atomic
+internal/nettrace
+internal/runtime/exithook
golang.org/x/crypto/internal/alias
-internal/chacha8rand
-internal/runtime/math
-internal/abi
log/internal
+golang.org/x/crypto/salsa20/salsa
container/list
vendor/golang.org/x/crypto/internal/alias
-internal/runtime/sys
go.mongodb.org/mongo-driver/bson/bsonoptions
go.mongodb.org/mongo-driver/bson/bsontype
github.com/sigstore/rekor/pkg/pki/identity
image/color
golang.org/x/exp/constraints
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common
+github.com/pelletier/go-toml/v2/internal/characters
+internal/stringslite
log/slog/internal
go.opentelemetry.io/otel/metric/embedded
go.opentelemetry.io/otel/trace/embedded
+golang.org/x/exp/slices
github.com/transparency-dev/merkle
golang.org/x/crypto/cryptobyte/asn1
github.com/google/go-containerregistry/pkg/v1/types
github.com/google/go-containerregistry/pkg/compression
github.com/docker/cli/cli/config/types
-github.com/pelletier/go-toml/v2/internal/characters
-google.golang.org/protobuf/internal/set
-golang.org/x/crypto/salsa20/salsa
-golang.org/x/exp/slices
-crypto/internal/fips140deps/cpu
-internal/bytealg
-math
-internal/runtime/exithook
-internal/stringslite
internal/race
internal/sync
internal/runtime/maps
-github.com/klauspost/compress
go.opentelemetry.io/otel/internal
+github.com/klauspost/compress
runtime
+internal/reflectlite
iter
+sync
crypto/internal/fips140/subtle
weak
k8s.io/klog/internal/dbg
-internal/reflectlite
-sync
-maps
slices
+maps
crypto/subtle
-errors
-sort
-google.golang.org/protobuf/internal/pragma
internal/testlog
+google.golang.org/protobuf/internal/pragma
internal/bisect
+errors
+sort
internal/singleflight
-go.uber.org/zap/internal/pool
-github.com/josharian/intern
-log/slog/internal/buffer
unique
+github.com/josharian/intern
+go.uber.org/zap/internal/pool
github.com/spf13/viper/internal/encoding
runtime/cgo
+log/slog/internal/buffer
internal/oserror
-path
io
+internal/godebug
+path
+strconv
+vendor/golang.org/x/net/dns/dnsmessage
+golang.org/x/crypto/cast5
math/rand/v2
+syscall
+strings
github.com/sassoftware/relic/signers/sigerrors
github.com/hashicorp/hcl/hcl/strconv
-golang.org/x/crypto/cast5
-strconv
-vendor/golang.org/x/net/dns/dnsmessage
-internal/godebug
+bytes
hash
+crypto/internal/fips140deps/godebug
crypto/internal/randutil
-bytes
-strings
-syscall
+math/rand
hash/fnv
-github.com/google/go-containerregistry/internal/and
-internal/saferio
-golang.org/x/mod/semver
hash/crc32
+internal/saferio
hash/adler32
-crypto/internal/fips140deps/godebug
-math/rand
+golang.org/x/mod/semver
+reflect
crypto
net/netip
golang.org/x/crypto/blowfish
golang.org/x/crypto/openpgp/errors
-reflect
+github.com/google/go-containerregistry/internal/and
golang.org/x/crypto/openpgp/s2k
-vendor/golang.org/x/text/transform
-golang.org/x/text/transform
crypto/internal/fips140
crypto/internal/impl
-net/http/internal/ascii
-k8s.io/klog/internal/severity
-net/http/internal/testcert
-bufio
regexp/syntax
-html
-golang.org/x/text/runes
+bufio
+vendor/golang.org/x/text/transform
+net/http/internal/ascii
crypto/internal/fips140/sha256
crypto/internal/fips140/sha3
-crypto/tls/internal/fips140tls
crypto/internal/fips140/sha512
+crypto/tls/internal/fips140tls
+html
+golang.org/x/text/transform
compress/bzip2
image
+golang.org/x/text/runes
crypto/internal/fips140/hmac
crypto/sha3
crypto/internal/fips140/check
-crypto/internal/fips140hash
-crypto/internal/fips140/hkdf
+k8s.io/klog/internal/severity
+net/http/internal/testcert
+crypto/internal/fips140/aes
crypto/internal/fips140/edwards25519/field
crypto/internal/fips140/bigmod
-crypto/internal/fips140/tls12
-crypto/internal/fips140/aes
crypto/internal/fips140/nistec/fiat
-crypto/internal/fips140/tls13
-regexp
-crypto/internal/fips140/edwards25519
-image/internal/imageutil
+time
internal/syscall/execenv
internal/syscall/unix
-time
+crypto/internal/fips140hash
+crypto/internal/fips140/edwards25519
+crypto/internal/fips140/hkdf
+regexp
+crypto/internal/fips140/tls12
+crypto/internal/fips140/tls13
+image/internal/imageutil
image/jpeg
-github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1
+go.uber.org/zap/buffer
+internal/poll
context
-k8s.io/klog/internal/clock
+github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1
+github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2
io/fs
-go.uber.org/zap/buffer
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1
-github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2
+k8s.io/klog/internal/clock
github.com/google/go-containerregistry/internal/retry/wait
-internal/poll
go.uber.org/zap/internal/bufferpool
go.uber.org/zap/internal/stacktrace
-go.opentelemetry.io/otel/internal/baggage
-github.com/spf13/afero/internal/common
-embed
internal/filepathlite
+embed
+github.com/spf13/afero/internal/common
+go.opentelemetry.io/otel/internal/baggage
+google.golang.org/protobuf/internal/editiondefaults
+os
internal/fmtsort
go.opentelemetry.io/otel/internal/attribute
encoding/binary
-google.golang.org/protobuf/internal/editiondefaults
-os
crypto/internal/fips140/nistec
-encoding/base64
-vendor/golang.org/x/crypto/internal/poly1305
-github.com/klauspost/compress/internal/le
golang.org/x/crypto/internal/poly1305
-github.com/cespare/xxhash
golang.org/x/crypto/blake2b
+github.com/klauspost/compress/internal/le
+encoding/base64
github.com/klauspost/compress/internal/snapref
+github.com/cespare/xxhash
+vendor/golang.org/x/crypto/internal/poly1305
golang.org/x/sys/unix
golang.org/x/crypto/nacl/secretbox
encoding/pem
golang.org/x/crypto/openpgp/armor
google.golang.org/protobuf/internal/detrand
-io/ioutil
crypto/internal/sysrand
-k8s.io/klog/internal/buffer
-internal/sysinfo
-golang.org/x/sys/cpu
fmt
-go.uber.org/zap/internal/exit
path/filepath
+io/ioutil
+internal/sysinfo
+golang.org/x/sys/cpu
net
+go.uber.org/zap/internal/exit
+k8s.io/klog/internal/buffer
crypto/internal/entropy
crypto/internal/fips140/drbg
-golang.org/x/crypto/sha3
+crypto/internal/fips140/aes/gcm
crypto/internal/fips140only
crypto/internal/fips140/ed25519
-crypto/internal/fips140/aes/gcm
crypto/internal/fips140/rsa
+golang.org/x/crypto/sha3
crypto/internal/fips140/mlkem
-github.com/shibumi/go-pathspec
-os/exec
-github.com/spf13/afero/mem
-crypto/rc4
crypto/md5
-crypto/internal/fips140/ecdh
-crypto/internal/fips140/ecdsa
+crypto/rc4
crypto/cipher
-github.com/mitchellh/go-homedir
-github.com/skratchdot/open-golang/open
-golang.org/x/crypto/chacha20
