diff --git a/pkg/cosign/cosign.go b/pkg/cosign/cosign.go index 92932a1..8f0ac7b 100644 --- a/pkg/cosign/cosign.go +++ b/pkg/cosign/cosign.go @@ -23,8 +23,9 @@ func VerifySignature(ctx context.Context, s *store.Layout, keyPath string, useTl l := log.FromContext(ctx) operation := func() error { v := &verify.VerifyCommand{ - KeyRef: keyPath, - IgnoreTlog: true, // Ignore transparency log by default. + KeyRef: keyPath, + IgnoreTlog: true, // Ignore transparency log by default. + NewBundleFormat: true, } // if the user wants to use the transparency log, set the flag to false @@ -52,7 +53,7 @@ func VerifyKeylessSignature(ctx context.Context, s *store.Layout, identity strin certVerifyOptions := options.CertVerifyOptions{ CertOidcIssuer: oidcIssuer, - CertOidcIssuerRegexp: oidcIssuer, + CertOidcIssuerRegexp: oidcIssuerRegexp, CertIdentity: identity, CertIdentityRegexp: identityRegexp, CertGithubWorkflowRepository: ghWorkflowRepository, @@ -62,6 +63,7 @@ func VerifyKeylessSignature(ctx context.Context, s *store.Layout, identity strin CertVerifyOptions: certVerifyOptions, IgnoreTlog: false, // Ignore transparency log is set to false by default for keyless signature verification CertGithubWorkflowRepository: ghWorkflowRepository, + NewBundleFormat: true, } // if the user wants to use the transparency log, set the flag to false