remove reference to signer annotation

Signed-off-by: Brian DeHamer <[email protected]>
sigstore · Mar 29, 2024 · 8892db3 · 8892db3
1 parent 8b769d5
commit 8892db3
Showing 1 changed file with 0 additions and 5 deletions.
diff --git a/specs/BUNDLE_SPEC.md b/specs/BUNDLE_SPEC.md
@@ -243,8 +243,6 @@ when it was created:
   bundle.
 - `dev.sigstore.bundle.predicateType` - When the bundle contains a DSSE-wrapped
   in-toto statement, the statement's predicate can be reflected here.
-- `dev.sigstore.bundle.signer` - Identity of the application which generated the
-  attestation bundle.
 - `org.opencontainers.image.created` - Date and time when the attestation bundle
   was created, conforming to
   [RFC 3339](https://tools.ietf.org/html/rfc3339#section-5.6) (this is one of
@@ -261,7 +259,6 @@ These annotations should be included as part of the bundle manifest:
   "annotations": {
     "dev.sigstore.bundle.content": "dsse-envelope",
     "dev.sigstore.bundle.predicateType": "https://slsa.dev/provenance/v1",
-    "dev.sigstore.bundle.signer": "cosign/v2.2.3 (darwin; arm64)",
     "org.opencontainers.image.created": "2024-03-08T18:18:20.406Z"
   },
   "config": {
@@ -300,7 +297,6 @@ the following:
       "mediaType": "application/vnd.oci.image.manifest.v1+json",
       "annotations": {
         "dev.sigstore.bundle.content": "message-signature",
-        "dev.sigstore.bundle.signer": "cosign/v2.2.3 (darwin; arm64)",
         "org.opencontainers.image.created": "2024-03-07T18:17:38.000Z"
       }
     },
@@ -311,7 +307,6 @@ the following:
       "annotations": {
         "dev.sigstore.bundle.content": "dsse-envelope",
         "dev.sigstore.bundle.predicateType": "https://slsa.dev/provenance/v1",
-        "dev.sigstore.bundle.signer": "cosign/v2.2.3 (darwin; arm64)",
         "org.opencontainers.image.created": "2024-03-08T18:18:20.406Z"
       }
     }