Aditya Sirish

This issue is partly handled by #225. More work is still needed to provide options for bootstrapping the first set of root keys, so I'll leave this open.

yes! we need to start using gittuf on this repository ASAP. I added some immediate blockers here: https://github.com/gittuf/gittuf/issues/230#issuecomment-1939528529

@patzielinski can you take a look as well?

> However, I was wondering if it was considered to have annotations branch out of the annotated rsl entry. I'm not sure I fully understand this, could you provide an...

Okay, I understand better now. This is a little off topic, so if we continue discussing this beyond message, please open an issue. The reason we don't do this right...

> What would be interesting is whether it's possible to have a gittuf policy that enforces hooks, which would mean having a policy on something that is not in git...

~~By using the underlying git binary for actions users would other use the git CLI for, we can directly pass on the appropriate arguments without having to also implement them...

cc @JustinCappos @wlynch Please also suggest other cases we want to test for.

> For example: does *.txt match abc/foo.txtfile or allfiles.txt/foo? I think the answer should be no in both cases Yep, fnmatch would not match either of those.

I added test cases for both of your examples (with some minor changes).