Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(workaround): allow old norm algos to be hashed with old digest ctxts #1263

Conversation

jakobmoellerdev
Copy link
Contributor

@jakobmoellerdev jakobmoellerdev commented Jan 21, 2025

What this PR does / why we need it

This make sure that the (very convoluted) signing implementation normalizes with the legacy patch we applied during the normalization of the descriptor to avoid mismatches in resource identities during digest propagation.

Which issue(s) this PR fixes

fix #1245

@jakobmoellerdev jakobmoellerdev requested a review from a team as a code owner January 21, 2025 15:07
frewilhelm
frewilhelm previously approved these changes Jan 21, 2025
@jakobmoellerdev jakobmoellerdev force-pushed the fix/digest-propagation-with-normalization branch from 0c5623f to b447ac6 Compare January 21, 2025 15:16
@github-actions github-actions bot added the component/github-actions Changes on GitHub Actions or within `.github/` directory label Jan 21, 2025
This make sure that the (very convoluted) signing implementation normalizes with the legacy patch we applied during the normalization of the descriptor to avoid mismatches in resource identities during digest propagation.
@jakobmoellerdev jakobmoellerdev force-pushed the fix/digest-propagation-with-normalization branch from b447ac6 to 4848119 Compare January 21, 2025 15:38
@frewilhelm frewilhelm merged commit 7ad420b into open-component-model:main Jan 21, 2025
23 checks passed
frewilhelm pushed a commit to frewilhelm/ocm that referenced this pull request Jan 21, 2025
…xts (open-component-model#1263)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

This make sure that the (very convoluted) signing implementation
normalizes with the legacy patch we applied during the normalization of
the descriptor to avoid mismatches in resource identities during digest
propagation.

#### Which issue(s) this PR fixes
<!--
Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.
-->
fix open-component-model#1245
frewilhelm added a commit that referenced this pull request Jan 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
component/github-actions Changes on GitHub Actions or within `.github/` directory kind/bugfix Bug size/s Small
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Compatibility issue with v0.18.0 and the main branch
2 participants