Aditya Sirish

Blocked for now by #219

@wlynch this PR has a large diff but it's largely in tests. I've reimplemented three gitinterface APIs using the Git binary in place of go-git. They are GetFilePathsChangedByCommitUsingBinary, KnowsCommitUsingBinary, and...

With this feature flag enabled, we see some significant performance improvements when verifying file policies. It'll be interesting to see if we can help go-git with improvements by comparing the...

@pjbgf apologies for the delay, I'll try and capture those ASAP. We added support for profiling recently (#284).

Closing in favour of #367

Local only commits are not made available to remote users. The RSL entry represents a state of a ref that others check out and consume. If branch `feature` builds off...

I think focusing on client side hoods is fine for now. Moving server side gittuf implementation details to another ticket sounds good to me.

Thinking about it, signing the install script would mean the user would have to verify the signature on that before executing it. Even if you could make it a convenient...

> I've played around a bit and had a look at the code. It appears that at the moment policies can be defined on any kind of path pattern, and...

Hi @nealmcb, thanks for flagging this! To confirm, you created new keys while following the guide, yes? Is the key encrypted by any chance? We have a major hole at...