Skip to content

update: check if verification is skipped by trust policy#468

Merged
shizhMSFT merged 5 commits intonotaryproject:mainfrom
patrickzheng200:skip
Dec 7, 2022
Merged

update: check if verification is skipped by trust policy#468
shizhMSFT merged 5 commits intonotaryproject:mainfrom
patrickzheng200:skip

Conversation

@patrickzheng200
Copy link
Copy Markdown
Contributor

Previous to this PR: if -v flag is not set, and the verification process is skipped, notation would still print out message stating "Successfully verified signature for xxx".

This PR tries to fix this, if verification is actually skipped, notation would print out "Trust policy is configured to skip signature verification for xxx".

Signed-off-by: Patrick Zheng patrickzheng@microsoft.com

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Dec 6, 2022

Codecov Report

Merging #468 (08f049c) into main (63f4121) will decrease coverage by 0.09%.
The diff coverage is 0.00%.

@@            Coverage Diff             @@
##             main     #468      +/-   ##
==========================================
- Coverage   32.26%   32.16%   -0.10%     
==========================================
  Files          25       25              
  Lines        1336     1340       +4     
==========================================
  Hits          431      431              
- Misses        893      897       +4     
  Partials       12       12              
Impacted Files Coverage Δ
cmd/notation/verify.go 27.83% <0.00%> (-1.20%) ⬇️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Copy link
Copy Markdown
Contributor

@JeyJeyGao JeyJeyGao left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Copy link
Copy Markdown
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Contributor

@vaninrao10 vaninrao10 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Contributor

@rgnote rgnote left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Patrick Zheng added 2 commits December 7, 2022 08:49
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Copy link
Copy Markdown
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@shizhMSFT
Copy link
Copy Markdown
Contributor

Linking notaryproject/notation-go#231

@shizhMSFT shizhMSFT merged commit 373e50e into notaryproject:main Dec 7, 2022
@patrickzheng200 patrickzheng200 deleted the skip branch December 7, 2022 01:45
7h3-3mp7y-m4n pushed a commit to 7h3-3mp7y-m4n/notation that referenced this pull request Mar 29, 2025
…ct#468)

Previous to this PR: if -v flag is not set, and the verification process
is skipped, notation would still print out message stating "Successfully
verified signature for xxx".

This PR tries to fix this, if verification is actually skipped, notation
would print out "Trust policy is configured to skip signature
verification for xxx".

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
FeynmanZhou pushed a commit to FeynmanZhou/notation that referenced this pull request May 15, 2025
…ct#468)

Previous to this PR: if -v flag is not set, and the verification process
is skipped, notation would still print out message stating "Successfully
verified signature for xxx".

This PR tries to fix this, if verification is actually skipped, notation
would print out "Trust policy is configured to skip signature
verification for xxx".

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants