Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
571	0	EP	call site: 00000	model_signing.signing.Config.sign

1


           atheris.FuzzedDataProvider

[function] [call site] 00001

1


           fdp.ConsumeIntInRange

[function] [call site] 00002

1


           fdp.ConsumeBytes

[function] [call site] 00003

1


           tempfile.NamedTemporaryFile

[function] [call site] 00004

1


           pathlib.Path

[function] [call site] 00005

1


           tmp_tr.write

[function] [call site] 00006

1


           <builtin>.str

[function] [call site] 00007

1


           sigstore.models.TrustedRoot.from_file

[function] [call site] 00008

2


             pathlib.Path

[function] [call site] 00009

2


             pathlib.Path.read_bytes

[function] [call site] 00010

2


             sigstore_models.trustroot.v1.TrustedRoot.from_json

[function] [call site] 00011

2


             sigstore.models.TrustedRoot.__init__

[function] [call site] 00012

3


               sigstore.models.TrustedRoot._verify

[function] [call site] 00013

4


                 enum.Enum.__init__

[function] [call site] 00014

1


           os.unlink

[function] [call site] 00015

1


           tempfile.TemporaryDirectory

[function] [call site] 00016

1


           tempfile.TemporaryDirectory

[function] [call site] 00017

1


           tempfile.TemporaryDirectory

[function] [call site] 00018

1


           tempfile.TemporaryDirectory

[function] [call site] 00019

1


           pathlib.Path

[function] [call site] 00020

1


           utils.create_fuzz_files

[function] [call site] 00021

1


           utils.any_files

[function] [call site] 00022

1


           pathlib.Path

[function] [call site] 00023

1


           pathlib.Path

[function] [call site] 00024

1


           ...model-transparency.tests.fuzzing.fuzz_simple_sigstore._patch_sigstore_get_dirs

[function] [call site] 00025

2


             importlib.import_module

[function] [call site] 00026

1


           ...model-transparency.tests.fuzzing.fuzz_simple_sigstore._patch_trust_updater_offline_default_true

