search

sigstore / sigstore-rs

An experimental Rust crate for sigstore
https://sigstore.github.io/sigstore-rs/sigstore/
Apache License 2.0
156 stars 48 forks source link

fix: allow `ManualTrustRoot` to hold multiple Rekor keys #349

Closed flavio closed 2 months ago

flavio commented 2 months ago

The sigstore::trust::sigstore::SigstoreTrustRoot can hold multiple Rekor keys.

The possibility to have multiple keys is also reflected by the sigstore::trust::TrustRoot.rekor_keys trait.

This commit allows the ManualTrustRoot object to hold multiple Rekor keys.

flavio commented 2 months ago

Closing, this is part of https://github.com/sigstore/sigstore-rs/pull/311