-crypto/des
+os/exec
crypto/internal/boring
+crypto/des
+golang.org/x/crypto/chacha20
vendor/golang.org/x/crypto/chacha20
+github.com/shibumi/go-pathspec
encoding/hex
google.golang.org/protobuf/internal/errors
-google.golang.org/protobuf/internal/version
go/token
-log
-net/url
-runtime/debug
-vendor/golang.org/x/net/http2/hpack
compress/flate
-github.com/opencontainers/go-digest
encoding/json
-mime/quotedprintable
-mime
-vendor/golang.org/x/text/unicode/norm
+google.golang.org/protobuf/encoding/protowire
+google.golang.org/protobuf/internal/version
crypto/aes
+crypto/internal/fips140/ecdh
math/big
-crypto/ecdh
crypto/sha512
-google.golang.org/protobuf/encoding/protowire
-crypto/sha256
+crypto/internal/fips140/ecdsa
+google.golang.org/protobuf/reflect/protoreflect
crypto/sha1
+crypto/sha256
+crypto/ecdh
+net/url
crypto/hmac
+compress/gzip
+golang.org/x/crypto/curve25519
+golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
+log
+runtime/debug
+golang.org/x/crypto/pbkdf2
+golang.org/x/term
+golang.org/x/crypto/scrypt
+github.com/opencontainers/go-digest
+vendor/golang.org/x/crypto/chacha20poly1305
+vendor/golang.org/x/text/unicode/norm
+vendor/golang.org/x/net/http2/hpack
+mime
+vendor/golang.org/x/text/unicode/bidi
+github.com/sigstore/sigstore-go/pkg/util
+mime/quotedprintable
net/http/internal
+google.golang.org/protobuf/internal/descfmt
+google.golang.org/protobuf/internal/descopts
+google.golang.org/protobuf/internal/strs
+google.golang.org/protobuf/internal/encoding/messageset
+google.golang.org/protobuf/internal/genid
+google.golang.org/protobuf/internal/order
+google.golang.org/protobuf/internal/encoding/text
+google.golang.org/protobuf/reflect/protoregistry
+google.golang.org/protobuf/runtime/protoiface
+google.golang.org/protobuf/internal/encoding/json
+vendor/golang.org/x/text/secure/bidirule
+google.golang.org/protobuf/internal/protolazy
+github.com/secure-systems-lab/go-securesystemslib/cjson
+crypto/dsa
+crypto/elliptic
+crypto/internal/boring/bbig
+google.golang.org/protobuf/proto
+encoding/asn1
+crypto/rand
flag
-vendor/golang.org/x/crypto/chacha20poly1305
-golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
runtime/trace
+google.golang.org/protobuf/internal/encoding/defval
github.com/pkg/errors
-golang.org/x/crypto/pbkdf2
+crypto/ed25519
+crypto/rsa
+github.com/secure-systems-lab/go-securesystemslib/encrypted
+crypto/internal/hpke
github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer
-vendor/golang.org/x/text/unicode/bidi
encoding/csv
+vendor/golang.org/x/net/idna
encoding/xml
database/sql/driver
-google.golang.org/protobuf/reflect/protoreflect
+crypto/x509/pkix
+testing
+vendor/golang.org/x/crypto/cryptobyte
+github.com/sigstore/sigstore/pkg/signature/options
+go.mongodb.org/mongo-driver/bson/primitive
+github.com/mailru/easyjson/jlexer
+google.golang.org/protobuf/internal/filedesc
+google.golang.org/protobuf/encoding/prototext
+github.com/oklog/ulid
gopkg.in/yaml.v3
-golang.org/x/crypto/curve25519
-github.com/sigstore/sigstore-go/pkg/util
+crypto/ecdsa
+go.mongodb.org/mongo-driver/x/bsonx/bsoncore
golang.org/x/sync/errgroup
encoding/gob
-golang.org/x/crypto/scrypt
github.com/go-openapi/analysis/internal/debug
+github.com/go-openapi/jsonreference/internal
+github.com/blang/semver
+internal/profile
text/tabwriter
+go.uber.org/atomic
+runtime/pprof
go.uber.org/zap/internal/color
+golang.org/x/crypto/ed25519
+github.com/jedisct1/go-minisign
+compress/zlib
+go.uber.org/multierr
+golang.org/x/crypto/openpgp/elgamal
+go.uber.org/zap/zapcore
+golang.org/x/crypto/openpgp/packet
+go.mongodb.org/mongo-driver/bson/bsonrw
text/template/parse
-github.com/go-openapi/jsonreference/internal
+google.golang.org/protobuf/internal/encoding/tag
+google.golang.org/protobuf/encoding/protojson
+golang.org/x/mod/sumdb/note
+google.golang.org/protobuf/internal/impl
+github.com/fsnotify/fsnotify/internal
+github.com/spf13/afero/mem
+text/template
+github.com/fsnotify/fsnotify
golang.org/x/text/unicode/norm
github.com/spf13/jwalterweatherman
+golang.org/x/crypto/openpgp
github.com/subosito/gotenv
+go.uber.org/zap/internal
github.com/hashicorp/hcl/hcl/token
gopkg.in/ini.v1
-github.com/pelletier/go-toml/v2/internal/danger
-github.com/go-openapi/runtime/logger
+github.com/spf13/viper/internal/encoding/json
github.com/hashicorp/hcl/hcl/ast
-github.com/oklog/ulid
github.com/hashicorp/hcl/hcl/scanner
-compress/gzip
-compress/zlib
github.com/hashicorp/hcl/json/token
-github.com/pelletier/go-toml/v2/unstable
+github.com/pelletier/go-toml/v2/internal/danger
github.com/hashicorp/hcl/json/scanner
-testing
-github.com/opentracing/opentracing-go/log
-internal/profile
-runtime/pprof
-vendor/golang.org/x/text/secure/bidirule
github.com/hashicorp/hcl/hcl/parser
-go.opentelemetry.io/otel/baggage
-github.com/transparency-dev/merkle/compact
+github.com/pelletier/go-toml/v2/unstable
+github.com/spf13/viper/internal/encoding/yaml
github.com/hashicorp/hcl/json/parser
-github.com/transparency-dev/merkle/proof
-github.com/transparency-dev/merkle/rfc6962
-golang.org/x/term
-github.com/fsnotify/fsnotify/internal
+github.com/go-openapi/runtime/logger
github.com/hashicorp/hcl/hcl/printer
-os/user
+go.mongodb.org/mongo-driver/bson/bsoncodec
+github.com/opentracing/opentracing-go/log
github.com/hashicorp/hcl
-gopkg.in/square/go-jose.v2/json
-github.com/go-jose/go-jose/v3/json
-google.golang.org/protobuf/internal/descfmt
-vendor/golang.org/x/net/idna
-google.golang.org/protobuf/internal/descopts
-google.golang.org/protobuf/internal/strs
-google.golang.org/protobuf/internal/encoding/messageset
-google.golang.org/protobuf/internal/genid
-google.golang.org/protobuf/internal/encoding/text
-google.golang.org/protobuf/internal/order
-google.golang.org/protobuf/reflect/protoregistry
-google.golang.org/protobuf/runtime/protoiface
-google.golang.org/protobuf/internal/encoding/json
-text/template
-github.com/fsnotify/fsnotify
-google.golang.org/protobuf/internal/protolazy
-github.com/secure-systems-lab/go-securesystemslib/cjson
-github.com/mailru/easyjson/jlexer
-github.com/blang/semver
-go.uber.org/atomic
-github.com/spf13/viper/internal/encoding/hcl
-github.com/spf13/viper/internal/encoding/json
-google.golang.org/protobuf/proto
-github.com/pelletier/go-toml/v2/internal/tracker
log/slog
go.opentelemetry.io/otel/attribute
+github.com/pelletier/go-toml/v2/internal/tracker
+html/template
go.opentelemetry.io/otel/codes