[function] [call site] 00027

2


             importlib.import_module

[function] [call site] 00028

1


           pathlib.Path.write_bytes

[function] [call site] 00029

1


           fdp.ConsumeIntInRange

[function] [call site] 00030

1


           fdp.ConsumeBytes

[function] [call site] 00031

1


           pathlib.Path.write_bytes

[function] [call site] 00032

1


           pathlib.Path

[function] [call site] 00033

1


           fdp.ConsumeBytes

[function] [call site] 00034

1


           fdp.ConsumeBytes

[function] [call site] 00035

1


           fdp.ConsumeBytes

[function] [call site] 00036

1


           utils._build_hashing_config_from_fdp

[function] [call site] 00037

1


           model_signing.signing.Config.__init__

[function] [call site] 00038

2


             model_signing.hashing.Config.__init__

[function] [call site] 00039

3


               <builtin>.frozenset

[function] [call site] 00040

3


               model_signing.hashing.Config.use_file_serialization

[function] [call site] 00041

4


                 model_signing._serialization.file.Serializer.__init__

[function] [call site] 00042

5


                   pathlib.Path

[function] [call site] 00043

5


                   model_signing.hashing.Config._build_file_hasher_factory._factory

[function] [call site] 00044

6


                     model_signing._hashing.io.Blake3FileHasher.__init__

[function] [call site] 00045

7


                       blake3.blake3

[function] [call site] 00046

6


                     model_signing.hashing.Config._build_stream_hasher

[function] [call site] 00047

7


                       model_signing._hashing.memory.SHA256.__init__

[function] [call site] 00048

8


                         hashlib.sha256

[function] [call site] 00049

7


                       model_signing._hashing.memory.BLAKE2.__init__

[function] [call site] 00050

8


                         hashlib.blake2b

[function] [call site] 00051

7


                       model_signing._hashing.memory.BLAKE3.__init__

[function] [call site] 00052

8


                         blake3.blake3

[function] [call site] 00053

6


                     model_signing._hashing.io.SimpleFileHasher.__init__

[function] [call site] 00054

5


                   model_signing.manifest._FileSerialization.__init__

[function] [call site] 00055

6


                     <builtin>.str

[function] [call site] 00056

4


                 model_signing.hashing.Config._build_file_hasher_factory

[function] [call site] 00057

1


           model_signing.signing.Config.set_hashing_config

[function] [call site] 00058

1


           model_signing.signing.Config.use_sigstore_signer

[function] [call site] 00059

2


             model_signing._signing.sign_sigstore.Signer.__init__

[function] [call site] 00060

3


               sigstore.models.ClientTrustConfig.staging

[function] [call site] 00061

4


                 sigstore.models.ClientTrustConfig.from_tuf

[function] [call site] 00062

5


                   sigstore._internal.tuf.TrustUpdater.__init__

[function] [call site] 00063

6


                     url.rstrip

[function] [call site] 00064

6


                     sigstore._internal.tuf._get_dirs

[function] [call site] 00065

7


                       urllib.parse.quote

[function] [call site] 00066

7


                       platformdirs.user_data_dir

[function] [call site] 00067

7


                       pathlib.Path

[function] [call site] 00068

7


                       platformdirs.user_cache_dir

[function] [call site] 00069

7


                       pathlib.Path

[function] [call site] 00070

6


                     artifact_path.exists

[function] [call site] 00071

6


                     sigstore._utils.read_embedded

[function] [call site] 00072

7


                       urllib.parse.quote

[function] [call site] 00073

7


                       importlib_resources.files

[function] [call site] 00074

7


                       importlib.resources.files

[function] [call site] 00075

6


                     artifact_path.write_bytes

[function] [call site] 00076

6


                     _logger.debug

[function] [call site] 00077

6


                     _logger.debug

[function] [call site] 00078

6


                     _logger.warning

[function] [call site] 00079

6


                     sigstore._utils.read_embedded

[function] [call site] 00080

6


                     bootstrap_root.read_bytes

[function] [call site] 00081

6


                     tuf.ngclient.Updater

[function] [call site] 00082

6


                     <builtin>.str

[function] [call site] 00083

6


                     urllib.parse.urljoin

[function] [call site] 00084

6


                     <builtin>.str

[function] [call site] 00085

6


                     tuf.ngclient.UpdaterConfig

[function] [call site] 00086

6


                     tuf.ngclient.Updater.refresh

[function] [call site] 00087

5


                   sigstore._internal.tuf.TrustUpdater.get_trusted_root_path

[function] [call site] 00088

6


                     _logger.debug

[function] [call site] 00089

6


                     <builtin>.str

[function] [call site] 00090

6


                     tuf.ngclient.Updater.get_targetinfo

[function] [call site] 00091

6


                     tuf.ngclient.Updater.find_cached_target

[function] [call site] 00092

6


                     tuf.ngclient.Updater.download_target

[function] [call site] 00093

6


                     _logger.debug

[function] [call site] 00094

5


                   pathlib.Path

[function] [call site] 00095

5


                   pathlib.Path.read_bytes

[function] [call site] 00096

5


                   sigstore_models.trustroot.v1.TrustedRoot.from_json

[function] [call site] 00097

5


                   sigstore._internal.tuf.TrustUpdater.get_signing_config_path

[function] [call site] 00098

6


                     _logger.debug

[function] [call site] 00099

6


                     <builtin>.str

[function] [call site] 00100

6


                     tuf.ngclient.Updater.get_targetinfo

[function] [call site] 00101

6


                     tuf.ngclient.Updater.find_cached_target

[function] [call site] 00102

6


                     tuf.ngclient.Updater.download_target

[function] [call site] 00103

6


                     _logger.debug

[function] [call site] 00104

5


                   pathlib.Path

[function] [call site] 00105

5


                   pathlib.Path.read_bytes

[function] [call site] 00106

5


                   sigstore_models.trustroot.v1.SigningConfig.from_json

[function] [call site] 00107

5


                   sigstore.models.ClientTrustConfig.__init__

[function] [call site] 00108

5


                   sigstore_models.trustroot.v1.ClientTrustConfig

