-
**Description**
_I've filed similar issues under Cosign and Fulcio. I realise there's a lot of overlap in maintainers, but wanted to make sure that we discuss each project that we plan to touch. Ap…
-
**Description**
In a Bring your Own PKI scenario, a user may want to specify a CRL file ( in addition to a fullchain file ) that can be used to check if the certificate embedded in a signature arti…
-
**Describe the feature request**
Include container signatures and verification as part of Istio WASM adoption. The WASM extension will soon be supporting fetching OCI images, this proposal is to add …
asraa updated
2 years ago
-
**Description**
Currently trying to run `docker-compose up -d` fails on an M1 (arm64) Mac because the `golang` images "pinned" in the Dockerfiles are amd64-specific, which makes the development on ne…
-
Users can sign images produced with `ko publish` using tools like [`cosign`](https://github.com/sigstore/cosign).
For example:
```
$ cosign sign -key cosign.key $(ko publish ./)
```
`ko res…
-
**Description**
It looks like we run `go build` on some of the tools used in the probers. It might be worth investigating if we can just pull those in from a prebuilt image each run which would sav…
-
This issues proposes what the (long-term) APIs will look like. Looking for comments, nothing set in stone.
### 1. Hash engine
Tracked in https://github.com/sigstore/model-transparency/issues/140
…
-
There are some projects that requires commits to be GPG-signed to verify the authenticity of a contributor. Gitpod should be able make commits GPG-signed as a preference or automatically like browser-…
sr229 updated
8 months ago
-
Howdy! We just had to turn off release attestations to get our releases running in [langchain-ai/langchain](https://github.com/langchain-ai/langchain). Haven't had a chance to dig deeper into attestat…
-
**Description**
There are several FAQs under https://docs.sigstore.dev/ They should be combined into one FAQ with headers for different sections and be placed under the help header.
All links…