import type { AttestationMeasurement } from './types.js';
export interface VerifiedCodeMeasurement {
    measurement: AttestationMeasurement;
    releaseTag: string;
}
/**
 * Verifies a Sigstore bundle.
 * Validates the DSSE envelope signature, certificate identity policy,
 * Rekor log consistency, and extracts the measurement payload.
 *
 * @param bundleJson - The Sigstore bundle JSON data
 * @param digest - The expected hex-encoded SHA256 digest of the DSSE payload
 * @param repo - The repository name
 * @returns The verified measurement data
 * @throws Error if verification fails or digests don't match
 */
export declare function verifySigstoreBundle(bundleJson: unknown, digest: string, repo: string, expectedReleaseTag?: string): Promise<VerifiedCodeMeasurement>;
//# sourceMappingURL=sigstore.d.ts.map