[function] [call site] 00109

3


               sigstore.models.ClientTrustConfig.from_json

[function] [call site] 00110

4


                 sigstore_models.trustroot.v1.ClientTrustConfig.from_json

[function] [call site] 00111

4


                 sigstore.models.ClientTrustConfig.__init__

[function] [call site] 00112

3


               trust_config.read_text

[function] [call site] 00113

3


               sigstore.models.ClientTrustConfig.production

[function] [call site] 00114

4


                 sigstore.models.ClientTrustConfig.from_tuf

[function] [call site] 00115

3


               trust_config.signing_config.get_oidc_url

[function] [call site] 00116

3


               sigstore.oidc.Issuer.__init__

[function] [call site] 00117

4


                 requests.Session

[function] [call site] 00118

4


                 urllib.parse.urljoin

[function] [call site] 00119

4


                 resp.raise_for_status

[function] [call site] 00120

4


                 resp.json

[function] [call site] 00121

4


                 pydantic.BaseModel.model_validate

[function] [call site] 00122

3


               sigstore.sign.SigningContext.from_trust_config

[function] [call site] 00123

4


                 sigstore.sign.SigningContext.__init__

[function] [call site] 00124

4


                 signing_config.get_fulcio

[function] [call site] 00125

4


                 signing_config.get_tlogs

[function] [call site] 00126

4


                 signing_config.get_tsas

[function] [call site] 00127

1


           model_signing.signing.Config.sign

[function] [call site] 00128

2


             model_signing.signing.Config.use_sigstore_signer

[function] [call site] 00129

2


             model_signing.hashing.Config.hash

[function] [call site] 00130

3


               pathlib.Path

[function] [call site] 00131

3


               pathlib.Path.relative_to

[function] [call site] 00132

3


               ignored_paths.append

[function] [call site] 00133

3


               ignored_paths.extend

[function] [call site] 00134

3


               model_signing._serialization.file_shard.Serializer.set_allow_symlinks

[function] [call site] 00135

4


                 pathlib.Path

[function] [call site] 00136

4


                 model_signing.hashing.Config._build_sharded_file_hasher_factory._factory

[function] [call site] 00137

5


                   model_signing.hashing.Config._build_stream_hasher

[function] [call site] 00138

5


                   model_signing._hashing.io.ShardedFileHasher.__init__

[function] [call site] 00139

6


                     <builtin>.super

[function] [call site] 00140

6


                     model_signing._hashing.io.ShardedFileHasher.set_shard

[function] [call site] 00141

4


                 model_signing.manifest._ShardSerialization.__init__

[function] [call site] 00142

5


                   <builtin>.str

[function] [call site] 00143

3


               model_signing._serialization.file.Serializer.set_allow_symlinks

[function] [call site] 00144

4


                 pathlib.Path

[function] [call site] 00145

4


                 model_signing.hashing.Config._build_file_hasher_factory._factory

[function] [call site] 00146

4


                 model_signing.manifest._FileSerialization.__init__

[function] [call site] 00147

3


               model_signing._serialization.file_shard.Serializer.serialize

[function] [call site] 00148

4


                 itertools.chain

[function] [call site] 00149

4


                 model_path.glob

[function] [call site] 00150

4


                 model_signing._serialization.serialization.should_ignore

[function] [call site] 00151

5


                   path.is_relative_to

[function] [call site] 00152

5


                   <builtin>.any

[function] [call site] 00153

4


                 model_signing._serialization.serialization.check_file_or_directory

[function] [call site] 00154

5


                   path.is_symlink

[function] [call site] 00155

5


                   path.is_file

[function] [call site] 00156

5


                   path.is_dir

[function] [call site] 00157

4


                 path.is_file

[function] [call site] 00158

4


                 model_signing._serialization.file_shard.Serializer._get_shards

[function] [call site] 00159

5


                   path.stat

[function] [call site] 00160

5


                   model_signing._serialization.file_shard._endpoints

[function] [call site] 00161

6


                     <builtin>.range

[function] [call site] 00162

5


                   shards.append

[function] [call site] 00163

4


                 shards.extend

[function] [call site] 00164

4


                 concurrent.futures.ThreadPoolExecutor

[function] [call site] 00165

4


                 tpe.submit

[function] [call site] 00166

4


                 concurrent.futures.as_completed

[function] [call site] 00167

4


                 future.result

[function] [call site] 00168

4


                 manifest_items.append

[function] [call site] 00169

4


                 os.path.relpath

[function] [call site] 00170

4


                 rp.startswith

[function] [call site] 00171

4


                 pathlib.Path

[function] [call site] 00172

4


                 rel_ignore_paths.append

[function] [call site] 00173

4


                 pathlib.Path

[function] [call site] 00174

4


                 model_signing.hashing.Config._build_sharded_file_hasher_factory._factory

[function] [call site] 00175

4


                 model_signing.manifest._ShardSerialization.__init__

[function] [call site] 00176

4


                 <builtin>.list

[function] [call site] 00177

4


                 <builtin>.frozenset

[function] [call site] 00178

4


                 model_path.resolve

[function] [call site] 00179

4


                 os.path.basename

[function] [call site] 00180

4


                 model_signing.manifest.Manifest.__init__

[function] [call site] 00181

3


               model_signing._serialization.file.Serializer.serialize

[function] [call site] 00182

4


                 itertools.chain

[function] [call site] 00183

4


                 model_path.glob

[function] [call site] 00184

4


                 model_signing._serialization.serialization.should_ignore

[function] [call site] 00185

4


                 model_signing._serialization.serialization.check_file_or_directory

[function] [call site] 00186

4


                 path.is_file

[function] [call site] 00187

4


                 paths.append

[function] [call site] 00188

4


                 concurrent.futures.ThreadPoolExecutor

[function] [call site] 00189

4


                 tpe.submit

[function] [call site] 00190

4


                 concurrent.futures.as_completed

