sigstore-rs
sigstore-rs copied to clipboard
sigstore
An experimental Rust crate for sigstore
I'm interested in package signing support in crates.io + cargo using Sigstore. After looking through some of the earlier discussions from @lukehinds and others, it seems to me that the...
Here is the issue to align how models in the various repos are generated: https://github.com/sigstore/protobuf-specs/issues/3 Also, more detailed discussion [here](https://github.com/sigstore/sigstore-rs/issues/166#issuecomment-1322365225).
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.2 to 4.1.4. Release notes Sourced from actions/checkout's releases. v4.1.4 What's Changed Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692 Add dependabot config by @cory-miller in...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start)...
Updates the requirements on [testcontainers](https://github.com/testcontainers/testcontainers-rs) to permit the latest version. Release notes Sourced from testcontainers's releases. v0.16.3 Details Bug Fixes Expose mount-related types (#603) Migration guide See the migration guide...
Requires #326. - [ ] Detached materials - [ ] 0.3 bundles - [X] Staging instance - [X] Custom trust root Current failing tests: ``` FAILED test/test_bundle.py::test_verify_v_0_3 - test.client.ClientFail: FAILED...
Updates the requirements on [webbrowser](https://github.com/amodm/webbrowser-rs) to permit the latest version. Release notes Sourced from webbrowser's releases. v1.0.0 Releasing v1.0.0 with the following changes: Added Move to 1.0 🎉 ! MSRV...
Allow to create `static` instances of the `cosign::Client`, `sigstore::trust::ManualTrustRoot`. The ability to create `static` instances of these objects can simplify the downstream consumers of this library. The approach taken to...
**Description** The [`ManualTrustRoot`](https://docs.rs/sigstore/0.9.0/sigstore/trust/struct.ManualTrustRoot.html) struct leaks the `rustls_pki_types::CertificateDer` type inside of its public API. Should we use instead the [`sigstore::registry::config::Certificate`](https://docs.rs/sigstore/0.9.0/sigstore/registry/config/struct.Certificate.html) type? If we were to make this change, we would have...