-github.com/google/go-containerregistry/internal/gzip
-google.golang.org/protobuf/internal/encoding/defval
-github.com/google/go-containerregistry/pkg/v1
-github.com/containerd/stargz-snapshotter/estargz/errorutil
-github.com/klauspost/compress/fse
-github.com/google/go-containerregistry/pkg/logs
-github.com/opencontainers/image-spec/specs-go
-crypto/dsa
-crypto/elliptic
-crypto/internal/boring/bbig
-crypto/rand
-encoding/asn1
+go.opentelemetry.io/otel/baggage
+github.com/transparency-dev/merkle/compact
+github.com/spf13/viper/internal/encoding/hcl
github.com/pelletier/go-toml/v2
+github.com/transparency-dev/merkle/rfc6962
+github.com/transparency-dev/merkle/proof
github.com/google/certificate-transparency-go/asn1
-go.uber.org/multierr
-github.com/opencontainers/image-spec/specs-go/v1
-github.com/docker/docker-credential-helpers/credentials
-golang.org/x/sys/execabs
-github.com/sirupsen/logrus
-crypto/ed25519
-crypto/rsa
-github.com/secure-systems-lab/go-securesystemslib/encrypted
-crypto/internal/hpke
-go.mongodb.org/mongo-driver/bson/primitive
-go.uber.org/zap/zapcore
-golang.org/x/crypto/ed25519
-golang.org/x/crypto/openpgp/elgamal
-golang.org/x/mod/sumdb/note
+golang.org/x/crypto/cryptobyte
+os/user
go.opentelemetry.io/otel/metric
+github.com/spf13/cast
go.opentelemetry.io/otel/trace
-github.com/jedisct1/go-minisign
go.opentelemetry.io/otel/semconv/v1.17.0
-github.com/segmentio/ksuid
-github.com/klauspost/compress/huff0
-github.com/google/go-containerregistry/pkg/v1/match
-google.golang.org/protobuf/internal/filedesc
-github.com/docker/docker-credential-helpers/client
-google.golang.org/protobuf/encoding/prototext
-github.com/google/go-containerregistry/pkg/legacy
-github.com/sigstore/sigstore/pkg/signature/options
-go.mongodb.org/mongo-driver/x/bsonx/bsoncore
-github.com/spf13/viper/internal/encoding/yaml
-github.com/google/go-containerregistry/pkg/v1/stream
-github.com/google/go-containerregistry/internal/redact
-github.com/sigstore/sigstore/pkg/oauth
-html/template
-github.com/google/go-containerregistry/internal/retry
-vendor/golang.org/x/crypto/cryptobyte
-crypto/x509/pkix
-github.com/google/certificate-transparency-go/x509/pkix
-golang.org/x/crypto/cryptobyte
-github.com/docker/cli/cli/config/credentials
-github.com/google/go-containerregistry/internal/verify
-github.com/davecgh/go-spew/spew
-github.com/pmezard/go-difflib/difflib
github.com/go-logr/logr
-k8s.io/klog/internal/sloghandler
-github.com/stretchr/testify/assert/yaml
-github.com/spf13/viper/internal/encoding/toml
-github.com/go-logr/logr/funcr
-k8s.io/klog/internal/serialize
-github.com/docker/cli/cli/config/configfile
-crypto/ecdsa
-github.com/klauspost/compress/zstd
-go.uber.org/zap/internal
-go.mongodb.org/mongo-driver/bson/bsonrw
-github.com/go-logr/stdr
-github.com/spf13/cast
-github.com/docker/docker/pkg/homedir
-archive/tar
-github.com/vbatts/tar-split/archive/tar
-k8s.io/klog
-github.com/docker/cli/cli/config
-golang.org/x/crypto/openpgp/packet
-gopkg.in/square/go-jose.v2/cipher
-github.com/go-jose/go-jose/v3/cipher
github.com/google/certificate-transparency-go/tls
-google.golang.org/protobuf/internal/encoding/tag
-google.golang.org/protobuf/encoding/protojson
-github.com/spf13/viper/internal/encoding/dotenv
-github.com/spf13/viper/internal/encoding/ini
-google.golang.org/protobuf/internal/impl
-golang.org/x/crypto/openpgp
-go.mongodb.org/mongo-driver/bson/bsoncodec
-github.com/google/go-containerregistry/internal/zstd
-github.com/containerd/stargz-snapshotter/estargz
-vendor/golang.org/x/net/http/httpproxy
-github.com/mailru/easyjson/buffer
+crypto/x509
+github.com/google/go-containerregistry/pkg/name
net/textproto
+vendor/golang.org/x/net/http/httpproxy
github.com/google/uuid
github.com/mitchellh/mapstructure
-github.com/google/go-containerregistry/pkg/name
-github.com/google/go-containerregistry/internal/compression
-crypto/x509
-github.com/google/certificate-transparency-go/x509
-github.com/spf13/pflag
-github.com/google/go-containerregistry/pkg/v1/partial
+github.com/mailru/easyjson/buffer
+github.com/sigstore/sigstore/pkg/signature/payload
github.com/mailru/easyjson/jwriter
+github.com/spf13/viper/internal/encoding/dotenv
+github.com/spf13/pflag
vendor/golang.org/x/net/http/httpguts
-net/mail
mime/multipart
-github.com/sigstore/sigstore/pkg/signature/payload
-github.com/google/go-containerregistry/pkg/authn
-github.com/google/go-containerregistry/pkg/v1/empty
-go.mongodb.org/mongo-driver/bson
-github.com/google/certificate-transparency-go
-github.com/spf13/cobra
+net/mail
+github.com/spf13/viper/internal/encoding/ini
+github.com/spf13/viper/internal/encoding/toml
+github.com/go-logr/logr/funcr
+github.com/google/certificate-transparency-go/x509/pkix
+k8s.io/klog/internal/serialize
+k8s.io/klog/internal/sloghandler
+github.com/google/certificate-transparency-go/x509
+gopkg.in/square/go-jose.v2/cipher
+gopkg.in/square/go-jose.v2/json
+github.com/go-jose/go-jose/v3/cipher
+github.com/go-jose/go-jose/v3/json
+github.com/segmentio/ksuid
+github.com/go-logr/stdr
+github.com/sigstore/sigstore/pkg/oauth
github.com/sigstore/sigstore/pkg/cryptoutils
+golang.org/x/crypto/ssh
crypto/tls
-github.com/secure-systems-lab/go-securesystemslib/signerverifier
github.com/digitorus/pkcs7
-github.com/asaskevich/govalidator
-gopkg.in/square/go-jose.v2
-golang.org/x/crypto/ssh
-github.com/go-jose/go-jose/v3
-github.com/google/certificate-transparency-go/gossip/minimal/x509ext
-github.com/sigstore/timestamp-authority/pkg/x509
github.com/sigstore/sigstore/pkg/signature
-github.com/sigstore/sigstore-go/pkg/fulcio/certificate
+github.com/asaskevich/govalidator
+go.mongodb.org/mongo-driver/bson
github.com/digitorus/timestamp
+github.com/spf13/cobra
+github.com/secure-systems-lab/go-securesystemslib/signerverifier
+github.com/sigstore/timestamp-authority/pkg/verification
+k8s.io/klog
github.com/theupdateframework/go-tuf/metadata
github.com/sigstore/rekor/pkg/pki/minisign
-github.com/sigstore/timestamp-authority/pkg/verification
-github.com/google/go-containerregistry/internal/estargz
-github.com/google/go-containerregistry/pkg/v1/tarball
+github.com/google/certificate-transparency-go
github.com/sigstore/rekor/pkg/pki/x509
+github.com/sigstore/sigstore-go/pkg/fulcio/certificate
+gopkg.in/square/go-jose.v2
+github.com/go-jose/go-jose/v3
+github.com/skratchdot/open-golang/open
+archive/tar
+github.com/google/go-containerregistry/internal/gzip
+github.com/google/go-containerregistry/pkg/v1
