mirror of
https://github.com/moby/buildkit.git
synced 2026-11-06 05:16:45 +00:00
Pass explicit cache log thresholds to policy-helpers during signature verification. Preserve the distinction between an omitted threshold and zero. Omission uses the bundle-derived default, while zero skips log verification and requires a verified TSA timestamp. Remove the local log threshold check, which counted log timestamps rather than verified logs and could reject valid inclusion-proof-only entries. Keep timestamp and certificate policy checks in place. Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>