Struct SigstoreVerifier 

pub struct SigstoreVerifier { /* private fields */ }

The Sigstore check, in-process, against the public-good trusted root sigstore-trust-root embeds.

It checks everything gh attestation verify does: the certificate chain to Fulcio, the certificate transparency SCT, the Rekor inclusion proof, checkpoint and SET, the certificate’s validity at the logged time, the DSSE signature, and the in-toto subject against the artifact’s digest. Then the signer: the certificate identity and issuer through the policy, and the statement’s predicate type after it.

The root is as old as this build

The root is the one sigstore-trust-root embedded when this crate’s pin was last bumped, and nothing refreshes it at run time (tuf is off; see Cargo.toml). A bundle logged to a Rekor shard or signed under a key newer than the root is refused like a tampered one. Each client fetches its own version’s daemon, so the release workflow is where that would surface: it verifies the bundle it just produced with this type before it publishes anything (tests/release_bundle.rs), and a refusal there means bumping the pin, not turning a check off.

Implementations

impl SigstoreVerifier

pub fn public_good() -> Result<SigstoreVerifier, String>

A verifier over the embedded public-good trusted root. Fails only if that root doesn’t parse, which a test below would have caught first.

Trait Implementations

impl AttestationVerifier for SigstoreVerifier

fn verify( &self, bundle: &str, artifact: &[u8], signer: &Signer, ) -> Result<(), String>

Whether bundle proves artifact was attested by signer: the certificate chain, the transparency log evidence, the signature over the artifact’s digest, the certificate identity and issuer, and the predicate type.

impl Debug for SigstoreVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.