[function] [call site] 00191

4


                 future.result

[function] [call site] 00192

4


                 manifest_items.append

[function] [call site] 00193

4


                 os.path.relpath

[function] [call site] 00194

4


                 rp.startswith

[function] [call site] 00195

4


                 pathlib.Path

[function] [call site] 00196

4


                 rel_ignore_paths.append

[function] [call site] 00197

4


                 pathlib.Path

[function] [call site] 00198

4


                 model_signing.hashing.Config._build_file_hasher_factory._factory

[function] [call site] 00199

4


                 model_signing.manifest._FileSerialization.__init__

[function] [call site] 00200

4


                 <builtin>.list

[function] [call site] 00201

4


                 <builtin>.frozenset

[function] [call site] 00202

4


                 model_path.resolve

[function] [call site] 00203

4


                 os.path.basename

[function] [call site] 00204

4


                 model_signing.manifest.Manifest.__init__

[function] [call site] 00205

3


               pathlib.Path

[function] [call site] 00206

2


             model_signing._signing.signing.Payload.__init__

[function] [call site] 00207

3


               model_signing._hashing.memory.SHA256.__init__

[function] [call site] 00208

3


               model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00209

4


                 <builtin>.sorted

[function] [call site] 00210

4


                 <builtin>.str

[function] [call site] 00211

3


               model_signing._hashing.memory.SHA256.update

[function] [call site] 00212

3


               resources.append

[function] [call site] 00213

3


               model_signing._hashing.memory.SHA256.compute

[function] [call site] 00214

3


               statement.ResourceDescriptor

[function] [call site] 00215

3


               statement.Statement

[function] [call site] 00216

2


             model_signing._signing.sign_ec_key.Signer.sign

[function] [call site] 00217

3


               google.protobuf.json_format.MessageToJson

[function] [call site] 00218

3


               sigstore_models.intoto.Signature

[function] [call site] 00219

3


               base64.b64encode

[function] [call site] 00220

3


               model_signing._signing.sign_sigstore_pb.pae

[function] [call site] 00221

4


                 <builtin>.len

[function] [call site] 00222

4


                 <builtin>.len

[function] [call site] 00223

3


               model_signing._signing.sign_ec_key.get_ec_key_hash

[function] [call site] 00224

3


               cryptography.hazmat.primitives.asymmetric.ec.ECDSA.__init__

[function] [call site] 00225

4


                 cryptography.hazmat.backends.openssl.backend.Backend.ecdsa_deterministic_supported

[function] [call site] 00226

3


               sigstore_models.intoto.Envelope

[function] [call site] 00227

3


               base64.b64encode

[function] [call site] 00228

3


               model_signing._signing.sign_sigstore_pb.Signature.__init__

[function] [call site] 00229

3


               sigstore_models.bundle.v1.Bundle

[function] [call site] 00230

3


               model_signing._signing.sign_ec_key.Signer._get_verification_material

[function] [call site] 00231

4


                 public_key.public_bytes

[function] [call site] 00232

4


                 hashlib.sha256

[function] [call site] 00233

4


                 sigstore_models.bundle.v1.VerificationMaterial

[function] [call site] 00234

4


                 sigstore_models.common.v1.PublicKeyIdentifier

[function] [call site] 00235

3


               model_signing._signing.sign_certificate.Signer._get_verification_material

[function] [call site] 00236

4


                 model_signing._signing.sign_certificate.Signer._get_verification_material._to_protobuf_certificate

[function] [call site] 00237

5


                   sigstore_models.common.v1.X509Certificate

[function] [call site] 00238

5


                   base64.b64encode

[function] [call site] 00239

5


                   certificate.public_bytes

[function] [call site] 00240

4


                 chain.extend

[function] [call site] 00241

4


                 model_signing._signing.sign_certificate.Signer._get_verification_material._to_protobuf_certificate

[function] [call site] 00242

4


                 sigstore_models.bundle.v1.VerificationMaterial

[function] [call site] 00243

4


                 sigstore_models.common.v1.X509CertificateChain

[function] [call site] 00244

2


             model_signing._signing.sign_pkcs11.Signer.sign

[function] [call site] 00245

3


               google.protobuf.json_format.MessageToJson

[function] [call site] 00246

3


               model_signing._signing.sign_ec_key.get_ec_key_hash

[function] [call site] 00247

3


               model_signing._signing.sign_sigstore_pb.pae

[function] [call site] 00248

3


               hash.update

[function] [call site] 00249

3


               hash.finalize

[function] [call site] 00250

3


               PyKCS11.Mechanism

[function] [call site] 00251

3


               asn1crypto.algos.DSASignature.from_p1363

[function] [call site] 00252

3


               base64.b64encode

[function] [call site] 00253

3


               sigstore_models.intoto.Signature

[function] [call site] 00254

3


               sigstore_models.intoto.Envelope

[function] [call site] 00255

3


               base64.b64encode

[function] [call site] 00256

3


               model_signing._signing.sign_sigstore_pb.Signature.__init__

[function] [call site] 00257

3


               sigstore_models.bundle.v1.Bundle

[function] [call site] 00258

3


               model_signing._signing.sign_pkcs11.Signer._get_verification_material

[function] [call site] 00259

4


                 public_key.public_bytes

[function] [call site] 00260

4


                 hashlib.sha256

[function] [call site] 00261

4


                 sigstore_models.bundle.v1.VerificationMaterial

[function] [call site] 00262

4


                 sigstore_models.common.v1.PublicKeyIdentifier

[function] [call site] 00263

3


               model_signing._signing.sign_pkcs11.CertSigner._get_verification_material

[function] [call site] 00264

4


                 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material._to_protobuf_certificate

[function] [call site] 00265

5


                   sigstore_models.common.v1.X509Certificate

[function] [call site] 00266

5


                   certificate.public_bytes

[function] [call site] 00267

4


                 chain.extend

[function] [call site] 00268

4


                 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material._to_protobuf_certificate

