feat(aqua): integrate native sigstore-verification for security verification

[jdx]

Summary

Replace external CLI dependencies (cosign, slsa-verifier, gh attestation verify) with native Rust implementation using the sigstore-verification crate. This provides better performance, reliability, and integration while reducing external tool dependencies.

Key Changes

• Native Cosign verification: Keyless and key-based signature verification
• Native SLSA provenance verification: Support for SLSA levels 1 and 2
• Native GitHub attestations verification: Direct integration without CLI tools
• Async Rust implementation: Replaces blocking CLI calls with proper async/await
• Enhanced user feedback: Uses ProgressReport for clear verification status messages
• DSSE format support: Handles both simple in-toto statements and DSSE envelopes
• Comprehensive e2e tests: Dedicated tests for each verification method

Technical Details

• Moved sigstore-verification crate to external repository at ~/src/sigstore-verification
• Fixed async runtime issues by removing nested Runtime::new().block_on() calls
• Added support for parsing DSSE envelope format and in-toto v0.1/v1 statements
• Updated SLSA verification to support level 1 provenance (used by sops)
• Applied MSRV compatibility and clippy fixes

Test Coverage

• test_aqua_cosign: Tests native Cosign signature verification
• test_aqua_slsa: Tests native SLSA provenance verification
• test_aqua_github_attestations: Tests native GitHub attestations verification

All tests verify that the native implementation is being used by checking for specific log messages during package installation.

🤖 Generated with Claude Code

[Copilot]

Pull Request Overview

This PR integrates native Rust-based sigstore verification into the aqua backend, replacing external CLI dependencies (cosign, slsa-verifier, gh attestation verify) with the sigstore-verification crate. This improves performance, reliability, and reduces external dependencies while maintaining the same security verification capabilities.

• Native implementation of Cosign, SLSA, and GitHub attestations verification using Rust
• Async/await pattern replacing blocking CLI calls for better performance
• New configuration option for GitHub attestations verification with comprehensive test coverage

Reviewed Changes

Copilot reviewed 12 out of 13 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
src/backend/aqua.rs	Core implementation of native verification methods with async patterns
crates/aqua-registry/src/types.rs	Added GitHub attestations configuration structure
settings.toml	New GitHub attestations verification setting
schema/mise.json	JSON schema update for new setting
e2e/backend/test_aqua_*	End-to-end tests for each verification method
docs/dev-tools/backends/aqua.md	Documentation for security verification features
src/path.rs	Minor refactoring for string reference handling
src/cli/tool_stub.rs	Minor refactoring for string reference handling
Cargo.toml	Added sigstore-verification dependency

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

String matching on error messages is fragile and could break if the error message format changes. Consider using proper error types or error codes from the sigstore-verification crate instead of string matching.

[Copilot]

This shows proper error type matching for GitHub attestations. The SLSA verification error handling should follow the same pattern instead of string matching on error messages.

[github-actions]

Hyperfine Performance

mise x -- echo

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
mise-2025.9.12 x -- echo	19.2 ± 0.3	18.7	21.8	1.00
mise x -- echo	19.5 ± 0.3	18.9	22.6	1.02 ± 0.02

mise env

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
mise-2025.9.12 env	18.6 ± 0.5	18.0	22.8	1.00
mise env	18.9 ± 0.4	18.3	21.2	1.01 ± 0.03

mise hook-env

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
mise-2025.9.12 hook-env	18.3 ± 0.3	17.7	20.3	1.00
mise hook-env	18.6 ± 0.5	17.9	22.5	1.02 ± 0.03

mise ls

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
mise-2025.9.12 ls	16.1 ± 0.3	15.6	17.5	1.00
mise ls	16.3 ± 0.3	15.7	18.5	1.02 ± 0.03

xtasks/test/perf

Command	mise-2025.9.12	mise	Variance
install (cached)	164ms	✅ 102ms	+60%
ls (cached)	62ms	62ms	+0%
bin-paths (cached)	67ms	68ms	-1%
task-ls (cached)	465ms	475ms	-2%

✅ Performance improvement: install cached is 60%

[Copilot]

Pull Request Overview

Copilot reviewed 16 out of 17 changed files in this pull request and generated 4 comments.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Using unwrap_or with a default filename 'provenance.json' could lead to confusing behavior if multiple tools use HTTP-based SLSA provenance. Consider using a more specific default like 'provenance-{tool}-{version}.json' or handling the case where the URL doesn't contain a valid filename more explicitly.

Suggested change

	let provenance_filename =
	url.split('/').next_back().unwrap_or("provenance.json");
	let path = tv.download_path().join(provenance_filename);
	let provenance_filename = url
	.split('/')
	.next_back()
	.filter(|s| !s.is_empty())
	.map(|s| s.to_string())
	.unwrap_or_else(|| format!("provenance-{}-{}.json", pkg.name, v));
	let path = tv.download_path().join(&provenance_filename);

[Copilot]

Similar to the provenance filename issue, using a generic default 'cosign.pub' could cause filename conflicts when multiple tools use key-based verification. Consider using a more specific default that includes the tool name or version.

Suggested change

	let key_filename = key_arg.split('/').next_back().unwrap_or("cosign.pub");
	let key_filename = key_arg
	.split('/')
	.next_back()
	.filter(|s| !s.is_empty())
	.map(|s| s.to_string())
	.unwrap_or_else(|| format!("{}-{}-cosign.pub", pkg.name, v.version));

[Copilot]

The default signature filename 'checksum.sig' is too generic and could cause conflicts. Consider using a more specific naming pattern that includes the tool name or a unique identifier.

Suggested change

	sig_arg.split('/').next_back().unwrap_or("checksum.sig");
	sig_arg.split('/').next_back().unwrap_or(&format!("{}_{}_checksum.sig", pkg.name, v));

[Copilot]

The default bundle filename 'bundle.json' is too generic and could cause conflicts between different tools. Consider using a more specific naming pattern.

Suggested change

	let filename = bundle_arg.split('/').next_back().unwrap_or("bundle.json");
	let filename = bundle_arg
	.split('/')
	.next_back()
	.filter(|f| !f.is_empty())
	.map(|f| f.to_string())
	.unwrap_or_else(|| format!("{}-{}-bundle.json", pkg, v));