Added a mime type to the trusted root, as that's expected to be seria…

…lized (#54) to a file. Signed-off-by: Fredrik Skogman <[email protected]> Signed-off-by: Fredrik Skogman <[email protected]>
sigstore · Jan 10, 2023 · ee12d82 · ee12d82
1 parent a09e324
commit ee12d82
Show file tree

Hide file tree

Showing 3 changed files with 60 additions and 44 deletions.
diff --git a/gen/pb-go/trustroot/v1/sigstore_trustroot.pb.go b/gen/pb-go/trustroot/v1/sigstore_trustroot.pb.go
diff --git a/gen/pb-python/sigstore_protobuf_specs/dev/sigstore/trustroot/v1/__init__.py b/gen/pb-python/sigstore_protobuf_specs/dev/sigstore/trustroot/v1/__init__.py
diff --git a/protos/sigstore_trustroot.proto b/protos/sigstore_trustroot.proto
@@ -68,8 +68,10 @@ message CertificateAuthority {
 // a minimal set by the policy to gain better control over what signatures
 // that are allowed.
 message TrustedRoot {
+        // MUST be application/vnd.dev.sigstore.trustedroot+json;version=0.1
+        string media_type = 1;
         // A set of trusted Rekor servers.
-        repeated TransparencyLogInstance tlogs = 1;
+        repeated TransparencyLogInstance tlogs = 2;
         // A set of trusted certificate authorites (e.g Fulcio), and any
         // intermediate certificates they provide.
         // If a CA is issuing multiple intermediate certificate, each
@@ -78,9 +80,9 @@ message TrustedRoot {
         // intermediate and/or leaf certificates.
         // The certificates are intended to be used for verifying artifact
         // signatures.
-        repeated CertificateAuthority certificate_authorities = 2;
+        repeated CertificateAuthority certificate_authorities = 3;
         // A set of trusted certificate transparency logs.
-        repeated TransparencyLogInstance ctlogs = 3;
+        repeated TransparencyLogInstance ctlogs = 4;
         // A set of trusted timestamping authorities.
-        repeated CertificateAuthority timestamp_authorities = 4;
+        repeated CertificateAuthority timestamp_authorities = 5;
 }