+github.com/google/certificate-transparency-go/gossip/minimal/x509ext
google.golang.org/protobuf/internal/filetype
-github.com/google/go-containerregistry/internal/windows
-github.com/google/go-containerregistry/pkg/legacy/tarball
-github.com/google/go-containerregistry/pkg/v1/mutate
+github.com/containerd/stargz-snapshotter/estargz/errorutil
+github.com/klauspost/compress/fse
+github.com/vbatts/tar-split/archive/tar
google.golang.org/protobuf/runtime/protoimpl
github.com/theupdateframework/go-tuf/metadata/trustedmetadata
-github.com/sigstore/protobuf-specs/gen/pb-go/dsse
+github.com/google/go-containerregistry/pkg/logs
+github.com/opencontainers/image-spec/specs-go
google.golang.org/protobuf/types/known/timestamppb
-google.golang.org/protobuf/types/known/structpb
google.golang.org/protobuf/types/descriptorpb
-github.com/google/go-containerregistry/pkg/v1/layout
+github.com/sigstore/protobuf-specs/gen/pb-go/dsse
+google.golang.org/protobuf/types/known/structpb
github.com/google/certificate-transparency-go/client/configpb
-github.com/in-toto/attestation/go/v1
+github.com/klauspost/compress/huff0
+github.com/docker/docker-credential-helpers/credentials
+github.com/opencontainers/image-spec/specs-go/v1
+golang.org/x/sys/execabs
+github.com/sirupsen/logrus
+github.com/google/go-containerregistry/pkg/v1/match
+github.com/docker/docker/pkg/homedir
github.com/secure-systems-lab/go-securesystemslib/dsse
-github.com/sigstore/sigstore/pkg/signature/dsse
+github.com/in-toto/attestation/go/v1
+github.com/mitchellh/go-homedir
+github.com/docker/docker-credential-helpers/client
+github.com/google/go-containerregistry/pkg/legacy
+github.com/google/go-containerregistry/pkg/v1/stream
+github.com/google/go-containerregistry/internal/redact
+github.com/google/go-containerregistry/internal/retry
github.com/in-toto/in-toto-golang/in_toto
+github.com/sigstore/sigstore/pkg/signature/dsse
+github.com/google/go-containerregistry/internal/verify
+github.com/sigstore/timestamp-authority/pkg/x509
+github.com/docker/cli/cli/config/credentials
+github.com/davecgh/go-spew/spew
+github.com/pmezard/go-difflib/difflib
+github.com/stretchr/testify/assert/yaml
+github.com/klauspost/compress/zstd
google.golang.org/genproto/googleapis/api/annotations
+github.com/docker/cli/cli/config/configfile
github.com/sigstore/protobuf-specs/gen/pb-go/common/v1
+github.com/docker/cli/cli/config
+github.com/google/go-containerregistry/pkg/authn
github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1
github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1
net/http/httptrace
@@ -3205,89 +3230,100 @@
net/http
github.com/sassoftware/relic/lib/pkcs7
github.com/sigstore/rekor/pkg/pki/pkcs7
+github.com/containerd/stargz-snapshotter/estargz
+github.com/google/go-containerregistry/internal/zstd
+github.com/google/go-containerregistry/internal/compression
+github.com/google/go-containerregistry/pkg/v1/partial
+github.com/google/go-containerregistry/pkg/v1/empty
+github.com/google/go-containerregistry/internal/estargz
+github.com/google/go-containerregistry/pkg/v1/tarball
+github.com/google/go-containerregistry/internal/windows
+github.com/google/go-containerregistry/pkg/legacy/tarball
+github.com/google/go-containerregistry/pkg/v1/mutate
+github.com/google/go-containerregistry/pkg/v1/layout
github.com/theupdateframework/go-tuf/metadata/fetcher
-github.com/sigstore/rekor/pkg/pki/pgp
-golang.org/x/net/context/ctxhttp
-go.opentelemetry.io/otel/semconv/internal/v2
-net/http/httputil
-net/http/pprof
expvar
-go.opentelemetry.io/otel/propagation
github.com/go-openapi/errors
-github.com/hashicorp/go-cleanhttp
-github.com/go-openapi/runtime/middleware/denco
-github.com/sigstore/rekor/pkg/pki/ssh
-github.com/go-openapi/swag
-github.com/go-openapi/runtime/middleware/header
-github.com/opentracing/opentracing-go
-github.com/sigstore/rekor/pkg/util
github.com/go-chi/chi
-github.com/google/certificate-transparency-go/x509util
-github.com/magiconair/properties
-golang.org/x/oauth2/internal
-github.com/spf13/afero
+github.com/sigstore/rekor/pkg/pki/pgp
+net/http/pprof
go.uber.org/zap
-github.com/google/certificate-transparency-go/jsonclient
+github.com/go-openapi/swag
+github.com/sigstore/rekor/pkg/pki/ssh
+github.com/sigstore/rekor/pkg/util
github.com/theupdateframework/go-tuf/metadata/config
-github.com/docker/distribution/registry/client/auth/challenge
-github.com/hashicorp/go-retryablehttp
-net/http/httptest
github.com/theupdateframework/go-tuf/metadata/updater
-github.com/opentracing/opentracing-go/ext
-github.com/sigstore/rekor/pkg/pki
-go.opentelemetry.io/otel/internal/global
-golang.org/x/oauth2
-go.opentelemetry.io/otel/semconv/v1.17.0/httpconv
+github.com/spf13/afero
github.com/go-openapi/strfmt
-github.com/google/certificate-transparency-go/client
-github.com/google/go-containerregistry/pkg/v1/remote/transport
-github.com/spf13/viper/internal/encoding/javaproperties
-github.com/google/certificate-transparency-go/loglist3
-github.com/stretchr/testify/assert
-github.com/coreos/go-oidc/v3/oidc
+github.com/sigstore/rekor/pkg/pki
+github.com/magiconair/properties
+github.com/go-openapi/runtime/middleware/denco
+github.com/go-openapi/runtime/middleware/header
+github.com/opentracing/opentracing-go
+go.opentelemetry.io/otel/propagation
github.com/go-chi/chi/middleware
+go.opentelemetry.io/otel/semconv/internal/v2
+github.com/opentracing/opentracing-go/ext
github.com/sigstore/sigstore-go/pkg/tuf
-github.com/google/certificate-transparency-go/ctutil
-go.opentelemetry.io/otel
-github.com/google/go-containerregistry/pkg/v1/remote
-github.com/sigstore/sigstore/pkg/oauthflow
+net/http/httputil
+go.opentelemetry.io/otel/internal/global
+github.com/spf13/viper/internal/encoding/javaproperties
+go.opentelemetry.io/otel/semconv/v1.17.0/httpconv
+golang.org/x/net/context/ctxhttp
github.com/go-openapi/jsonpointer
-github.com/spf13/viper
-github.com/go-openapi/jsonreference
+github.com/google/certificate-transparency-go/x509util
+github.com/google/certificate-transparency-go/jsonclient
+github.com/hashicorp/go-cleanhttp
github.com/sigstore/sigstore-go/pkg/root
-github.com/go-openapi/spec
+github.com/go-openapi/jsonreference
+github.com/spf13/viper
+github.com/hashicorp/go-retryablehttp
+golang.org/x/oauth2/internal
github.com/sigstore/rekor/pkg/log
+github.com/go-openapi/spec
github.com/go-openapi/runtime
+go.opentelemetry.io/otel
