WIP: Adding support for multiple envelope types

in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

https://witness.dev

Apache License 2.0

416 stars 60 forks source link

WIP: Adding support for multiple envelope types #341

Closed ChaosInTheCRD closed 10 months ago

ChaosInTheCRD commented 11 months ago

It is very janky, probably doesn't work correctly depending on what flags you pass, but at least in a poc form there's support for COSE envelope type as well as DSSE. This implements the changes made in https://github.com/in-toto/go-witness/pull/109

jkjell commented 10 months ago

Close this for now as well. See https://github.com/in-toto/go-witness/pull/109