Skip to content

security: add mock signer authority core #23

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
stacknil merged 12 commits into from
Sep 18, 2026
Merged

security: add mock signer authority core #23

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
d93df5e
feat(security): add mock signer authority core
stacknil Sep 18, 2026
ee219f0
test(security): verify signer authority invariants
stacknil Sep 18, 2026
c35251c
docs(security): record signer v1 boundary
stacknil Sep 18, 2026
ab02da0
fix(security): separate transport field names
stacknil Sep 18, 2026
43b30b3
test(security): keep scanner evidence reviewable
stacknil Sep 18, 2026
9ed0642
test(security): use concise contract labels
stacknil Sep 18, 2026
0930522
test(security): assert exact ticket transport shape
stacknil Sep 18, 2026
463d829
fix(security): bind signer publication authority
stacknil Sep 18, 2026
8407595
test(security): cover signer authority remediation
stacknil Sep 18, 2026
27a3cae
docs(security): record signer authority invariants
stacknil Sep 18, 2026
4d1013c
test(security): keep provenance fixture scan-safe
stacknil Sep 18, 2026
feb40fd
test(security): assert source conflict before shortcut
stacknil Sep 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
434 changes: 434 additions & 0 deletions docs/design-decisions/repo-sentinel-signer-v1.md
View file
Open in desktop

Large diffs are not rendered by default.

62 changes: 62 additions & 0 deletions signer/repo_sentinel_signer/__init__.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,62 @@
"""Mock-only reference core for the Repo Sentinel signer v1 protocol."""

from .model import (
GITHUB_OIDC_ISSUER,
SIGNER_AUDIENCE,
SIGNER_PROTOCOL,
EvaluationRecord,
EvaluationState,
FinalizationResult,
PublicationPayload,
PublicationReceipt,
PublicationSlot,
PublicationSlotState,
PullRequestSnapshot,
RegistryRecord,
SignerRefused,
TicketRequest,
TicketResponse,
VerifiedOidcClaims,
)
from .oidc import MockOidcVerifier, OidcVerifier
from .publisher import (
MockPublisher,
MockPublishMode,
Publisher,
PublishDisposition,
PublishOutcome,
)
from .registry import InMemoryRegistry
from .service import MockPullRequestReader, PullRequestReader, SignerService
from .store import InMemoryEvaluationStore

__all__ = [
"GITHUB_OIDC_ISSUER",
"SIGNER_AUDIENCE",
"SIGNER_PROTOCOL",
"EvaluationRecord",
"EvaluationState",
"FinalizationResult",
"InMemoryEvaluationStore",
"InMemoryRegistry",
"MockOidcVerifier",
"MockPublishMode",
"MockPublisher",
"MockPullRequestReader",
"OidcVerifier",
"PublicationPayload",
"PublicationReceipt",
"PublicationSlot",
"PublicationSlotState",
"PublishDisposition",
"PublishOutcome",
"Publisher",
"PullRequestReader",
"PullRequestSnapshot",
"RegistryRecord",
"SignerRefused",
"SignerService",
"TicketRequest",
"TicketResponse",
"VerifiedOidcClaims",
]
Loading
Loading