+github.com/google/certificate-transparency-go/client
+github.com/docker/distribution/registry/client/auth/challenge
+net/http/httptest
+golang.org/x/oauth2
+github.com/google/certificate-transparency-go/loglist3
+github.com/google/go-containerregistry/pkg/v1/remote/transport
+github.com/google/certificate-transparency-go/ctutil
+github.com/coreos/go-oidc/v3/oidc
+github.com/stretchr/testify/assert
github.com/go-openapi/runtime/yamlpc
github.com/go-openapi/runtime/security
-github.com/google/go-containerregistry/pkg/crane
+github.com/google/go-containerregistry/pkg/v1/remote
+github.com/sigstore/sigstore/pkg/oauthflow
github.com/go-openapi/analysis/internal/flatten/normalize
github.com/go-openapi/analysis/internal/flatten/operations
github.com/go-openapi/analysis/internal/flatten/replace
github.com/go-openapi/analysis/internal/flatten/schutils
github.com/go-openapi/analysis/internal/flatten/sortref
github.com/go-openapi/analysis
+github.com/google/go-containerregistry/pkg/crane
github.com/go-openapi/loads
github.com/go-openapi/runtime/middleware/untyped
github.com/go-openapi/validate
github.com/go-openapi/runtime/middleware
github.com/sigstore/rekor/pkg/generated/models
github.com/go-openapi/runtime/client
-github.com/sigstore/rekor/pkg/generated/client/index
github.com/sigstore/rekor/pkg/types
+github.com/sigstore/rekor/pkg/generated/client/index
github.com/sigstore/rekor/pkg/generated/client/pubkey
github.com/sigstore/rekor/pkg/generated/client/tlog
github.com/sigstore/rekor/pkg/generated/client/entries
github.com/sigstore/rekor/pkg/generated/client
github.com/sigstore/rekor/pkg/types/dsse
github.com/sigstore/rekor/pkg/types/hashedrekord
-github.com/sigstore/rekor/pkg/types/intoto
-github.com/sigstore/rekor/pkg/types/rekord
github.com/sigstore/rekor/pkg/tle
+github.com/sigstore/rekor/pkg/types/rekord
+github.com/sigstore/rekor/pkg/types/intoto
github.com/sigstore/rekor/pkg/verify
github.com/sigstore/rekor/pkg/client
-github.com/sigstore/rekor/pkg/types/dsse/v0.0.1
github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1
+github.com/sigstore/rekor/pkg/types/dsse/v0.0.1
github.com/sigstore/rekor/pkg/types/intoto/v0.0.2
github.com/sigstore/sigstore-go/pkg/tlog
github.com/sigstore/sigstore-go/pkg/verify
@@ -3305,7 +3341,7 @@
removed '_build/src/github.com/sigstore/sigstore-go/pkg/verify/sct_test.go'
make[1]: Leaving directory '/build/reproducible-path/sigstore-go-0.7.0'
dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
- cd _build && go test -vet=off -v -p 22 github.com/sigstore/sigstore-go/cmd/conformance github.com/sigstore/sigstore-go/cmd/sigstore-go github.com/sigstore/sigstore-go/examples/oci-image-verification github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/sigstore-go/pkg/root github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/ca github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/tuf github.com/sigstore/sigstore-go/pkg/util github.com/sigstore/sigstore-go/pkg/verify
+ cd _build && go test -vet=off -v -p 10 github.com/sigstore/sigstore-go/cmd/conformance github.com/sigstore/sigstore-go/cmd/sigstore-go github.com/sigstore/sigstore-go/examples/oci-image-verification github.com/sigstore/sigstore-go/examples/sigstore-go-signing github.com/sigstore/sigstore-go/pkg/bundle github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/sigstore/sigstore-go/pkg/root github.com/sigstore/sigstore-go/pkg/sign github.com/sigstore/sigstore-go/pkg/testing/ca github.com/sigstore/sigstore-go/pkg/testing/data github.com/sigstore/sigstore-go/pkg/tlog github.com/sigstore/sigstore-go/pkg/tuf github.com/sigstore/sigstore-go/pkg/util github.com/sigstore/sigstore-go/pkg/verify
? github.com/sigstore/sigstore-go/cmd/conformance [no test files]
? github.com/sigstore/sigstore-go/cmd/sigstore-go [no test files]
? github.com/sigstore/sigstore-go/examples/oci-image-verification [no test files]
@@ -3362,99 +3398,99 @@
=== RUN TestMinVersion/old-format
=== PAUSE TestMinVersion/old-format
=== RUN TestMinVersion/old-format-unexpected
-=== CONT TestSignatureContent
+=== PAUSE TestMinVersion/old-format-unexpected
+=== RUN TestMinVersion/old-format-without-v
+=== PAUSE TestMinVersion/old-format-without-v
+=== RUN TestMinVersion/new-format
+=== PAUSE TestMinVersion/new-format
+=== RUN TestMinVersion/new-format-exact
+=== PAUSE TestMinVersion/new-format-exact
+=== RUN TestMinVersion/new-format-unexpected
+=== PAUSE TestMinVersion/new-format-unexpected
+=== RUN TestMinVersion/new-format-without-v
+=== PAUSE TestMinVersion/new-format-without-v
+=== RUN TestMinVersion/new-format-without-v-unexpected
+=== PAUSE TestMinVersion/new-format-without-v-unexpected
+=== RUN TestMinVersion/blank
+=== PAUSE TestMinVersion/blank
+=== RUN TestMinVersion/invalid
+=== PAUSE TestMinVersion/invalid
+=== CONT TestMinVersion/old-format
+=== CONT TestTimestamps
+=== RUN TestTimestamps/missing_verification_material
+=== RUN TestTimestamps/empty_timestamp_data
+=== RUN TestTimestamps/one_timestamp
+=== RUN TestTimestamps/multiple_timestamps
+--- PASS: TestTimestamps (0.00s)
+ --- PASS: TestTimestamps/missing_verification_material (0.00s)
+ --- PASS: TestTimestamps/empty_timestamp_data (0.00s)
+ --- PASS: TestTimestamps/one_timestamp (0.00s)
+ --- PASS: TestTimestamps/multiple_timestamps (0.00s)
=== CONT TestEnvelope
-=== RUN TestSignatureContent/dsse_envelope
=== RUN TestEnvelope/dsse_envelope
+=== RUN TestEnvelope/message_signature
+--- PASS: TestEnvelope (0.00s)
+ --- PASS: TestEnvelope/dsse_envelope (0.00s)
+ --- PASS: TestEnvelope/message_signature (0.00s)
+=== CONT TestSignatureContent
+=== RUN TestSignatureContent/dsse_envelope
=== RUN TestSignatureContent/dsse_envelope_with_nil_signature
=== RUN TestSignatureContent/dsse_envelope_with_nil_payload
=== RUN TestSignatureContent/message_signature
-=== CONT TestVerificationContent
-=== RUN TestEnvelope/message_signature
-=== CONT Test_validate
-=== CONT TestMediaTypeString
-=== RUN Test_validate/invalid_media_type
-=== RUN TestMediaTypeString/normal-semver
-=== PAUSE TestMediaTypeString/normal-semver
-=== CONT TestTimestamps
-=== RUN TestTimestamps/missing_verification_material
-=== PAUSE TestMinVersion/old-format-unexpected
--- PASS: TestSignatureContent (0.00s)
--- PASS: TestSignatureContent/dsse_envelope (0.00s)
--- PASS: TestSignatureContent/dsse_envelope_with_nil_signature (0.00s)
--- PASS: TestSignatureContent/dsse_envelope_with_nil_payload (0.00s)
--- PASS: TestSignatureContent/message_signature (0.00s)
