-
**Description**
_Copied from https://sigstore.slack.com/archives/C049ALX6Q83/p1709072587850229_
tl;dr - Sigstore TUF metadata has evolved, but Cosign and Scaffolding are lagging behind. We n…
-
### Rules
- [X] I made myself familiar with the Readme, FAQ and Troubleshooting.
- [X] I understand that, if insufficient information or no app logs will be provided, my issue will be closed witho…
-
**Link to simple, reproducible example patch**
https://cables.gl/p/B9TXjr
**Describe the bug**
If the Popout Canvas is open before adding a MediaRecorder op, it doesn't find the canvas. If I clos…
-
**Description of issue or feature request**:
Add Vale linter for TUF documentation
**Current behavior**:
Currently, the TUF documentation does not utilize a linter to ensure consistency and…
-
Kindly contribute only the model you wish to see supported in 2024 in a single comment. If your chosen model is already mentioned, please give it a thumbs up. The more thumbs up a model receives, the …
-
**Description**
I've been thinking about private deployments in which consumers will trust artifacts signed in both their private environment and from the public good instance. Currently, clien…
-
Blog posts about TUF need to be added to the homepage. Went through the first five pages of a Google search and found quite a few blog posts; some of them are really good. Title and links to the blog …
-
**Router Model Affected**
TUF-AX3000
**Firmware Version Affected**
Stable: 386.07_2-gnuton1
**Is this bug present in upstream Merlin releases too?**
No
**Describe the bug**
Don't install …
-
Instead of the first output message being a single sentence, print out the default branch and out of band commit like this:
```
Setting:
Branch: main
out-of…
-
Looking at https://github.com/ossf/scorecard-webapp/tree/f55dfbf0ddc1620a716f571636569e01e2e222c5/app/server, it appears that the Sigstore trust root metadata, `rekor.pub` and `fulcio_v1.crt` and the …