Option to verify in-toto metadata on OS or container

cnabio / signy

Go implementation for CNAB content trust verification using TUF, Notary, and in-toto

MIT License

31 stars 11 forks source link

Option to verify in-toto metadata on OS or container #73

Closed trishankatdatadog closed 4 years ago

trishankatdatadog commented 4 years ago

Also, simplify TUF+in-toto verification logic.

However, this breaks the example inspection, because we are using an example root layout that expects us to copy a particular target file that has nothing to do with CNAB. I will fix that in the next PR.