feat(evidence): aicr evidence verify (signed OCI bundles)#890

Merged

mchmarny merged 9 commits into

NVIDIA:mainfrom

njhensley:feat/evidence-verify-signature-oci

May 14, 2026

Commits on May 14, 2026

feat(verifier): pointer-file input, OCI pull, and Sigstore signature verification
njhensley
committed
fix(verifier): enforce pointer signer claims and require digest-pinned OCI refs
njhensley
committed
fix(verifier): remove --no-rekor; clarify signature failure messaging
njhensley
committed
docs(evidence): note the :v1 placeholder tag for --push references
njhensley
committed
Merge branch 'main' into feat/evidence-verify-signature-oci
njhensley
authored
fix(verifier): coderabbit review — OCI ref format, auth client, input detection
njhensley
committed
fix(verifier): fail closed on malformed referrer; stop pagination on first match
njhensley
committed
Merge branch 'main' into feat/evidence-verify-signature-oci
njhensley
authored
fix(verifier): pin TLS 1.2 floor when synthesizing TLS config for --registry-insecure-tls
njhensley
committed