[function] [call site] 00269

4


                 sigstore_models.bundle.v1.VerificationMaterial

[function] [call site] 00270

4


                 sigstore_models.common.v1.X509CertificateChain

[function] [call site] 00271

2


             model_signing._signing.sign_sigstore.Signer.sign

[function] [call site] 00272

3


               sigstore.dsse.Statement.__init__

[function] [call site] 00273

4


                 <builtin>.isinstance

[function] [call site] 00274

4


                 pydantic.BaseModel.model_validate_json

[function] [call site] 00275

4


                 pydantic.BaseModel.model_dump_json

[function] [call site] 00276

3


               google.protobuf.json_format.MessageToJson

[function] [call site] 00277

3


               model_signing._signing.sign_sigstore.Signer._get_identity_token

[function] [call site] 00278

4


                 sigstore.oidc.IdentityToken.__init__

[function] [call site] 00279

5


                   jwt.decode

[function] [call site] 00280

5


                   sigstore.oidc.IdentityToken.in_validity_period

[function] [call site] 00281

6


                     datetime.datetime.now

[function] [call site] 00282

5


                   _KNOWN_OIDC_ISSUERS.get

[function] [call site] 00283

5


                   <builtin>.str

[function] [call site] 00284

5


                   <builtin>.str

[function] [call site] 00285

5


                   <builtin>.isinstance

[function] [call site] 00286

5


                   federated_claims.get

[function] [call site] 00287

5


                   <builtin>.isinstance

[function] [call site] 00288

4


                 sigstore.oidc.detect_credential

[function] [call site] 00289

5


                   id.detect_credential

[function] [call site] 00290

5


                   typing.cast

[function] [call site] 00291

5


                   sigstore.oidc.IdentityError.raise_from_id

[function] [call site] 00292

4


                 sigstore.oidc.IdentityToken.__init__

[function] [call site] 00293

4


                 sigstore.oidc.Issuer.identity_token

[function] [call site] 00294

5


                   sigstore._internal.oidc.oauth._OAuthFlow.__init__

[function] [call site] 00295

6


                     sigstore._internal.oidc.oauth._OAuthRedirectServer.__init__

[function] [call site] 00296

7


                       <builtin>.super

[function] [call site] 00297

7


                       sigstore._internal.oidc.oauth._OAuthSession.__init__

[function] [call site] 00298

8


                         uuid.uuid4

[function] [call site] 00299

8


                         <builtin>.str

[function] [call site] 00300

8


                         uuid.uuid4

[function] [call site] 00301

8


                         <builtin>.str

[function] [call site] 00302

8


                         typing.NewType

[function] [call site] 00303

8


                         os.urandom

[function] [call site] 00304

8


                         base64.urlsafe_b64encode

[function] [call site] 00305

6


                     threading.Thread

[function] [call site] 00306

5


                   webbrowser.open

[function] [call site] 00307

5


                   <builtin>.print

[function] [call site] 00308

5


                   server.enable_oob

[function] [call site] 00309

5


                   <builtin>.print

[function] [call site] 00310

5


                   server.is_oob

[function] [call site] 00311

5


                   time.sleep

[function] [call site] 00312

5


                   server.auth_response.get

[function] [call site] 00313

5


                   <builtin>.input

[function] [call site] 00314

5


                   logging.debug

[function] [call site] 00315

5


                   resp.raise_for_status

[function] [call site] 00316

5


                   resp.json

[function] [call site] 00317

5


                   token_json.get

[function] [call site] 00318

5


                   sigstore.oidc.IdentityToken.__init__

[function] [call site] 00319

3


               signer.sign_dsse

[function] [call site] 00320

3


               model_signing._signing.sign_sigstore.Signature.__init__

[function] [call site] 00321

2


             pathlib.Path

[function] [call site] 00322

2


             model_signing._signing.sign_sigstore_pb.Signature.write

[function] [call site] 00323

3


               path.write_text

[function] [call site] 00324

2


             model_signing._signing.sign_sigstore.Signature.write

[function] [call site] 00325

3


               path.write_text

[function] [call site] 00326

1


           pathlib.Path.exists

[function] [call site] 00327

1


           model_signing.verifying.Config.__init__

[function] [call site] 00328

1


           model_signing.verifying.Config.set_hashing_config

[function] [call site] 00329

1


           model_signing.verifying.Config.use_sigstore_verifier

[function] [call site] 00330

2


             model_signing._signing.sign_sigstore.Verifier.__init__

[function] [call site] 00331

3


               sigstore.models.ClientTrustConfig.from_json

[function] [call site] 00332

3


               trust_config.read_text

[function] [call site] 00333

3


               sigstore.models.ClientTrustConfig.staging

[function] [call site] 00334

3


               sigstore.models.ClientTrustConfig.production

[function] [call site] 00335

3


               sigstore.verify.policy.Identity.__init__

[function] [call site] 00336

4


                 sigstore.verify.policy._SingleX509ExtPolicy.__init__

[function] [call site] 00337

1


           model_signing.verifying.Config.verify

[function] [call site] 00338

2


             pathlib.Path

[function] [call site] 00339

2


             model_signing._signing.sign_sigstore.Signature.read

[function] [call site] 00340

3


               path.read_text

[function] [call site] 00341

3


               sigstore.models.Bundle.from_json

[function] [call site] 00342

4


                 sigstore_models.bundle.v1.Bundle.from_json

[function] [call site] 00343

4


                 sigstore.models.Bundle.__init__

[function] [call site] 00344

5


                   sigstore.models.Bundle._verify

[function] [call site] 00345

6


                     enum.Enum.__init__

[function] [call site] 00346

6