+=== CONT TestVerificationContent
+=== CONT TestMinVersion/new-format-without-v
+=== CONT TestMinVersion/new-format
+=== CONT Test_validate
+=== CONT TestMinVersion/new-format-unexpected
+=== CONT TestMinVersion/new-format-exact
+=== CONT TestMinVersion/invalid
+=== CONT TestMediaTypeString
+=== RUN TestMediaTypeString/normal-semver
+=== PAUSE TestMediaTypeString/normal-semver
=== RUN TestMediaTypeString/old-semver1
-=== RUN Test_validate/version_too_low
---- PASS: TestEnvelope (0.00s)
- --- PASS: TestEnvelope/dsse_envelope (0.00s)
- --- PASS: TestEnvelope/message_signature (0.00s)
=== PAUSE TestMediaTypeString/old-semver1
+=== RUN Test_validate/invalid_media_type
=== RUN TestMediaTypeString/old-semver2
-=== RUN TestMinVersion/old-format-without-v
-=== RUN Test_validate/version_too_high
=== PAUSE TestMediaTypeString/old-semver2
=== RUN TestMediaTypeString/blank
=== PAUSE TestMediaTypeString/blank
+=== RUN Test_validate/version_too_low
=== RUN TestMediaTypeString/invalid
=== PAUSE TestMediaTypeString/invalid
=== CONT TestMediaTypeString/normal-semver
-=== RUN TestTimestamps/empty_timestamp_data
-=== CONT TestMediaTypeString/old-semver2
-=== CONT TestMediaTypeString/old-semver1
-=== RUN Test_validate/no_verification_material
+=== RUN Test_validate/version_too_high
=== CONT TestMediaTypeString/invalid
+=== RUN Test_validate/no_verification_material
=== CONT TestMediaTypeString/blank
=== RUN Test_validate/v0.1_with_no_inclusion_promise
-=== RUN TestTimestamps/one_timestamp
-=== PAUSE TestMinVersion/old-format-without-v
+=== CONT TestMediaTypeString/old-semver2
+=== CONT TestMediaTypeString/old-semver1
--- PASS: TestMediaTypeString (0.00s)
--- PASS: TestMediaTypeString/normal-semver (0.00s)
- --- PASS: TestMediaTypeString/old-semver2 (0.00s)
- --- PASS: TestMediaTypeString/old-semver1 (0.00s)
--- PASS: TestMediaTypeString/invalid (0.00s)
--- PASS: TestMediaTypeString/blank (0.00s)
-=== RUN TestMinVersion/new-format
-=== PAUSE TestMinVersion/new-format
-=== RUN TestTimestamps/multiple_timestamps
-=== RUN TestMinVersion/new-format-exact
-=== PAUSE TestMinVersion/new-format-exact
---- PASS: TestTimestamps (0.00s)
- --- PASS: TestTimestamps/missing_verification_material (0.00s)
- --- PASS: TestTimestamps/empty_timestamp_data (0.00s)
- --- PASS: TestTimestamps/one_timestamp (0.00s)
- --- PASS: TestTimestamps/multiple_timestamps (0.00s)
-=== RUN TestMinVersion/new-format-unexpected
-=== PAUSE TestMinVersion/new-format-unexpected
-=== RUN TestMinVersion/new-format-without-v
-=== PAUSE TestMinVersion/new-format-without-v
-=== RUN TestMinVersion/new-format-without-v-unexpected
-=== PAUSE TestMinVersion/new-format-without-v-unexpected
-=== RUN TestMinVersion/blank
-=== PAUSE TestMinVersion/blank
-=== RUN TestMinVersion/invalid
-=== PAUSE TestMinVersion/invalid
-=== CONT TestMinVersion/invalid
-=== CONT TestMinVersion/old-format
-=== CONT TestMinVersion/new-format-unexpected
-=== CONT TestMinVersion/new-format-without-v-unexpected
+ --- PASS: TestMediaTypeString/old-semver2 (0.00s)
+ --- PASS: TestMediaTypeString/old-semver1 (0.00s)
=== CONT TestMinVersion/blank
-=== CONT TestMinVersion/old-format-unexpected
-=== CONT TestMinVersion/new-format-exact
+=== CONT TestMinVersion/new-format-without-v-unexpected
=== CONT TestMinVersion/old-format-without-v
-=== CONT TestMinVersion/new-format-without-v
-=== CONT TestMinVersion/new-format
+=== CONT TestMinVersion/old-format-unexpected
--- PASS: TestMinVersion (0.00s)
- --- PASS: TestMinVersion/invalid (0.00s)
--- PASS: TestMinVersion/old-format (0.00s)
+ --- PASS: TestMinVersion/new-format-without-v (0.00s)
+ --- PASS: TestMinVersion/new-format (0.00s)
--- PASS: TestMinVersion/new-format-unexpected (0.00s)
+ --- PASS: TestMinVersion/new-format-exact (0.00s)
+ --- PASS: TestMinVersion/invalid (0.00s)
--- PASS: TestMinVersion/blank (0.00s)
--- PASS: TestMinVersion/new-format-without-v-unexpected (0.00s)
- --- PASS: TestMinVersion/old-format-unexpected (0.00s)
--- PASS: TestMinVersion/old-format-without-v (0.00s)
- --- PASS: TestMinVersion/new-format-exact (0.00s)
- --- PASS: TestMinVersion/new-format-without-v (0.00s)
- --- PASS: TestMinVersion/new-format (0.00s)
+ --- PASS: TestMinVersion/old-format-unexpected (0.00s)
=== RUN Test_validate/v0.1_with_inclusion_promise
=== RUN Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint
=== RUN Test_validate/v0.1_with_inclusion_proof_&_promise
@@ -3464,7 +3500,7 @@
=== RUN Test_validate/v0.2_with_inclusion_proof
=== RUN Test_validate/v0.3_with_x.509_certificate_chain
=== RUN Test_validate/v0.3_without_x.509_certificate_chain
---- PASS: Test_validate (0.01s)
+--- PASS: Test_validate (0.02s)
--- PASS: Test_validate/invalid_media_type (0.00s)
--- PASS: Test_validate/version_too_low (0.00s)
--- PASS: Test_validate/version_too_high (0.00s)
@@ -3473,7 +3509,7 @@
--- PASS: Test_validate/v0.1_with_inclusion_promise (0.00s)
--- PASS: Test_validate/v0.1_with_inclusion_promise_&_proof_without_checkpoint (0.00s)
--- PASS: Test_validate/v0.1_with_inclusion_proof_&_promise (0.00s)
- --- PASS: Test_validate/v0.2_with_no_inclusion_proof (0.00s)
+ --- PASS: Test_validate/v0.2_with_no_inclusion_proof (0.01s)
--- PASS: Test_validate/v0.2_with_inclusion_proof_without_checkpoint (0.00s)
--- PASS: Test_validate/v0.2_with_inclusion_proof_with_empty_checkpoint (0.00s)
--- PASS: Test_validate/v0.2_with_inclusion_proof (0.00s)
@@ -3493,7 +3529,7 @@
=== RUN TestVerificationContent/empty_certificate
=== RUN TestVerificationContent/public_key
=== RUN TestVerificationContent/nil_public_key
---- PASS: TestVerificationContent (0.09s)
+--- PASS: TestVerificationContent (0.20s)
--- PASS: TestVerificationContent/no_verification_material (0.00s)
--- PASS: TestVerificationContent/certificate_chain_with_zero_certs (0.00s)
--- PASS: TestVerificationContent/certificate_chain_with_self-signed_cert (0.00s)
@@ -3511,7 +3547,7 @@
=== RUN FuzzBundle
--- PASS: FuzzBundle (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/bundle 0.101s
+ok github.com/sigstore/sigstore-go/pkg/bundle 0.222s
=== RUN TestSummarizeCertificateWithActionsBundle
--- PASS: TestSummarizeCertificateWithActionsBundle (0.01s)
=== RUN TestSummarizeCertificateWithOauthBundle
@@ -3521,7 +3557,7 @@
=== RUN TestCompareExtensions
--- PASS: TestCompareExtensions (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.025s
+ok github.com/sigstore/sigstore-go/pkg/fulcio/certificate 0.063s
