sigstore: Cache verify_image results across policy evaluations#3136

Draft

arewm wants to merge 17 commits into

conforma:mainfrom

arewm:ec-1545/sigstore-verify-image-cache

Commits on Jun 26, 2026

Update our go-containerregistry fork dependency

simonbaird
and
claude
committed
Don't create and push branch in ubi script
simonbaird
committed
chore(deps): Update ubi-minimal base image
simonbaird
committed
chore(deps): Align k8s.io/kubectl with k8s.io/api v0.36.0

simonbaird
and
claude
committed
Make it easier to run tools ci locally
simonbaird
committed
Fix go mod tidy due to removed knative packages

simonbaird
and
claude
committed
chore(deps): Align k8s.io/apiextensions-apiserver with k8s.io/api v0.36.0

simonbaird
and
claude
committed
Update go-containeregistry to include .local http fix
simonbaird
committed
sigstore: Cache verify_image results across policy evaluations

arewm
authored and
simonbaird
committed
sigstore: Use full SHA-512 for verify_image cache key

arewm
authored and
simonbaird
committed
Add missing HasBundles mock in sigstore test

simonbaird
and
claude
committed