Variable sigstoreSignerFacts

Type Declaration

• • (
        der: any,
    ): {
        codeSigning: boolean;
        issuer: string;
        notAfter: number;
        notBefore: number;
        pem: any;
        spki: any;
        subject: any;
    }

  • Reads the facts of a sigstore signing certificate.

    subject is the first non-empty subjectAltName in sigstore's order and issuer the OIDC issuer extension, as SPIRE's extractSubject() does.

    Parameters

    • der: any

      the certificate's DER bytes

    Returns {
        codeSigning: boolean;
        issuer: string;
        notAfter: number;
        notBefore: number;
        pem: any;
        spki: any;
        subject: any;
    }

    { subject, issuer, codeSigning, notBefore, notAfter, spki }, or null when the bytes are not a certificate