in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
https://witness.dev
Apache License 2.0
416 stars 60 forks source link

Updated witness to use changes made to `cryptoutil.DigestValue` implemented in go-witness #371

Closed ChaosInTheCRD closed 10 months ago

ChaosInTheCRD commented 10 months ago

This is a quick PR after noticing that witness/main does not work with go-witness main due to changes merged in https://github.com/in-toto/go-witness/pull/139.

@mikhailswift I set the GitOID field to false everywhere, which I am not 100% is correct. If you could give this a review, please let me know if these fields need set differently.