support verify by digest in conformance suite (#1326)

* support verify by digest in conformance suite

Signed-off-by: Brian DeHamer <[email protected]>

* bump conformance suite to v0.0.13

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>

Author: bdehamer

.changeset/tame-wasps-decide.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/conformance': minor
+---
+
+Support verification by artifact OR artifact digest

.github/workflows/conformance.yml

@@ -26,7 +26,7 @@ jobs:
       run: npm ci
     - name: Build sigstore-js
       run: npm run build
-    - uses: sigstore/sigstore-conformance@ee4de0e602873beed74cf9e49d5332529fe69bf6 # v0.0.11
+    - uses: sigstore/sigstore-conformance@6bd1c54e236c9517da56f7344ad16cc00439fe19 # v0.0.13
       with:
         entrypoint: ${{ github.workspace }}/packages/conformance/bin/run
         xfail: "test_verify_with_trust_root"
@@ -46,7 +46,7 @@ jobs:
       run: npm ci
     - name: Build sigstore-js
       run: npm run build
-    - uses: sigstore/sigstore-conformance@ee4de0e602873beed74cf9e49d5332529fe69bf6 # v0.0.11
+    - uses: sigstore/sigstore-conformance@6bd1c54e236c9517da56f7344ad16cc00439fe19 # v0.0.13
       with:
         entrypoint: ${{ github.workspace }}/packages/conformance/bin/run
         environment: staging

package-lock.json

@@ -21,9 +21,11 @@
     "@sigstore/bundle": "^3.0.0",
     "@sigstore/protobuf-specs": "^0.3.2",
     "@sigstore/verify": "^2.0.0",
+    "elliptic": "^6.6.1",
     "sigstore": "^3.0.0"
   },
   "devDependencies": {
+    "@types/elliptic": "^6.4.18",
     "oclif": "^4",
     "tslib": "^2.8.1"
   },