                     cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate

[function] [call site] 00347

6


                     cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate

[function] [call site] 00348

6


                     sigstore._utils.cert_is_leaf

[function] [call site] 00349

7


                       sigstore._utils.cert_is_ca

[function] [call site] 00350

8


                         cert.extensions.get_extension_for_oid

[function] [call site] 00351

8


                         cert.extensions.get_extension_for_oid

[function] [call site] 00352

7


                       cert.extensions.get_extension_for_oid

[function] [call site] 00353

7


                       cert.extensions.get_extension_for_oid

[function] [call site] 00354

6


                     sigstore._utils.cert_is_root_ca

[function] [call site] 00355

7


                       sigstore._utils.cert_is_ca

[function] [call site] 00356

7


                       cert.verify_directly_issued_by

[function] [call site] 00357

6


                     _logger.warning

[function] [call site] 00358

6


                     <builtin>.len

[function] [call site] 00359

6


                     sigstore.models.TransparencyLogEntry.__init__

[function] [call site] 00360

7


                       sigstore.models.TransparencyLogEntry._validate

[function] [call site] 00361

6


                     _logger.debug

[function] [call site] 00362

3


               model_signing._signing.sign_sigstore.Signature.__init__

[function] [call site] 00363

2


             pathlib.Path

[function] [call site] 00364

2


             model_signing._signing.sign_sigstore_pb.Signature.read

[function] [call site] 00365

3


               path.read_text

[function] [call site] 00366

3


               json.loads

[function] [call site] 00367

3


               sigstore_models.bundle.v1.Bundle.from_dict

[function] [call site] 00368

3


               model_signing._signing.sign_sigstore_pb.Signature.__init__

[function] [call site] 00369

2


             model_signing._signing.signing.Verifier.verify

[function] [call site] 00370

3


               model_signing._signing.signing.Verifier._verify_signed_content

[function] [call site] 00371

3


               model_signing._signing.sign_sigstore.Verifier._verify_signed_content

[function] [call site] 00372

4


                 typing.cast

[function] [call site] 00373

4


                 sigstore.verify.verifier.Verifier.verify_dsse

[function] [call site] 00374

5


                   sigstore.verify.verifier.Verifier._verify_common_signing_cert

[function] [call site] 00375

6


                     OpenSSL.crypto.X509Store

[function] [call site] 00376

6


                     OpenSSL.crypto.X509Store.set_flags

[function] [call site] 00377

6


                     OpenSSL.crypto.X509Store.add_cert

[function] [call site] 00378

6


                     sigstore.verify.verifier.Verifier._establish_time

[function] [call site] 00379

7


                       sigstore.verify.verifier.Verifier._verify_timestamp_authority

[function] [call site] 00380

8


                         <builtin>.len

[function] [call site] 00381

8


                         <builtin>.len

[function] [call site] 00382

8


                         <builtin>.set

[function] [call site] 00383

8


                         <builtin>.len

[function] [call site] 00384

8


                         <builtin>.len

[function] [call site] 00385

8


                         sigstore.verify.verifier.Verifier._verify_signed_timestamp

[function] [call site] 00386

9


                           certificate_authority.certificates

[function] [call site] 00387

9


                           <builtin>.len

[function] [call site] 00388

9


                           _logger.debug

[function] [call site] 00389

9


                           rfc3161_client.VerifierBuilder

[function] [call site] 00390

9


                           rfc3161_client.VerifierBuilder.tsa_certificate

[function] [call site] 00391

9


                           builder.add_intermediate_certificate

[function] [call site] 00392

9


                           builder.build

[function] [call site] 00393

9


                           verifier.verify_message

[function] [call site] 00394

9


                           _logger.debug

[function] [call site] 00395

9


                           _logger.debug

[function] [call site] 00396

7


                       verified_timestamps.extend

[function] [call site] 00397

7


                       verified_timestamps.append

[function] [call site] 00398

7


                       datetime.datetime.fromtimestamp

[function] [call site] 00399

6


                     <builtin>.len

[function] [call site] 00400

6


                     OpenSSL.crypto.X509.from_cryptography

[function] [call site] 00401

6


                     sigstore.verify.verifier.Verifier._verify_chain_at_time

[function] [call site] 00402

7


                       OpenSSL.crypto.X509Store

[function] [call site] 00403

7


                       OpenSSL.crypto.X509Store.set_flags

[function] [call site] 00404

7


                       OpenSSL.crypto.X509Store.add_cert

[function] [call site] 00405

7


                       OpenSSL.crypto.X509Store.set_time

[function] [call site] 00406

7


                       OpenSSL.crypto.X509StoreContext

[function] [call site] 00407

7


                       OpenSSL.crypto.X509StoreContext.get_verified_chain

[function] [call site] 00408

6


                     sigstore._internal.sct.verify_sct

[function] [call site] 00409

7


                       sigstore._internal.sct._get_signed_certificate_timestamp

[function] [call site] 00410

8


                         typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00411

8


                         <builtin>.len

[function] [call site] 00412

7


                       sigstore._internal.sct._get_issuer_cert

[function] [call site] 00413

8


                         sigstore._internal.sct._is_preissuer

[function] [call site] 00414

9


                           issuer.extensions.get_extension_for_class

[function] [call site] 00415

7


                       issuer_cert.public_key

[function] [call site] 00416

7


                       sigstore._internal.sct._cert_is_ca