=== RUN TestSigningConfig_FulcioCertificateAuthorityURL
=== RUN TestSigningConfig_FulcioCertificateAuthorityURL/valid
=== RUN TestSigningConfig_FulcioCertificateAuthorityURL/empty
@@ -3559,9 +3595,9 @@
=== RUN TestTrustedMaterialCollectionECDSA
--- PASS: TestTrustedMaterialCollectionECDSA (0.00s)
=== RUN TestTrustedMaterialCollectionED25519
---- PASS: TestTrustedMaterialCollectionED25519 (0.02s)
+--- PASS: TestTrustedMaterialCollectionED25519 (0.03s)
=== RUN TestTrustedMaterialCollectionRSA
---- PASS: TestTrustedMaterialCollectionRSA (1.09s)
+--- PASS: TestTrustedMaterialCollectionRSA (4.39s)
=== RUN TestFromJSONToJSON
--- PASS: TestFromJSONToJSON (0.00s)
=== RUN TestCertificateAuthority
@@ -3573,7 +3609,7 @@
=== RUN TestCertificateAuthority/bad_leaf
=== RUN TestCertificateAuthority/bad_intermediate
=== RUN TestCertificateAuthority/bad_root
---- PASS: TestCertificateAuthority (0.06s)
+--- PASS: TestCertificateAuthority (0.09s)
--- PASS: TestCertificateAuthority/normal (0.01s)
--- PASS: TestCertificateAuthority/no_validity_period_defined (0.01s)
--- PASS: TestCertificateAuthority/before_validity_period (0.00s)
@@ -3592,9 +3628,9 @@
=== RUN TestTimestampingAuthority/bad_intermediate
=== RUN TestTimestampingAuthority/bad_root
=== RUN TestTimestampingAuthority/signature_over_wrong_artifact
---- PASS: TestTimestampingAuthority (0.10s)
- --- PASS: TestTimestampingAuthority/normal (0.01s)
- --- PASS: TestTimestampingAuthority/no_validity_period_defined (0.01s)
+--- PASS: TestTimestampingAuthority (0.14s)
+ --- PASS: TestTimestampingAuthority/normal (0.02s)
+ --- PASS: TestTimestampingAuthority/no_validity_period_defined (0.02s)
--- PASS: TestTimestampingAuthority/before_validity_period (0.01s)
--- PASS: TestTimestampingAuthority/after_validity_period (0.01s)
--- PASS: TestTimestampingAuthority/missing_intermediate (0.00s)
@@ -3603,9 +3639,9 @@
--- PASS: TestTimestampingAuthority/bad_root (0.01s)
--- PASS: TestTimestampingAuthority/signature_over_wrong_artifact (0.01s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/root 1.272s
+ok github.com/sigstore/sigstore-go/pkg/root 4.666s
=== RUN Test_GetCertificate
---- PASS: Test_GetCertificate (4.05s)
+--- PASS: Test_GetCertificate (4.07s)
=== RUN Test_PlainData
--- PASS: Test_PlainData (0.00s)
=== RUN Test_DSSEData
@@ -3615,33 +3651,33 @@
=== RUN Test_Bundle
--- PASS: Test_Bundle (0.00s)
=== RUN Test_GetTimestamp
---- PASS: Test_GetTimestamp (4.02s)
+--- PASS: Test_GetTimestamp (4.01s)
=== RUN Test_GetTransparencyLogEntry
---- PASS: Test_GetTransparencyLogEntry (0.02s)
+--- PASS: Test_GetTransparencyLogEntry (0.03s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/sign 8.102s
+ok github.com/sigstore/sigstore-go/pkg/sign 8.123s
? github.com/sigstore/sigstore-go/pkg/testing/ca [no test files]
? github.com/sigstore/sigstore-go/pkg/testing/data [no test files]
=== RUN FuzzParseEntry
--- PASS: FuzzParseEntry (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/tlog 0.009s
+ok github.com/sigstore/sigstore-go/pkg/tlog 0.024s
=== RUN TestNewOfflineClientFail
---- PASS: TestNewOfflineClientFail (0.03s)
+--- PASS: TestNewOfflineClientFail (0.07s)
=== RUN TestRefresh
---- PASS: TestRefresh (0.04s)
+--- PASS: TestRefresh (0.07s)
=== RUN TestInvalidRoot
---- PASS: TestInvalidRoot (0.01s)
+--- PASS: TestInvalidRoot (0.02s)
=== RUN TestInvalidRepositoryURL
--- PASS: TestInvalidRepositoryURL (0.00s)
=== RUN TestCache
---- PASS: TestCache (0.05s)
+--- PASS: TestCache (0.10s)
=== RUN TestExpiredTimestamp
---- PASS: TestExpiredTimestamp (0.04s)
+--- PASS: TestExpiredTimestamp (0.07s)
=== RUN TestConfig
--- PASS: TestConfig (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/tuf 0.177s
+ok github.com/sigstore/sigstore-go/pkg/tuf 0.339s
? github.com/sigstore/sigstore-go/pkg/util [no test files]
=== RUN TestCertificateIdentityVerify
--- PASS: TestCertificateIdentityVerify (0.00s)
@@ -3653,90 +3689,90 @@
=== RUN TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_2_signatures
--- PASS: TestVerifyEnvelopeSignatureCount (0.01s)
--- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_0_signatures (0.00s)
- --- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_1_signatures (0.00s)
+ --- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_1_signatures (0.01s)
--- PASS: TestVerifyEnvelopeSignatureCount/Test_DSSE_verify_with_2_signatures (0.00s)
=== RUN TestVerifyValidityPeriod
=== RUN TestVerifyValidityPeriod/before_validity_period
=== RUN TestVerifyValidityPeriod/inside_validity_period
=== RUN TestVerifyValidityPeriod/after_validity_period
---- PASS: TestVerifyValidityPeriod (0.03s)
+--- PASS: TestVerifyValidityPeriod (0.05s)
--- PASS: TestVerifyValidityPeriod/before_validity_period (0.00s)
--- PASS: TestVerifyValidityPeriod/inside_validity_period (0.01s)
--- PASS: TestVerifyValidityPeriod/after_validity_period (0.00s)
=== RUN TestSignatureVerifier
---- PASS: TestSignatureVerifier (0.05s)
+--- PASS: TestSignatureVerifier (0.11s)
=== RUN TestEnvelopeSubject
---- PASS: TestEnvelopeSubject (0.12s)
+--- PASS: TestEnvelopeSubject (0.23s)
=== RUN TestSignatureVerifierMessageSignature
---- PASS: TestSignatureVerifierMessageSignature (0.09s)
+--- PASS: TestSignatureVerifierMessageSignature (0.16s)
=== RUN TestTooManySubjects
---- PASS: TestTooManySubjects (0.06s)
+--- PASS: TestTooManySubjects (0.12s)
=== RUN TestTooManyDigests
---- PASS: TestTooManyDigests (0.05s)
+--- PASS: TestTooManyDigests (0.08s)
=== RUN TestSignedEntityVerifierInitialization
--- PASS: TestSignedEntityVerifierInitialization (0.00s)
=== RUN TestSignedEntityVerifierInitRequiresTimestamp
--- PASS: TestSignedEntityVerifierInitRequiresTimestamp (0.00s)
=== RUN TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully
---- PASS: TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully (0.10s)
+--- PASS: TestEntitySignedByPublicGoodWithTlogVerifiesSuccessfully (0.16s)
=== RUN TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully
---- PASS: TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully (0.04s)
+--- PASS: TestEntitySignedByPublicGoodWithoutTimestampsVerifiesSuccessfully (0.05s)
=== RUN TestEntitySignedByPublicGoodWithHighTlogThresholdFails
---- PASS: TestEntitySignedByPublicGoodWithHighTlogThresholdFails (0.01s)
+--- PASS: TestEntitySignedByPublicGoodWithHighTlogThresholdFails (0.03s)
=== RUN TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails
---- PASS: TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails (0.00s)
