IvanHunters 10be3d2770 fix(marketplace): reject a non-cosign verify provider at connect ...

TapVerify advertised provider notation, but buildVerifySpec always emits a
matchOIDCIdentity block, which is meaningful only for keyless cosign. Setting
provider: notation produced a nonsensical verify block. The connect now rejects
any provider other than cosign and the type doc no longer advertises notation,
since only keyless cosign identity matching is settable here.

Assisted-by: LLM
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>

2026-10-22 22:35:27 +03:00

..

definitions_test.go

test(api): guard published openapi definition names and refs

2026-08-14 13:12:39 +05:00

zz_generated.openapi.go

fix(marketplace): reject a non-cosign verify provider at connect

2026-10-22 22:35:27 +03:00