dependencies: Try to find a working sigstore version/commit

jku / repository-playground

Community artifact repository workflow experiments

Other

7 stars 4 forks source link

Closed jku closed 1 year ago

jku commented 1 year ago

sigstore-python 1.1.2 requires tuf ~= 2.1, this does not work because playground requires tuf 3
Newer sigstore-python releases have not been made yet
sigstore-python main branch does not work because the API has changed in multiple ways that securesystemslib does not support yet

This commit seems to be one of the few that could work:

jku commented 1 year ago

Filed #113 for longer term sanity in dependency versions

jku commented 1 year ago

Merging: sigstore support is broken currently, this can't make things worse (?)