+--- PASS: TestEntitySignedByPublicGoodWithoutVerifyingLogEntryFails (0.01s)
=== RUN TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails
---- PASS: TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails (0.01s)
+--- PASS: TestEntitySignedByPublicGoodWithHighLogTimestampThresholdFails (0.02s)
=== RUN TestEntitySignedByPublicGoodExpectingTSAFails
---- PASS: TestEntitySignedByPublicGoodExpectingTSAFails (0.01s)
+--- PASS: TestEntitySignedByPublicGoodExpectingTSAFails (0.02s)
=== RUN TestEntitySignedByPublicGoodWithHighObserverTimestampThresholdFails
---- PASS: TestEntitySignedByPublicGoodWithHighObserverTimestampThresholdFails (0.01s)
+--- PASS: TestEntitySignedByPublicGoodWithHighObserverTimestampThresholdFails (0.02s)
=== RUN TestEntityWithOthernameSan
---- PASS: TestEntityWithOthernameSan (0.04s)
+--- PASS: TestEntityWithOthernameSan (0.06s)
=== RUN TestVerifyPolicyOptionErors
---- PASS: TestVerifyPolicyOptionErors (0.00s)
+--- PASS: TestVerifyPolicyOptionErors (0.01s)
=== RUN TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully
---- PASS: TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully (0.10s)
+--- PASS: TestEntitySignedByPublicGoodWithCertificateIdentityVerifiesSuccessfully (0.16s)
=== RUN TestThatAllTheJSONKeysStartWithALowerCase
---- PASS: TestThatAllTheJSONKeysStartWithALowerCase (0.04s)
+--- PASS: TestThatAllTheJSONKeysStartWithALowerCase (0.05s)
=== RUN TestSigstoreBundle2Sig
---- PASS: TestSigstoreBundle2Sig (0.03s)
+--- PASS: TestSigstoreBundle2Sig (0.04s)
=== RUN TestStatementSerializesToValidInTotoStatement
--- PASS: TestStatementSerializesToValidInTotoStatement (0.00s)
=== RUN TestTlogVerifier
---- PASS: TestTlogVerifier (0.07s)
+--- PASS: TestTlogVerifier (0.10s)
=== RUN TestIgnoredTLogEntries
---- PASS: TestIgnoredTLogEntries (0.06s)
+--- PASS: TestIgnoredTLogEntries (0.10s)
=== RUN TestInvalidTLogEntries
---- PASS: TestInvalidTLogEntries (0.03s)
+--- PASS: TestInvalidTLogEntries (0.04s)
=== RUN TestNoTLogEntries
---- PASS: TestNoTLogEntries (0.03s)
+--- PASS: TestNoTLogEntries (0.04s)
=== RUN TestDuplicateTlogEntries
---- PASS: TestDuplicateTlogEntries (0.03s)
+--- PASS: TestDuplicateTlogEntries (0.04s)
=== RUN TestMaxAllowedTlogEntries
---- PASS: TestMaxAllowedTlogEntries (0.03s)
+--- PASS: TestMaxAllowedTlogEntries (0.04s)
=== RUN TestOfflineInclusionProofVerification
---- PASS: TestOfflineInclusionProofVerification (0.04s)
+--- PASS: TestOfflineInclusionProofVerification (0.05s)
=== RUN TestTimestampAuthorityVerifier
---- PASS: TestTimestampAuthorityVerifier (0.11s)
+--- PASS: TestTimestampAuthorityVerifier (0.16s)
=== RUN TestTimestampAuthorityVerifierWithoutThreshold
---- PASS: TestTimestampAuthorityVerifierWithoutThreshold (0.06s)
+--- PASS: TestTimestampAuthorityVerifierWithoutThreshold (0.09s)
=== RUN TestDuplicateTimestamps
---- PASS: TestDuplicateTimestamps (0.03s)
+--- PASS: TestDuplicateTimestamps (0.05s)
=== RUN TestBadTSASignature
---- PASS: TestBadTSASignature (0.03s)
+--- PASS: TestBadTSASignature (0.04s)
=== RUN TestBadTSACertificateChain
---- PASS: TestBadTSACertificateChain (0.05s)
+--- PASS: TestBadTSACertificateChain (0.07s)
=== RUN TestBadTSACertificateChainOutsideValidityPeriod
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/valid
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future
=== RUN TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past
---- PASS: TestBadTSACertificateChainOutsideValidityPeriod (0.08s)
- --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/valid (0.02s)
- --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future (0.02s)
- --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past (0.02s)
+--- PASS: TestBadTSACertificateChainOutsideValidityPeriod (0.12s)
+ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/valid (0.03s)
+ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_start_time_in_the_future (0.03s)
+ --- PASS: TestBadTSACertificateChainOutsideValidityPeriod/invalid:_end_time_in_the_past (0.03s)
=== RUN TestTooManyTimestamps
---- PASS: TestTooManyTimestamps (0.03s)
+--- PASS: TestTooManyTimestamps (0.05s)
=== RUN FuzzVerifyTimestampAuthorityWithoutThreshold
--- PASS: FuzzVerifyTimestampAuthorityWithoutThreshold (0.00s)
=== RUN FuzzVerifyTimestampAuthorityWithThreshold
@@ -3752,7 +3788,7 @@
=== RUN FuzzVerifySignatureWithArtifactDigest
--- PASS: FuzzVerifySignatureWithArtifactDigest (0.00s)
PASS
-ok github.com/sigstore/sigstore-go/pkg/verify 1.503s
+ok github.com/sigstore/sigstore-go/pkg/verify 2.396s
create-stamp debian/debhelper-build-stamp
dh_testroot -O--builddirectory=_build -O--buildsystem=golang
dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -3806,9 +3842,9 @@
dpkg-gencontrol: warning: package sigstore-go: substitution variable ${misc:Static-Built-Using} unused, but is defined
dh_md5sums -O--builddirectory=_build -O--buildsystem=golang
dh_builddeb -O--builddirectory=_build -O--buildsystem=golang
-dpkg-deb: building package 'sigstore-go-dbgsym' in '../sigstore-go-dbgsym_0.7.0-2_i386.deb'.
-dpkg-deb: building package 'sigstore-go' in '../sigstore-go_0.7.0-2_i386.deb'.
dpkg-deb: building package 'golang-github-sigstore-sigstore-go-dev' in '../golang-github-sigstore-sigstore-go-dev_0.7.0-2_all.deb'.
+dpkg-deb: building package 'sigstore-go' in '../sigstore-go_0.7.0-2_i386.deb'.
+dpkg-deb: building package 'sigstore-go-dbgsym' in '../sigstore-go-dbgsym_0.7.0-2_i386.deb'.
dpkg-genbuildinfo --build=binary -O../sigstore-go_0.7.0-2_i386.buildinfo
dpkg-genchanges --build=binary -O../sigstore-go_0.7.0-2_i386.changes
dpkg-genchanges: info: binary-only upload (no source code included)
@@ -3816,12 +3852,14 @@
dpkg-buildpackage: info: binary-only upload (no source included)
dpkg-genchanges: info: not including original source code in upload
I: copying local configuration
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/4266/tmp/hooks/B01_cleanup finished
I: unmounting dev/ptmx filesystem
I: unmounting dev/pts filesystem
I: unmounting dev/shm filesystem
I: unmounting proc filesystem
I: unmounting sys filesystem
I: cleaning the build env
-I: removing directory /srv/workspace/pbuilder/74476 and its subdirectories
-I: Current time: Mon Apr 20 19:55:05 -12 2026
-I: pbuilder-time-stamp: 1776758105
+I: removing directory /srv/workspace/pbuilder/4266 and its subdirectories
+I: Current time: Wed Mar 19 15:36:14 +14 2025
+I: pbuilder-time-stamp: 1742348174