search

sigstore / sigstore-java

java clients for sigstore
Apache License 2.0
37 stars 20 forks source link

Make bundle a first class type -- part 1 #701

Closed loosebazooka closed 3 months ago

loosebazooka commented 3 months ago

Create Bundle type

This does not expose the bundle type to users, it's still keyless singature in the APIs.

This is just part of the process towards supporting verification of bundles with DSSE envelopes and timestamps.

BundleReader, BundleWriter and BundleVerifier are just old classes that have been moved around a tiny bit

loosebazooka commented 3 months ago

I guess it doesn't care about squashed commits if nothing has changed. That's nice.