Spaces:
Running
Running
File size: 2,856 Bytes
a6a5d8e | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 | # Sigstore Rekor Integration Notes
## Connection to Existing SZL Organs
### sentra / amaru / rosie organ layer
Every DSSE receipt emitted by `emitReceipt()` in the organ layer gains a new
**side-car step**: after HMAC-signing the PAE envelope, `submitDSSEToRekor()`
is called and the returned `RekorSubmitResult` is appended to the JSONL chain
as a `rekorAttestation` block.
```jsonl
{"receiptId":"szl-2026-001","organ":"sentra","action":"deploy",...,"rekorAttestation":{"uuid":"382898f8...","logIndex":42000000,"integratedTime":1748563200,"entryUrl":"https://rekor.sigstore.dev/api/v1/log/entries/382898f8...","verifyCmd":"rekor-cli get --uuid 382898f8..."}}
```
### Pepr admission controller
`emitRekorAttestation()` is exported for use in Pepr `When().Mutate()` hooks:
```typescript
When(SZLReceipt).IsCreated().Mutate(async (receipt) => {
const result = await emitRekorAttestation(receipt.Raw.spec.envelope, opts);
receipt.SetAnnotation("szl.io/rekor-uuid", result.uuid);
receipt.SetAnnotation("szl.io/rekor-integrated-time", String(result.integratedTime));
});
```
### MCP `verify_receipt` tool
Add `rekorUuid` to the `verify_receipt` tool response:
```typescript
// In MCP server tool handler:
const rekorCheck = await verifyRekorEntry(receipt.rekorAttestation.uuid, receipt.envelope.payload);
return { ...existingResponse, rekorVerified: rekorCheck.verified, rekorLogIndex: rekorCheck.logIndex };
```
## Keyless Signing (Production Path — STAGED-ADVISORY)
In GitHub Actions, replace `signingKeyPem` with Fulcio OIDC flow:
```yaml
# .github/workflows/szl-receipt.yml
- uses: sigstore/cosign-installer@v3
- run: |
OIDC_TOKEN=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
"$ACTIONS_ID_TOKEN_REQUEST_URL&audience=sigstore" | jq -r .value)
# Exchange via Fulcio:
# POST https://fulcio.sigstore.dev/api/v2/signingCert
# Body: { certificateSigningRequest: <CSR>, oidcIdentityToken: <token> }
```
The returned ephemeral X.509 cert from Fulcio encodes the GitHub Actions OIDC
`sub` claim (e.g. `repo:SZL-Holdings/a11oy:ref:refs/heads/main`) in its SAN,
making the signing identity cryptographically bound to the workflow run — with no
long-lived keys.
## Endpoint Reference
- Production: `https://rekor.sigstore.dev/api/v1/log/entries`
- Public key: `https://rekor.sigstore.dev/api/v1/log/publicKey`
- Log info: `https://rekor.sigstore.dev/api/v1/log`
- CLI verify: `rekor-cli get --uuid <uuid> --rekor_server https://rekor.sigstore.dev`
## Dependency Chain
```
organ layer → emitReceipt() → submitDSSEToRekor() → Rekor API
↓
RekorSubmitResult appended to JSONL
↓
MCP verify_receipt ← verifyRekorEntry()
```
|