[function] [call site] 00417

8


                         _logger.debug

[function] [call site] 00418

8


                         sigstore._utils.cert_is_ca

[function] [call site] 00419

8


                         _logger.debug

[function] [call site] 00420

7


                       <builtin>.isinstance

[function] [call site] 00421

7


                       sigstore._utils.key_id

[function] [call site] 00422

8


                         key.public_bytes

[function] [call site] 00423

8


                         hashlib.sha256

[function] [call site] 00424

8


                         typing.NewType

[function] [call site] 00425

7


                       sigstore._internal.sct._pack_digitally_signed

[function] [call site] 00426

8


                         <builtin>.len

[function] [call site] 00427

8


                         sigstore._internal.sct._pack_signed_entry

[function] [call site] 00428

9


                           typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00429

9


                           <builtin>.len

[function] [call site] 00430

9


                           fields.append

[function] [call site] 00431

9


                           struct.unpack

[function] [call site] 00432

9


                           <builtin>.len

[function] [call site] 00433

9


                           struct.pack

[function] [call site] 00434

9


                           <builtin>.len

[function] [call site] 00435

9


                           pack_format.format

[function] [call site] 00436

9


                           fields.extend

[function] [call site] 00437

9


                           struct.pack

[function] [call site] 00438

8


                         <builtin>.len

[function] [call site] 00439

8


                         sct.timestamp.replace

[function] [call site] 00440

8


                         struct.pack

[function] [call site] 00441

8


                         timestamp.timestamp

[function] [call site] 00442

8


                         <builtin>.int

[function] [call site] 00443

8


                         <builtin>.len

[function] [call site] 00444

7


                       <builtin>.isinstance

[function] [call site] 00445

7


                       sct.log_id.hex

[function] [call site] 00446

7


                       _logger.debug

[function] [call site] 00447

7


                       ct_keyring.verify

[function] [call site] 00448

7


                       typing.NewType

[function] [call site] 00449

6


                     parent_cert.to_cryptography

[function] [call site] 00450

6


                     typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00451

6


                     typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00452

6


                     sigstore.verify.policy.Identity.verify

[function] [call site] 00453

7


                       sigstore.verify.policy._SingleX509ExtPolicy.verify

[function] [call site] 00454

8


                         typing.cast.bundle.signing_certificate.extensions.get_extension_for_oid

[function] [call site] 00455

8


                         ext.value.decode

[function] [call site] 00456

7


                       typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00457

7


                       san_ext.get_values_for_type

[function] [call site] 00458

7


                       <builtin>.set

[function] [call site] 00459

7


                       san_ext.get_values_for_type

[function] [call site] 00460

7


                       all_sans.update

[function] [call site] 00461

7


                       all_sans.update

[function] [call site] 00462

7


                       on.value.decode

[function] [call site] 00463

7


                       san_ext.get_values_for_type

[function] [call site] 00464

6


                     _logger.debug

[function] [call site] 00465

6


                     typing.cast.bundle.log_entry._verify

[function] [call site] 00466

5


                   typing.cast.bundle.signing_certificate.public_key

[function] [call site] 00467

5


                   typing.cast

[function] [call site] 00468

5


                   sigstore.dsse._verify

[function] [call site] 00469

6


                     sigstore.dsse._pae

[function] [call site] 00470

7


                       <builtin>.len

[function] [call site] 00471

6


                     <builtin>.len

[function] [call site] 00472

6


                     cryptography.hazmat.primitives.asymmetric.ec.ECDSA.__init__

[function] [call site] 00473

6


                     typing.cast.verify

[function] [call site] 00474

5


                   sigstore.verify.verifier._validate_dsse_v002_entry_body

[function] [call site] 00475

6


                     sigstore_models.rekor.v2.entry.Entry.from_json

[function] [call site] 00476

6


                     sigstore._utils.sha256_digest

[function] [call site] 00477

7


                       <builtin>.isinstance

[function] [call site] 00478

7


                       <builtin>.isinstance

[function] [call site] 00479

7


                       hashlib.sha256

[function] [call site] 00480

7


                       sigstore._utils._sha256_streaming

[function] [call site] 00481

8


                         hashlib.sha256

[function] [call site] 00482

8


                         <builtin>.bytearray

[function] [call site] 00483

8


                         <builtin>.memoryview

[function] [call site] 00484

8


                         io.readinto

[function] [call site] 00485

8


                         sha256.update

[function] [call site] 00486

8


                         io.readinto

[function] [call site] 00487

8


                         sha256.digest

[function] [call site] 00488

6


                     sigstore_models.rekor.v2.verifier.Signature

[function] [call site] 00489

6


                     base64.b64encode

[function] [call site] 00490

6


                     sigstore.verify.verifier._v2_verifier_from_certificate

[function] [call site] 00491

7


                       typing.cast.bundle.signing_certificate.public_key

[function] [call site] 00492

7


                       <builtin>.isinstance

[function] [call site] 00493

7


                       <builtin>.isinstance

[function] [call site] 00494

