search

sigstore / model-transparency

Supply chain security for ML
Apache License 2.0
99 stars 27 forks source link

Add support for using a private Sigstore stack #208

Open font opened 3 weeks ago

font commented 3 weeks ago

Description

Some use-cases involve standing up a private instance of the Sigstore stack as users do not want to upload private data to the public good instance (PGI). For these cases, we need to support the signing of models using a private Sigstore stack of at least the Rekor transparency log, but could also include a private instance of a Fulcio CA for a private keyless auth flow.

haydentherapper commented 3 weeks ago

This should be straightforward to add, as sigstore-python supports providing URLs for the Rekor and Fulcio instances, along with either a URL for the TUF repo or a trusted root file.

haydentherapper commented 3 weeks ago

Here are more details: https://github.com/sigstore/sigstore-python?tab=readme-ov-file#configuring-a-custom-root-of-trust-byo-pki