cnabio / signy

Go implementation for CNAB content trust verification using TUF, Notary, and in-toto
MIT License
31 stars 11 forks source link

Option to verify in-toto metadata on OS or container #75

Closed trishankatdatadog closed 4 years ago

trishankatdatadog commented 4 years ago

Also:

However, this breaks the example inspection, because we are using an example root layout that expects us to copy a particular target file that has nothing to do with CNAB. I will fix that in the next PR.

This PR supercedes #73 (closed for messy git history while testing GitHub Actions).