7


                       <builtin>.isinstance

[function] [call site] 00495

7


                       <builtin>.isinstance

[function] [call site] 00496

7


                       sigstore_models.rekor.v2.verifier.Verifier

[function] [call site] 00497

7


                       sigstore_models.common.v1.X509Certificate

[function] [call site] 00498

7


                       base64.b64encode

[function] [call site] 00499

7


                       typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00500

5


                   sigstore.verify.verifier._validate_dsse_v001_entry_body

[function] [call site] 00501

6


                     rekor_types.Dsse.model_validate_json

[function] [call site] 00502

6


                     sigstore._utils.sha256_digest

[function] [call site] 00503

6


                     typing.cast.bundle._dsse_envelope._inner.payload.digest.hex

[function] [call site] 00504

6


                     rekor_types.dsse.Signature

[function] [call site] 00505

6


                     base64.b64encode

[function] [call site] 00506

6


                     sigstore._utils.base64_encode_pem_cert

[function] [call site] 00507

7


                       typing.NewType

[function] [call site] 00508

7


                       typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00509

7


                       base64.b64encode

[function] [call site] 00510

3


               json.loads

[function] [call site] 00511

3


               model_signing._signing.signing.dsse_payload_to_manifest

[function] [call site] 00512

4


                 model_signing._signing.signing.dsse_payload_to_manifest_compat

[function] [call site] 00513

5


                   model_signing.manifest.SerializationType.from_args

[function] [call site] 00514

6


                     subclass._from_args

[function] [call site] 00515

5


                   bytes.fromhex

[function] [call site] 00516

5


                   serialization.new_item

[function] [call site] 00517

5


                   items.append

[function] [call site] 00518

5


                   model_signing.manifest.Manifest.__init__

[function] [call site] 00519

4


                 <builtin>.len

[function] [call site] 00520

4


                 model_signing.manifest.SerializationType.from_args

[function] [call site] 00521

4


                 model_signing._hashing.memory.SHA256.__init__

[function] [call site] 00522

4


                 bytes.fromhex

[function] [call site] 00523

4


                 model_signing._hashing.memory.SHA256.update

[function] [call site] 00524

4


                 serialization.new_item

[function] [call site] 00525

4


                 items.append

[function] [call site] 00526

4


                 model_signing._hashing.memory.SHA256.compute

[function] [call site] 00527

4


                 model_signing.manifest.Manifest.__init__

[function] [call site] 00528

2


             model_signing.verifying.Config._guess_hashing_config

[function] [call site] 00529

3


               model_signing.hashing.Config.__init__

[function] [call site] 00530

3


               model_signing.hashing.Config.use_file_serialization

[function] [call site] 00531

3


               <builtin>.frozenset

[function] [call site] 00532

3


               model_signing.hashing.Config.__init__

[function] [call site] 00533

3


               model_signing.hashing.Config.use_shard_serialization

[function] [call site] 00534

4


                 model_signing.hashing.Config.use_file_serialization

[function] [call site] 00535

4


                 model_signing._serialization.file_shard.Serializer.__init__

[function] [call site] 00536

5


                   pathlib.Path

[function] [call site] 00537

5


                   model_signing.hashing.Config._build_sharded_file_hasher_factory._factory

[function] [call site] 00538

5


                   model_signing.manifest._ShardSerialization.__init__

[function] [call site] 00539

4


                 model_signing.hashing.Config._build_sharded_file_hasher_factory

[function] [call site] 00540

3


               <builtin>.frozenset

[function] [call site] 00541

2


             utils._build_hashing_config_from_fdp.add_ignored_paths

[function] [call site] 00542

2


             model_signing.hashing.Config.add_ignored_paths

[function] [call site] 00543

3


               <builtin>.set

[function] [call site] 00544

3


               pathlib.Path

[function] [call site] 00545

3


               pathlib.Path

[function] [call site] 00546

3


               pathlib.Path.relative_to

[function] [call site] 00547

3


               newset.add

[function] [call site] 00548

2


             model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00549

2


             model_signing.hashing.Config.hash

[function] [call site] 00550

2


             model_signing.verifying.Config._get_manifest_diff

[function] [call site] 00551

3


               model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00552

3


               model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00553

3


               actual_hashes.keys

[function] [call site] 00554

3


               <builtin>.set

[function] [call site] 00555

3


               <builtin>.set

[function] [call site] 00556

3


               expected_hashes.keys

[function] [call site] 00557

3


               diffs.append

[function] [call site] 00558

3


               <builtin>.sorted

[function] [call site] 00559

3


               expected_hashes.keys

[function] [call site] 00560

3


               <builtin>.set

[function] [call site] 00561

3


               <builtin>.set

[function] [call site] 00562

3


               actual_hashes.keys

[function] [call site] 00563

3


               diffs.append

[function] [call site] 00564

3


               <builtin>.sorted

[function] [call site] 00565

3


               actual_hashes.keys

[function] [call site] 00566

3


               <builtin>.set

[function] [call site] 00567

3


               expected_hashes.keys

[function] [call site] 00568

3


               <builtin>.set

[function] [call site] 00569

3


               <builtin>.sorted

[function] [call site] 00570

3


               diffs.append

[function] [call site] 00571

Fuzz blockers

Fuzzer calltree