[Bug]: DSSE payload not verified against the agent card #49
Description
What happened?
After verifier.verify_dsse(sig_bundle, policy), the returned subject and payload, values are discarded.
The signed in-toto statement contains the agent card data as its predicate.
By not comparing it to the agent card in the SignedAgentCard, an attacker could swap the agent card content while keeping a valid Sigstore bundle from a different signing operation.
This tampers with the overall integrity of a signed-agent-card where in the contents under attestations could be a completely different but valid signature and the contents under agentCard could be different.
Relevant log output
Code of Conduct
- I agree to follow this project's Code of Conduct